skysight-inc/HackerNews huggingface dataset:
I have read all the TLS WG discussions I can find on this RFC. The picture that emerges for me is that of an inherent, institutional failure in the nature of working groups.

As far as I can tell, there was only one person that raised the "we don't need this" objection (Nikos Mavrogiannopoulos, GnuTLS principal author). He asked for a defense of the feature on three occasions [0] [1], and received a response twice, both responses from the same person. There was no further discussion, so either his objection was addressed or he felt further discussion would be unproductive. I would be interested to know which. GnuTLS does ship with heartbeat disabled, so it's possible Nikos continued to express skepticism about the feature.

However this document was eyeballed by many security experts, who I will not name and shame here, who proofread or made comments or edits to the document, without objecting to the general premise.

It seems to me that, inherent in the nature of a working group, the specific parties who are in favor of the feature will always be better represented than the interests of a wider audience that faces the nonspecific harm that the feature might be implemented poorly and introduce a security vulnerability. Sort of a reverse-NIMBY situation if you like. The software community cannot mobilize to combat every new TLS proposal on the grounds of nonspecific harm, but everybody with a pet feature can mobilize to make sure it is standardized.

[0] http://ietf.10.n7.nabble.com/tsv-dir-review-of-draft-ietf-tl...

[1] http://ietf.10.n7.nabble.com/Working-group-last-call-for-dra...
I ordered mine today and am super pumped to get it! When I got the email today about boosted raising the price to $2000 I was bummed. Then I saw this post on hacker news and it totally made my day.

How long did it take to ship and arrive after you ordered?
No, it's a problem of the language. If the tools wanted to avoid this problem, they'd be non-compliant.
Squeeze isn't vulnerable to heartbleed; the OpenSSL version is too old; heartbeat was introduced in 1.0.1, while Squeeze ships 0.9.8o.
Why do you think that it is "ridiculous" for people to be upset that a strong supporter of warrant-less wiretapping and PRISM is now a board member at the place they store their data?
Yes. Facebook's "cost of revenue" (which they state is mostly infrastructure) was $1.875 billion in 2013, a year when they made $1.5 billion in net income. For comparison, research and development was $1.4 billion.

Facebook's business model involves getting 1 billion people to post a ton of stuff inside Facebook, costing them about $2/user/year in infrastructure, $3.50/user/year in other costs, and making about $7/user/year in advertising revenue, yielding about $1.50 in profit. So cutting costs on that $2 makes them significantly more profitable.
Related: for the first time in my 15-year programming career, I've spent the past year or so doing more engineering management than actual coding, and it has noticeably improved my programming ability.
I do this already on OSX, and even submitted a patch to allow Ruby to run without OpenSSL engine support. [0]

How I compile OpenSSL. [1]

[0] https://bugs.ruby-lang.org/issues/9714

[1]

( export CONFIGURE_OPTS='no-hw no-rdrand no-sctp no-md4 no-mdc2 no-rc4 no-fips no-engine' \
brew install https://gist.github.com/steakknife/8228264/raw/openssl.rb )
A16z Programming Test
Trance: The Social Dancefloor
It depends. What is your use case for the CRUD app? Who will be using it?
See ChucK in action -> https://www.youtube.com/watch?v=IkbjktiF52k
As a group, speculators still need to have some underlying theory for why the vehicle they're speculating on is valuable. Almost by definition, a bubble popping is when speculators collectively recognize that theory didn't pan out.

For BTC, probably the most likely theory is, "Bitcoin will become valuable as a currency." The world's biggest economies officially deciding that it is not a currency under their laws dealt a crippling blow to that theory.
Customer retention vs. Customer acquisition
Except, uh, their VPN client software :)

And a lot of their WebEx, VoIP and VTC, which will be accessible either entirely within the organization, or on public networks.

Looks like most of their actual routers and stuff are not affected, which is unsurprising -- they SSH, not SSL, and it's unlikely they'd be running OpenSSL 1.0.1.
Sign up for a dreamhost account. You can have unlimited domains, and have unlimited email accounts.
That is a really serious grasp at straws. Its ironic to accuse someone using hyperbole of being hyperbolic while point out that a lynch mob is something completely, 100% different than what they said? Bizarre.
If you can't code, and you don't have any money, start a cult! This guy is a fucking loser
Agreed. I'm moved several times, including twice cross-country and once internationally. Finding a truck was the least of my problems. If I just need a truck for the day to move something heavy, I can already a) Rent one via Zipcar for as an hour or two, b) Rent a van from U-Haul for the day, or c) find someone on Craigslist.
Ha, we tweaked it a bit since last time you guys saw it, but not much.
ChunK: seems so old-fashion comparing to algorave.com guys
https://www.youtube.com/watch?v=fZppekP_XAg
Not really. There are only a handful of features that are necessary. Furthermore, JEOS-like minimal systems should only enable features that are absolutely necessary. Minimalism means a smaller attack surface.
Pretty quick, like a week. They didn't ship to Canada at the time so I had to use a mail forwarding service.
Does the Heartbleed bug refute Linus’s Law?
What I really want is an agent. I'd be willing to give up a small percentage if my hourly every month to an agent who brought me contracts I was really, really interested in. I've thought many times about how to pull this off, and I just don't know if the dynamic is right in the industry.
What Heartbleed means for Two-Factor Authentication
Parking in Seattle downtown is ~$300 per month.
A consultant with a reputation and track record of delivering projects on a one month deadline and who came through a referral that vouched for their work product gets $250 an hour.

