skysight-inc/HackerNews huggingface dataset:
My quick write-up on this from few days ago, http://www.ahtik.com/blog/startssl-revocation-fees-will-not-...

Yes, revoke is broken by design, especially with mobile and Chrome browser. I'd say it's broken everywhere except Firefox with OCSP Hard Fail enabled.

Thanks to this flaw StartSSL business model has become somewhat outdated IMHO with the free certs and paid revocations.

I'm dreaming that we can fix the revocations issue with 24hour valid certificates. Suggested at the end of my post.

But I must be naive on this as it's too simple, just haven't found the flaw in this myself. Yes, it needs technical orchestration, but at least it does not add extra layer of single point of failure for every session.

EDIT: Just finished the OP post and it does indeed also mention "short-lived certificates" in the end as a potential solution.
To be fair, BBC.com isn't paid for with the license fee. But I agree, it's pretty miserly of Auntie.
At a small company, there's never an excuse to not send a personal email to a candidate.
It's superstition. The entire interview process is, to be honest. Whenever anyone studies how potential candidates are rated, compared to how they actually end up performing on the job, it turns out there are two things that have significant predictive power: an IQ test (illegal in some jurisdictions), and a test of skills that will be required on the job (e.g. for a programmer, asking the candidate to write some code). Nothing else has predictive power significantly better than random chance. You might as well choose candidates based on their star sign.
I guess that's true when a hard-fail causes the connection to be refused immediately by the client with no user input. In that case a DoS on the OCSP servers breaks things badly.

However what I meant to suggest is a third option. Something like hard-fail with a latch. The client should opt to fail but give the user the choice to proceed.

This would seem more desirable than the current soft-fail implementations when seem to be entirely silent to the end user.
Why? Because it cannot just die yet! One of my most frequently used Windows app is in Delphi. Total Commander. ;)
What is the reason for using overly minimalistic, assembly style keywords like fn, str etc? Even C++ doesn't go that far (I think string is more pleasant to read than str). It's not like it's saving much, and it only worsens readability.
I remember about this time last year seeing the Kubrick exhibit at LACMA http://www.lacma.org/art/exhibition/stanley-kubrick. They had many of the items mentioned in this article. So you can see the index cards about Napoleon.

Oddly, the article doesn't mention why Kubrick wanted a copy Hotel Auschwitz. Kubrick was known to making a film on the Holocaust http://en.wikipedia.org/wiki/Wartime_Lies. Not long after Schindler's List came out was the project abandoned.
Measuring App Install campaign’s effectiveness
My understanding is that they're not allowed to serve that website in the UK because it contains advertising and they're not allowed to advertise in the UK. I'm not sure where I heard/read that though.
For those interested, here’s the latest update from the TACK mailing list: http://slexy.org/view/s20UsKEoRm (January 2014)
Bug Tracker in Git

Bugs are plain text files in the same git repo as code.

GUI for QA staff to commit new and updated bugs into branches, or to create pull request containing new/updated bug.

When developer fixes bug, they can update the status and assignee in the same commit as the code fix.

GUI to see which branches contain the bug fix, etc.

PR diff clearly shows which bug(s) have been fixed.
A Field Guide to Microservices – April 2014 Edition
Commercial divers functionally live underwater for up to weeks at a time http://en.wikipedia.org/wiki/Saturation_diving
It was a design decision made long ago and seems to have stuck (although is slightly less extreme than it used to be). I also used to hate the abbreviation, but I find you get used to it quickly and after a few weeks it doesn't impact readability at all.
Just make sure you still check revocation of code signing certificates. Otherwise you will end up running malware that is signed with a legit key they got off my stolen Windows laptop.
Learn How to Contribute to the Linux Kernel: Take the Eudyptula Challenge
No paywall for me, but does this link work maybe? This has gotten me around paywalls before.

https://www.google.nl/url?sa=t&rct=j&q=&esrc=s&source=web&cd...
I see you ignored the second sentence of the post. Try reading it, it answers your question.
London makes this information available, allowing the sort of visualisation you suggest [1]. As you say, it's interesting but not that practical from a commuter's perspective.

[1] http://traintimes.org.uk/map/tube/
If Namecoin is anywhere near as insecure as Bitcoin, it's a nonstarter. Yes, I know the cryptography underlying Bitcoin is secure, but as a matter of practical fact, Bitcoin itself as an end-user technology is hopelessly insecure. It's one thing having an endless stream of people waking up to find their bitcoins are irrevocably gone because someone hacked the computer, but we can't have domain names being irrevocably lost in the same way.

