skysight-inc/HackerNews huggingface dataset:
Ciphers to avoid DSS, MD5/RC4, SHA-1.

Ciphers to prefer ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256

A pretty good source/guide:

https://hynek.me/articles/hardening-your-web-servers-ssl-cip...

You'll need apache 2.4+[I think], or nginx. And possibly fresh certs to use DHE/EC.

A quick rundown of a fairly secure setup:

Cipher Priority list:

ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:!RSA+3DES:!aNULL:!MD5:!DSS:!SHA:AEAD

==========================================================

Generate the cert and private key:

openssl req -x509 -sha256 -nodes -days 3650 -newkey rsa:4096 -keyout serverkey.pem -out servercert.pem

==========================================================

Generate the DH parameters:

openssl dhparam -out dh2048.pem -outform PEM -2 2048

==========================================================

How to List Elliptic Curves:

openssl ecparam -list_curves

===========================================================

Note: Generating DH parameters is gonna take a while. If you are implementing this on a slowish machine like a Raspberry Pi, you might want to use a faster machine to do the DH step, then copy file the key over.
To make a complete platform, you also need APIs, so there's more to it than just picking a language. You also need to figure out how to sandbox it; CINT appears to give programmers access to unrestricted pointers. You also want to get multiple browser vendors to agree, so some kind of specification is desired; CINT targets its own unstandardized subset of C. And you ideally want it to go fast, but CINT appears to be pretty slow:

http://benchmarksgame.alioth.debian.org/u32/compare.php?lang...

So there'd be some work to do. You could also compile the code, but complete C compilers are not fast, in browser terms.
Yes, and it's especially frustrating when you are a newer user and trying to "learn the rules" and contribute constructively. Although I understand HN is cautious about welcoming new users in general, it probably ought to welcome more warmly new users who are trying to be constructive.

Also: A couple times I have accidentally hit the down arrow. There is no undo. How does this relate to comment quality? The only remedy is to add a "Sorry, I downvoted you accidentally" comment, which I've seen people do. Although it's good etiquette that's a relatively low-quality comment.
Human API
A lot of folks here are claiming that the type of wood being split makes a huge difference and it's true, however...

To address this the video should show him using both a conventional axe, and his version on the same wood. Apologies if he does this later in the video as I didn't watch the entire thing.
This is a great resource:
https://wiki.archlinux.org/index.php/GNOME

See:
https://wiki.archlinux.org/index.php/GNOME#Reduce_title_bar_...

But the tweak tool lets you change the font size which was enough for me. I also installed htitle to firefox to hide the title bar when full screen.
I have hardly had any problems with installing alternative window managers on Ubuntu 12.04. For me, I don't see the need for installing leaner Ubuntu variants as long as the laptop/desktop I'm using is 4 years or younger.
Yes. See http://mupuf.org/blog/2014/02/19/wayland-compositors-why-and...
IMHO, if you want to be a better programmer, you should eliminate language dependency.
No one can `master` one language, but good programmer can use new language easily with less effort.
Build the Future of Shipping at EasyPost
Off Canvas Menus with CSS3 Transitions and Transforms
That's the advantage of Racket's close relationship with academia...'Implementing x in Racket' is publishable and 'A y Library for Racket' is a Master's Degree project.
Criminals using drones and ir cams to find pot farms and then steal from them
I leave my keys in the car sometimes when I'm running errands in my home town. I care a whole lot more about my network security at home than I do my car. It's just a car.
> &'static str

I'm hoping there's a more...friendly way to write that (I'm assuming that's for literals).

Edit: ~str, see: https://github.com/mozilla/rust/wiki/Rust-for-CXX-programmer...
When your using a good size maul, you really should let gravity do the work for most of the logs. You really should only have to swing through on really tough ones. (That isn't to say you don't need some strength -- picking up a heavy maul over your head is not easy.)