A person being hired as an employee where we probably know nothing about their work quality unless an existing employee has worked with them prior at another job is not a consultant. Both sides are taking risk. The company is paying the person with a lot less indication that it is going to work out than they would with a consultant with a reputation. With a consultant with a reputation, they know exactly what deliverable they are paying for and there is a contract that gives guarantees and protection to the company if the consultant fails to deliver.

I think it would be fair to pay $250/hr to someone for that month on the condition that they have pay back a penalty if they fail to perform adequately for the job to be hired. Such a scenario balances risk and makes sense when consulting is the name of the game. If you were to make that offer to a candidate there interested in a job, not consulting, but a job, I don't think most would do it because they mentally aren't there interviewing with you with a consultant attitude.

Consultants take contracts for jobs they know they can deliver on. Except for the most exceptional candidates (i.e. that that have the capacity and know-how to be one man consultancy shops capable of doing the type of work you need them to do), most interviewees are probably applying to work at your company because it is a step up from the type of work they have previously performed. Basically, selection bias dictates that there is typically more risk for the employer when hiring an employee than when hiring a consultant, which is why you don't pay people like consultants.

At the end of the day the two situations are apples and oranges and you pay apples and oranges rates for each scenario, respectively.

That all being said, the amount of time the interviews are done today is two weeks. Given the amount of job security software engineers have today, this isn't that big a deal. You'd be surprised how many engineers are in a position to do something like this. For those that absolutely can't afford to do that, we try accommodate.
Ha yes, you understand me correctly.
Utah, and yes people give money for every ecassion.
I agree this plan wouldn't work in say Boston.

And yes homeless guys do make a lot of money here

Is it ethicly wrong..... ? Probably.

But if some doctor opens up an invitation and says, "eh maybe he is a pationt send him $20" and I use that $20 for graduate school is that so wrong? Again the answer is probably yes lol
The app seems to want to serve three different markets: 1) people seeking housemates, 2) people hiring employees, and 3) people looking for platonic friends.

The first two markets are already well-served by other services. The third is interesting, but seems socially awkward.

Why not go to local events that interest you, and see if anyone there has similar interests? Maybe find such events using Meetup.com or similar.
Yeah, the question about distribution wasn't necessarily aimed at you in particular, as much as I am hoping that someone seeing this will know something about this and have some advice.

If you'd like to try my version of the app, please drop me an email at bobbyi@gmail.com . I'll send you whatever I can put together if/ when I bundle it into something redistributable. The same goes for anyone else reading this!
Data recovery software
Yup. But probably wise to run screen or tmux to avoid processes on the other end getting HUPed in case of romantic interludes, etc.
I bet big dev shops would actually pay for this to know whom needs a vacation, etc.
Pff. If 'molten salt' reactors are an inch closer in 10 years, I will eat my hat. The idea is only slightly more appealing than having the reactor fly around under it's own power.

What makes you think The Economist is interested in probing the nerdosphere? Would Tesla, Apple, etc., be more effective? For sure, the '... adoption is 10 years away' thing is funny. Makes me reminisce for Popular Science.

If I were to guess; they are advertising where their technological sympathies lie. It is more about managing their brand than probing an audience.
... but that's the secret sauce!

The short answer is a combination of all those things, plus some help from our partners. The economics is also pretty interesting. Happy to go into more detail over email :)
Is there a system behind the magic of algorithm analysis?
(backer)
It's worth taking a look at the comparison of existing data gloves on the website - http://theglovesproject.com/data-gloves-overview/ . These aren't the first to try and do this by any means but they are as far as I can see by far the most considered and refined for their purpose, think of it as the iPhone of data gloves.

The combination of flexibility, comfort, precision, being totally wireless & a an impressive sensor combination (individual finger flex in both directions + hand accelerometer & gyro) combined with in-glove haptic feedback mean there's truly incredible potential here for creating entirely new ways of interacting with software.