Does Namecoin actually work like that? If so, is there a similar alternative that doesn't?
DNS breakage at Samsung.com
A friend of mine noticed that there was no A record for samsung.com; it turns out there's no SOA, or any kind of record.

Their WHOIS shows an authoritative nameserver of "dns".
I have ADD, I am conscious of my lack of eye contact, but I am actually a great communicator.

All of human behavior occupies a wide spectrum. It's probably OK to say that on average, people who avoid eye contact may be bad communicators, but it's not universally true and to use that signal as an indication of a person's quality is cheating. If you need someone to make eye contact for you to feel like communication is good, the problem is with how you feel, not with the actual communication.
What I wan to know is why Tony called the author two years after Kubrick's death...

That has to be an interesting story in itself.

Edit: The answer is in the documentary Kubrick's Boxes (https://news.ycombinator.com/item?id=7615310). It appears that Tony (Kubrick's assistant) was reading a book by the author and remembered his request for the tape and gave him a call.
From Moxie:

"Convergence is blocking on TACK, which is blocking on browser vendors."

https://twitter.com/moxie/status/451020203099299840
I tried building an app in MFC after programming in Delphi/Borland C++ Builder. And my reaction was "Nope. ... Nope. Nope."

I was overwhelmed by the feeling that designer of MFC doesn't want me to get anything done but instead wants to take me on neverending tour of the peculiarities of underlying libraries that were built for 16bit ancient windows.
Thanks for that great tool! You're my firebug for API's.
Very nice demo, but still very far from a useful aid.

- it cannot, I guess, screw on that lid (if it could, they would have demoed it)

- does it work on slightly uneven flooring?

- battery live? Anybody's guess, but older ones (http://en.wikipedia.org/wiki/ASIMO#Specifications) managed an hour or so. This one will not likely not beat two hours.

Also, it still stands and walks like an ape, with bent knees, I guess because the software that keeps the robot upright always needs to be able to bend the knees both ways.
I actually used enumerate in an earlier version of this post, but in the case I used it didn't work (pointed out to me on /r/rust). I'm going to go into enumerate and other iterator functions in future posts, so left it out for now. I agree this is a better formulation.
I live in Shanghai -- there are plenty of ads using Asian models, but (to my mind) a weirdly high number using white models.
Spammers believe that secondary MXs are set up "in case of emergency", so they must have less restrictions on what goes in (so you don't miss an email) and must be less maintained... meaning that spam goes in more easily.
Ask HN: Side projects for marketing guy?
I feel like doing more with my time. Currently I give >12 hours a day to my company's work but now I want to start a side project which will enhance my skills and diversify my life.

Considering I'm a marketing and business guy what would be some good side projects?
Also submitted yesterday:
https://news.ycombinator.com/item?id=7613813

There were no up-votes, and no discussion. But to be honest, who is going going to watch a 90 minute video without any kind of transcript to give a hint as to whether there's any value in it? Certainly I'm not going to spent that much time purely speculatively.
And do you think that makes it inherently less secure than a "free-for-all" system? I think the point of the blockchain is to remove trust and become trustless, while the point of something like this is to keep the trust system, but actually give you some choice of who you trust. It seems a little better, but I think trustless authentication (as in no 3rd party required) would be preferred.
Love the minimalist flat design
Being young very much is aspirational. The fact that you can't do something has no bearing on whether you wish you could (and let's also look at hair transplants and face lifts while we're at it).
Local Soylent distribution.

http://discourse.soylent.me/t/any-ideas-on-when-we-will-be-a...
I'd include combinatorics under 'useful' too - although the basics are usually covered in statistics courses. Odd that the list mentions differential equations but not basic calculus, which I'd think is more fundamental.

It's also interesting to consider the chapter headings in Concrete Mathematics (Graham, Knuth, Patashnik), a text designed with students of CS and programming in mind:

Recurrent Problems
Summation
Integer Functions
Number Theory
Binomial Coefficients
Special Numbers
Generating Functions
Discrete Probability
Asymptotics
There are a wide variety of engineering jobs and some of them require regular communication with people who might not know you and who are therefore are more likely to misinterpet things like lack of eye contact. Tech leads, developer relations, etc.

People who are not good communicators and people who don't seem like good communicators, to the people being communicated to, are at a disadvantage for these jobs, at least until we eliminate miscommunication from human interaction (which I most sincerely hope someone, somewhere, is working on...)
Great tool, added to toolchain.