I split a lot of wood in high school, while working for a tree cutting company. After half a day of splitting with a 15-lb head, steel handled maul you'd be unable to make a fist from the shock your hands took. We used to have wood splitting competitions, in which you'd pick logs for your opponents. I still remember one exceptionally knotty piece of cherry that a guy who I was working with found for me. While he split all his logs, the maul would just bounce of that log.
Wow, I've check the rust-dev from time to time, and "this week in Rust". I've mostly seen the polite threads it seems, were stuff is discussed and debated.

Going to check those links now...
The "planet much harsher than Earth that develops an extremely aggressive, warlike lifeform far stronger than us" is an old science fiction trope. One of the most popular examples are the Klingons.

But what if Earth is that planet? Obviously it can support intelligent life, but while there's lots of ways it could be harsher, there's also lots of ways it could be friendlier. For instance, it would be nice if this ice age that we're in the middle of wasn't happening. (Incidentally, you can add that to your list of reasons why Earth can't possibly support advanced life... it's spent an awful lot of time nearly entirely frosted over lately. http://xkcd.com/1225/ )
General and practical concurrency in Go.

This was challenging primarily because it's so idiomatic and easy to handle in Go, so a good deal of the book talks about pitfalls, testing and implementation.
There was a similar issue with pedestrian ramps at Lincon Financial Field in Philadelphia, where the Eagles play.

http://articles.philly.com/2007-01-14/news/25221645_1_ramps-...
It would be interesting to come up with a way to vote on specific portions of a cmoment. Often when I comment, i'm putting forth many different ideas in one comment box. I don't make 5 comments to put forth 5 different ideas. But because someone disagrees with one of the parts of my comment, the whole thing is downvoted. (And I sometimes have extreme, negative and unpopular opinions, so my average is pretty crummy ;) I would like to see a way for people to show what specifically caused them to downvote; maybe that's categories, maybe voting per-line or per-paragraph, or highlighting and then downvoting?
I think that oversimplifies an important point. Criminals may not CARE about breaking into someone's computer or router, but that doesn't mean they're capable of doing so. Tor significantly lowers the bar for anonymity online, and there is no question in my mind that it enables criminals who wouldn't have the means to mask their identities otherwise.

This is not necessarily an argument against tools like Tor, but it's a tradeoff that I think many Tor supporters are too willing to ignore.
Boston Startup Scene and Job Search Using Open Data
I had a moderator intervention happen in one thread, however, I think the moderators, when speaking "on behalf of HN" should have a way to indicate that (like an indication on their username, or something similar)

Otherwise it looks like anyone just decided to intervene.
Barry Diller: Broadcasters don't own the airwaves
Let me know when they have a spouse, child, and mortgage. That's the dividing line, as far as I can tell.
Downloading at 2mb p/s here - if you want I can mirror it for you on a gigabit connection?
I think I was still pooping my britches when you were using that, so I haven't had much experience with it, but KDE is probably more similar to it than GNOME. I would recommend you use what ever you feel most comfortable with. Of course if you have any experience with mobile OS's like iOS or android, GNOME shouldn't be too hard for you to pick up.
> The ascendant efforts of the young from about 18-30 is vital, innovative, and disruptive.

It's important, but if you look out your window, the world that exists out there was designed and built mostly by people over 30. There are some geniuses that were most prolific in their 20's (Einstein's miracle year was at 26), but most people who are awarded the nobel prize do their most important work from 30-50 (http://www.nature.com/news/2011/111107/full/news.2011.632.ht...). Picasso started developing cubism around the age of 30, Braque at about the same time.

The young have particular relevance in the area of entertainment (pop music, Facebook), largely because so much entertainment is targeted at the young. They also have particular importance in the area of mathematics. But the kind of day-to-day innovation that makes the world go around is a process of stepping on the shoulders of those who came before. And it's experienced people who understand what came before who do that most efficiently.
Any tips on how to make the update from beta 2 to final easy?

I want to keep all my apps, aliases, .bashrc edits, etc. Thankfully, I don't do this often enough that I remember the process at 7 am?s
IAAL.

You don't say what your business does. That is critical. No one can answer your risk mitigation questions until you identify (most of) the risks. Ask yourself "What could possibly go wrong?" And then deal with each risk with a surgical strike. It's a combination of targeted and broad spectrum antibiotics you need here.