Like the iPhone, or the iPad, or the iPod it's not that the technology itself is revolutionary or unique but it's the way that the technology has been used to create an amazing product that makes this to me as if not more exciting than things like the Oculus Rift.
Here it is: https://reverseheartbleed.com/
Except those are completely different commenter's?
I like the simplicity of chains.cc. The only downside is that there isn't an Android app.

https://chains.cc/
Is a16z building an engineering team to be shared by their early stage startups? If hiring early developers is one if the tougher challenges, this team may be their answer.

Private Equity firms started getting much more hands-on operationally with their portfolio when some balance sheet trimming was no longer sufficient for a quick flip. Though most of that involvement is straight out of the 1990s management consulting playbook. It's mostly vendor management and leveraged procurement. The purchasing arm for Blackrock and TPG companies is (was?) Staples largest customer. [0]

[0] http://money.cnn.com/2009/07/24/news/companies/buyouts_priva...
Dynamic code execution in the kernel - what could possibly go wrong?
https://packages.debian.org/squeeze/openssl

Oops, the strange decisions at Tails saves the day.

I still don't understand their reluctance to patch grsecurity and/or pax. It's been on their roadmap for ages. Liberte Linux included it since their first release too bad the guy abandoned the project last year. Probably the same thing happened to Maxim as the creators of Anonym.OS they were hired to make secure builds for companies and stopped maintaining them.

Of course anybody here can roll their own live distro of BSD/Nix and just review both projects design documents to see the kinds of security decisions made to implement them as well but the vast public is stuck with Tails which keeps ballooning in size. They need a light version without tons of codecs and video editing software, collaborative editors or full office suites.
I think thorium MSRs are the most promising of the GenIV designs. However, the biggest engineering challenge with them is with the U-232 being produced. U-232 decays into Thalium-208 and gives off very high energy radiation which would kill anyone near it, as well as damage any electronics in the vicinity (this is also why making bombs out of thorium are not as big a threat). But if this can be overcome I think it'd be a great source of power.
So there's enough blame and rage to go around. Any leader with a spine has to first contemplate "how did I fuck up?"
If you are looking for a standalone Markdown editor for OSX, LightPaper is a great app. Used Mou for a while but now switched to LightPaper for features and stability. http://clockworkengine.com/lightpaper-mac/
Hey, thanks so much for your feedback! We're working on adding a way for users to browse existing gigs right now!

We chose to go with "gig" for two reasons:

- It's a less formal way to say "job" which could be misleading for drivers looking for work, since most of these moves will be one-off things.

- We looked at the popular sections on craigslist where drivers post their services or users post looking for drivers and those sections are Services & Gigs; so we went with gigs for familiarity.
Agreed. Generally I would argue against combining data and behaviour, for the very same reasons that the author wrote these abstractions.

However, I think there are better methods available. For example I would much prefer to organise related behaviour using Node modules (using Browserify if it’s a client app), which give you an extremely understandable way to group related behaviour AND hide private state.
Doing this helped me start my startup while working full time and eventually feel confident enough to quit my job and work full time on my startup
Just a quick question about the tech.

Apps are ran in a simulator, and screen caps is being streamed real-time to the client, then drawn on the canvas. Is that correct?
There is also overtone which is a framework for doing something similar. Written in clojure.

http://overtone.github.io/
T-shirts in today's tech industry like this aren't appropriate
Why futurologists are always wrong
From admin.live.com, here is the kicker:

"We will continue to support the ability to log in to Outlook.com with your existing custom domain email address, but you will no longer be able to add or remove accounts in your domain."

No changes at all. That is not fun.
Hey! moveline.com looks pretty cool. We're less focused on long-haul moves, although our site can easily accommodate them (we have a few long-haul gigs posted up right now) and more focused on short, "I need this desk moved across town" gigs.
a16z Programming Test
He said "to keep the current price stable". Stable implies not changing over time starting from present day right? Or did you mean starting "eventually" that much money will need to enter the market to keep the price "eventually" stable? If so, I don't know what the relevance is of how many coins are being mined this year or next. If you're just talking about eventualities with no timeframe, then you're not saying anything quantifiable at all.
The article links to a Schneier article which suggests using random keyboard mashing as an answer to "Security" questions. This is all well and good until you need to use the Australian Government Centrelink application, in which not one, but FIVE "Security" questions are requested.

And then, without any warning, you're obliged to provide your password AND the answer to a random one of those questions when you log in.

Guess how long I was on hold for...
This is so bizarre it's almost funny.
Really not worth over $5/month per account to maintain a half dozen custom email addresses. And a few for friends/family.

Moreover, it misses a few features that outlook.com has, like subadressing.

Better use Fastmail, which has a ton of features. Is actually fast (I tried Exchange Online, it was slow). And if you take a family account, you can make accounts for family relatively cheaply.

Of course, if you use calendars and ActiveSync, Exchange is currently the better option.
Many that I've talked to in the electronic music community seem to prefer supercollider currently for actual use.
Interested in data? Want to a have a big impact? Natero (YC S12) is hiring.
There's a time and a place for both.