Incorporation. These cheap outfits that set up corporations or LLCs are fine but that's like me wanting to be a programmer and buying a laptop and saying "Right, what next?"

You have to be anal retentive in the maintenance steps with your corporation or LLC. If you are not rigorous in this step any half-alert lawyer will blow through it. What's the saying, "security is a process?"

That means never ever using the company's money to buy personal stuff. That means doing all of the paperwork annually to maintain the entity of your choice.

The least brain damage for you will be an LLC, if you live in the USA. Company formalities are minimal, it doesn't have any tax impact, it is easy to understand.

Don't optimize for tax. I am a tax lawyer. :-) There is not enough potential savings to make it worth your while. Optimize for income. Optimize for sale of your company. Hire a bookkeeper to keep the finances immaculate and an accountant to review the bookkeeper's work.

The opportunity cost for you doing this work is astronomical. If you have crap financial records you can't show an acquirer how well your product is doing. They don't buy your company. You lose all your money. You are pushing a shopping cart in the street while your grandchildren curse your name. OK slight hyperbole there. :-)
The promise of SpaceX's re-usable rockets
Ok, the "save articles from Mashable" line on the landing page made me smile. Flattery will get you everywhere. I'll try this out later today and probably try to write a review for the weekend (for Mashable, natch).

My concern is similar to others - will this just become yet another place I don't look?

I love Pinboard, I have Evernote and I've signed up for at least 10 other similar services (one that I noted I worried about containing to exist on an HN post on its announcement post...it died a year later), etc. But I'm a sucker for this kind of stuff.
They went from a brownish theme that people complained about for years to now a blackish purple that is equally gaudy. I don't understand why they can't go with a color scheme that isn't so dark and depressing.

Then there are the multi-colored icon boxes (why do the icons need boxes around them at all?) that all clash with each other and clash with the (ugly) purplish theme, and clashes against the gradient black top toolbar (which has virtually no padding by the way).

It doesn't take a great designer to notice these things, god knows I'm not one. But I've worked with designers at every company I've worked for, small or big, and all of them would have done a (much) better job than Unity. Which tells me either no designers were involved or they were outvoted at every decision.
Second dropbox account and share specific folders.

Dropbox also has a "Selective Sync" feature to sync only some folders, but I couldn't get it to work (with repeated installations, running on a Mac).
This is a good write up Dan. Is there anything as an owner of a home router we can do to protect ourselves?
> What can be done? Are we reduced to just securing our friends' and families' infrastructure, all the while standing by idly while others outside of our direct sphere of influence suffer the consequences of naïvety?

No. We can write articles similar to this one which, instead of clearly explaining step-by-step procedures for exploiting weaknesses, clearly explain step-by-step procedures for REPAIRING weaknesses.
Is Techstars Coming to Toronto-Waterloo?
"Adulthood is full of onerous responsibilities, as all of us who have been there for a while know well: going to work every day, making the meals, keeping the household reasonably clean and orderly, paying the bills."

That's the bar for onerous, now? And this is an attitude we, as parents and as society, are obligated to encourage, support, and indulge?
Not sure if there is a similar tool for Firefox but what I've been using for that is One-Tab for Chrome. It simply stores a list of open tabs in a window when you click the button. You can share a link of that list to access later, but there are no logins and no cloud support. It's basically just an easy way to save a slew of tabs for later that you might not want to bookmark.
It also easier to spit wood when it's cold out -10C to -20C it seems to crack better.

I used to hate fall as a kid when wood splitting season began. Pneumatic splitters are great but slow. You learn to hate hard wood when splitting but it's great to burn.

An old joke: I was 10 years-old before I learned my name wasn't "Get wood!"
So much for abstraction if you need to understand the implementation of every function you'll every use in JavaScript.
I would ignore checks. Here in the UK, they're hardly used anymore.
It should be possible to transmit radio signals between planets. Although it's possible we just aren't listening or they aren't doing it frequently enough.

Space travel is more speculative but it seems theoretically possible to reach a significant fraction of c even with 20th century technology. Even today's spacecraft could reach other solar systems in a few thousand years, which is reasonable on a geological timescale. If probes are self-replicating, or the mother civilization simply sends a lot of them, they could cover the entire galaxy in a few million years at most.
> There are limits to the angular separation a telescope can detect. Even the very largest telescopes on Earth (or more often: arrays of several telescopes, effectively creating multi-thousand-kilometer baselines) can resolve the disks of even the largest stars.

Just to clarify: In radio-bands we can easily achieve sub-mas angular resolution using VLBI (the mentioned multi-thousand-kilometer baselines) or large arrays (ALMA, VLA, etc.)

In the optical/NIR bands your baselines are typically limited to a few hundred meters, where you can go down to mas, but it's much more difficult than in the radio bands. And direct imaging of the disks of the largest stars is possible in the optical/NIR.
Comparing the GNP per capita of New Zealand to Australia gives some interesting results: https://www.wolframalpha.com/input/?i=%28gross+national+prod...

The variance of the past few years (between 1:1 to 1:2) is quite high. I guess theoretically the biggest difference between the two countries is the mineral wealth of Australia?
Because, as the article says, it's isolated and has a small population.

Tasmania, in Australia, is not as wealthy as the mainland -- it's small and isolated. There are dozens of similar examples.

Meanwhile, Singapore is small, but sits athwart what has been, for hundreds of years, one of the busiest trading lanes on the planet.
I think you give way too much credit to the average person. It's easy to lose sight of how scary technical things are to normal people when you're in it day in and day out, but to ask the average person to change something in their router is kind of like asking me to replace a cylinder in my car.

There's a reason things like the Geek Squad are around and can charge as much as they do...
Anam.io: never lose popcorn-time again
> The judges who chose AES and SHA-3 as the "winners" of the global competitions are the NSA.

Sure, however this process creates alternatives and if the crypto community thinks the winner is backdoored I am pretty sure we will know it and additionally we will have a valid alternative ready to be implemented.
Additionally if the NSA/NIST modifies the specs for the crypto construction there is still the possibility to implement the original one. See SHA-3 for instance. It was about to be weakened, but the crypto community could still implement the original spec.

> That would include AES and SHA-3.

You cut the rest of the sentence and therefore changed completely the whole meaning. My original sentence included: "...without going through years of reviews by international cryptographers."
Take a look at this video of D.J.B.: https://www.youtube.com/watch?v=G-TM9ubxKIg
He makes a great example with the Dual_EC_DRBG, where many cryptographers told NIST that there could be a backdoor. NIST answer basically was: sorry too late, it has already been implemented !

So in other words, in case of Dual_EC_DRBG the standardization process was all in reverse. First NIST standardized it and then the crypto community started to review it and found problems.
Show HN: 24 simultaneous games of backgammon
The Twitter conversation that led to that post started with me pointing out that VCs "don't fund NASA [i.e. large up-front cost] projects these days. They fund little consumer startups with traction" - https://twitter.com/JackGavigan/status/432633513666281472 - and cited retail banking as an example - https://twitter.com/JackGavigan/status/432644947485802497
And I quote, "So what's the problem? Answer: If you implement the NIST curves, chances are you're doing it wrong"

This is just reinforcing my point. There is nothing known to be mathematically wrong with the standard curves. Bernstein just warns against all the (admittedly many) pitfalls in implementations, and that the Weierstrass normal form makes it easier to run into problems than the normal form he proposes. This is the only reason he says NIST doesn't guarantee security, and of course they don't guarantee against engineering errors.

But that's extremely different from saying NSA planted backdoored curves intentionally. The only thing in Bernstein's analysis that I could possibly construe as suggesting malicious behavior is that the NIST curves are outdated (the suggestion being that they are intentionally left outdated).
I often wonder the same thing. Other things that require the same level of expertise typically tell you that you need to do something by actively breaking. I know I need to call my heating and cooling guy because my air conditioning stops working, but nothing breaks to tell you to change your router settings. Technically, it's already broken.
$2 boxes are ripe for abuse and billing fraud.
Indie developer social network for exchanging AppStore reviews
Deep Learning java framework with GPU support
The "necessity" of those extensions is debatable, and they meant that code wouldn't be portable to Sun's implementation. There was real cause for concern, and there weren't a lot of other options for fixing it.