If you are a constant procrastinator, forming good habits, even on trivial stuff, reconnects you with why you need to do the work, and prepares you for getting started.

But after awhile, you find that you're just working, and need to produce. So it switches to deliverables.

My only life hack addition: instead of calling it a day, pick what you are going to set for your next completion goal before you quit. This was a Hemingway hack to make sure he could get up the next morning and start writing immediately. I've found that even the most informal mental commitment the day before solves the starting problem and ends up producing more positive streaks. It is great at overcoming (and preventing) any kind of "block".
Two Big Steps Toward The Quantum Computer
For Office 365 you actually have to change your nameservers over to Microsoft and they handle your DNS. The plus side of this is that Exchange Autoconfigure works, but the downside is that you have to use their UI for custom DNS records.
Hilarious.

I kind of dig how the "shitty ideas" aspect of it liberates folks to work on dumb-yet-amusing stuff.
To me that doesn't seem comparable to clear text passwords being stolen at all.
We do not trade on any reserves from customers like that. We're not the Gox of gift cards.
Cool, but... Why is A16z building an engineering team?
I would suggest looking into clamping it and using hot air soldering. There are some videos on YouTube.
The Respect QA Deserves, or Finding the Right People and Making Them Stay
I seriously hope this doesn't become a norm. I hate timed tests.
Yup, leanpub is one of the things I've started looking into. :)
Im interested in exactly how you are handling refunds. Can you describe it for us?
Perhaps you meant RAII [1] ?

[1] http://en.wikipedia.org/wiki/Resource_Acquisition_Is_Initial...
Probably want to internally build some products. Makes for much better returns when you own 50+% of a company vs. ~20% via traditional funding.
What's this weird idea that "B-players hire C-players to make themselves look good?" Are we convinced that all the B-players (let's face it, that's most of us) are so terribly weak and insecure? Is it relative? Would the A-players at Powerset be B-players on a team with Jeff Dean? Would that cause them to hire C(B?)-players? If you hire someone better than your current A-players does that demote them and turn them into poisonous cancers?
Digispark Pro: A tiny, Arduino ready, mobile and usb dev board
We really like uShip! But we're different. While uShip has the functionality to offer local moves, their primary focus is on larger long-haul moves. Movers generally use their service to fill empty space on their trucks so they can get the most for their time/fuel costs.

Our main focus is on local moves. We've tried using uShip for in-city moves in a few cities and getting bids for these on their site is pretty hit and miss since most of their drivers prefer a longer haul.
Comodo Positive SSL for $9/Year offered by namecheap is really very much cheap in price, but there is one more SSL certificate vendor "CheapSSLSecurity" that offers comodo Positive SSL at only $5.99/Year and if you are purchasing it for 5 year then the price is most cheapest at $4.80.

For Wildcard SSL Certificate I've found that "CheapSSLSecurity" offers it at $72.95/Year and $58.36 for 5 Year.

I bet no one can beat CheapSSLSecurity's price.
That's terrible. Email Service Provider and DNS Service Provider should remain separate, not be required to be the same entity in order for the services to work. They'll get a lot of small businesses and home users, I bet, but I bet it'll be an uphill battle to get larger businesses and enterprises on this, especially if the domain is used for something other than just email.
WWDC 2014 Attendee List
I was wanting to do something just like this recently. Very visualizing and pleasing to watch. Now we just need some slow building dramatic melody to watch as our planet melts away!
even with software you would probably still want to maintain two different accounts so you aren't incurring tax liabilities willy nilly when you buy a bag of Cheetos. If you commingle everything then you would probably have to use FIFO accounting.
Thanks so much for the kind words! We will definitely look into marketing to estate sales :)
Oilpan to be Chromium Default
Hey! Just a copy & paste from a comment I wrote earlier:

We really like uShip! But we're different. While uShip has the functionality to offer local moves, their primary focus is on larger long-haul moves. Movers generally use their service to fill empty space on their trucks so they can get the most for their time/fuel costs.

Our main focus is on local moves. We've tried using uShip for in-city moves in a few cities and getting bids for these on their site is pretty hit and miss since most of their drivers prefer a longer haul.
That's not rational though. There's been no rational reason to think bitcoin can yield those returns. You're talking about a 10000% return on investment.

There is no investment in human history that works like that.
Hm... not sure how long we'll keep it up. The discount is a promotion, but I imagine we'll keep it in some form as marketing for the product. 10% is a nice number, but we'll test it. As pointed out in other comments, it beats Starbucks's own program, which I like.

We can afford the discount by saving money elsewhere. No credit card fees, etc.
Shucks. I successfully used my Pebble barcode at Starbucks the other day and was only met with confusion and mild surprise.