Sun probably also realized that they weren't about to compete directly with mighty Microsoft on platform lockin of all things, so they played a different game.
Like A Rock: New Concrete Could Last A Lifetime
Seems I am wrong somewhere. Reached this discussion as part of google search and found accidently I have used the same name and similar concept :(. Anyway this is just my hobby program and no plans to commercialize it. Let me check the name if I start getting users - http://www.secfor.net/

Again, it is also may be hackable as I was not so serious about coding and was concentrating just about making it a reality.
You should just be able to sudo apt-get update && sudo apt-get upgrade. The release has newer packages than the betas & dailys, but they all point at the same repos.
The original PDF is here: http://www.productivity.govt.nz/sites/default/files/internat...

Figure 3 in Section 1 was really interesting, but maybe I haven't had enough coffee this morning:

http://imgur.com/gvRugtl

New Zealand is in the lower-right quadrant, which I'm interpreting to mean that it is predicted to be 20+% above the OECD average, but it is observed to be at 20% below, i.e. -40% below expectations

So the top-left quadrant would be the best performers, right? Those that were expected to be below the OECD average but are observed to be higher, e.g. Norway with a +25% above expectations?

(Now that I wrote this out, it makes more sense to me...I was having trouble divining where exactly the USA stood by being in the top far right, but it's more about the distance from the line)
FREE $10 credit to deploy SSD VPS on DigitalOcean – Enter promo code 'DEPLOY2DO'
>It's not reasonable to suggest that everyone be familiar with the implementation of a simulated-annealing algorithm in the continuous-domain constraint search solver. [...] we're arguing that it's perfectly acceptable for that developer to be familiar with the intricacies of managing a data center of compute clusters? I don't know about you but I don't have an infinite amount of time on this Earth to take on such responsibilities.

No one is arguing for that, as I said. Where in the article do you see something like that? No mention of firewalls, data centers, developers doing their own server administration. This seems to be a more important takeaway from the article:

> Ultimately, DevOps is about empathy, with everyone on your team and with your customers.

No one is suggesting "everyone does everything" at all... you're sort of creating an argument here.
Show HN: How we sped up our checkout tests by 100%
What precisely is it about having a child and having a mortgage that qualifies someone as "grown-up"?

(I'm speaking as someone who has a wife, a kid and a house bought outright).
Reddit uses Adzerk API to improve native ad system
Distix development as performance art
There is a good book on this theme
http://aosabook.org/en/index.html

, where the authors actually go deep into the design & architecture of selected well designed open source projects
e.g. llvm, git, freeswitch, etc.

Highly recommended !
Gregory Rabassa does a phenomenal job with the translation.

My spanish is decent enough to have read a few of Marquez's books in the original language, but not good enough to appreciate them as much as I did in English.

I'd recommend starting with "El Colonel que no Tiene que Escribe". It was used in my AP Spanish class in high school and is short enough so you don't get frustrated with the slow going of reading in a new language.
1 Key Must-Have for Startup Success
The Sorry State of IT Education
Odd Army History: The Dilbert Dunker
This May Hurt a Bit: Harvard medical student's blog
How To Build A Super Car (McLaren Documentary)
Australia is doing unusually well recently, I think due to natural resources as you mentioned. This graph might give a better idea of what has been going on: https://www.wolframalpha.com/input/?i=uk+gdp+per+capita+%2F+...
Dropbox works on iOS, Android, Windows, OS X, and Linux. Because it's not just a website they can do things like automatically backup your phones photo's.

They avoid storing duplicate files between users which dramatically reduces storage space on S3 in ways single users can't. But, also allows them to add cheap versioning as there not storing 1 copy per user of each file.