If you never came across Firefox Tamper Data Add-on, this might be a great opportunity to mention it.

https://addons.mozilla.org/en-US/firefox/addon/tamper-data/

A different tool, yet targeting similar audience (us).
Bee v1.6: Hierarchies evolved (Mac issue tracker for JIRA, FogBugz, GitHub)
That and tail-call optimisation :)
I would say an app for chrome is just as accessible as an app for mac.
Buffer is one of those companies that uses social media to acquire users. But I know they've invested significantly in writing their blog posts. It really depends on your product.
This tool is very popular in my place of work and geek circle. We've been using it for quite a while now.
I've found out that following users in bulk will bring a lot of noise in my Twitter feed. I suggest you make a separate list for new accounts that seem interesting, and if someone is really worth following, go for it.
Haha. You are welcome!
Insanely Simple Guide For Building SVG Icons Using Grunt
Have you used Mega.com? It does in-browser (JavaScript) encryption of uploads and downloads. And I can still hit 5 MB/s throughput. JavaScript can handle Zip compression easily.

For most users, bandwidth is in shorter supply than CPU. Especially on mobile (your constrained CPU/IO case), where people are using 3G or worse, which is often even billed by the MB.
I've been using this the past few days for testing elasticsearch queries, great tool!
Me too.

I've yet to find a wearable device I can take to the gym and extract the data from myself. Most of them use online sites and proprietry/undocumented storage formats.
"no more fiddling with the command line"

If you have to fiddle with the command line, you're doing it wrong.
It drives us nuts in the Plan9 community that Bash history and readline is seen as some sort of productivity tool. We have powerful shell primitives but the command line is seen as the last resort of composing them. Admittedly we have a terminal window with which you can edit text in two dimensions but use a proper set of tools with a bit of forethought and you get much more done.

If you need an oauth client, write one with a few bits of script and use it everywhere. It's the Unix way.
Stood at the side of Wright Flyer Test in 1903

-------------------------

Very nice demo, but still very far from a useful tool.

-it cannot, I guess, fly 300 people across the Atlantic at 500mph

- does it even work in a 50mph wind?

- flight duration, Anybody's guess but others managed less than two seconds so this one is unlikely to beat 5 minutes.

Also it doesn't fly anything like a bird.

-------------------------

Sometimes things are cool because they are cool and sometimes we need to build useless things to develop the technology we need for cool things.

In 50 years, Asimo and "his" ilk may be regarded as the Wright Flyer's of android robotic evolution.
I doubt that completely, citation needed.
I've been using it for quite a while now. I'm ashamed to say that it's simplistic approach on collections often made me question the urgency of writing API documentation when developing a private API. Why not just send the collection of examples? Well, we all know why but still...
Ask HN: Is escape velocity required to get to outer space?
I was just reading about how Elon Musk is trying to make it so rockets are reusable since they're one of the most expensive parts of space flight, and then I had a thought... -- What if instead of a rocket to get out of the atmosphere, you went to a specific location in the stratosphere and some sort of tow cable would be launched from a platform(maybe anchored to the moon if needed?), the tow package attaches to the spacecraft and pulls it slower out of orbit without the need for excessive speed.

I guess this is similar to the space elevator idea, but wouldn't a space elevator need to at some point exceed the escape velocity for earth?

Curious what other possible theoretical methods of escape could be available.. like some sort of magnet that defies or pushes against gravitational forces essentially nulling the gravitational pull? --
While it's useful to learn proper debugging sometime your approach is valid as well. By the looks of it you're using the optimal solution to your problem.

I prefer to code in Common Lisp on the REPL and do the same thing as you most of the time since each iteration step is so fast. (Change a function -> update it in the live running environment -> test ...)
Good job on guide. I've seen many such privacy/security guides over the years, but the information gets out of date after a few years, so it's nice to have a well-written fresh guide explaining recent issues and contemporary tools.

> If the fact that TrueCrypt is not truly FOSS, or the implications of ‘plausible deniability’ worry you, there are a couple of other highly regarded encryption programs available

The phrase "the implications of plausible deniability worry you" sounds ominous to beginners in security/privacy issues, and might even discourage them from using TrueCrypt (which is the best such tool as you correctly mention).

It is possible to use TrueCrypt in a non-deniable way if that concerns someone: You would always create a hidden volume and then be prepared to reveal both the hidden volume and outer volume passphrases when required. Since TrueCrypt permits only 1 hidden container, your oppressor will be convinced that you're not hiding additional data when you reveal the two passphrases. Such discussion however is way too much for the intended audience of your guide, so I suggest to leave this out as well.

> even the most modest cell phone can be easily tracked by the satellites it uses to work

A "modest cell phone" doesn't have GPS and is therefore not trackable by satellites. What you probably want to say is that even the most modest cell phone is easily tracked by proximity to a known cell tower. Its location can be further refined by triangular due to signal strength from neighboring cell towers.

> A better tactic however, is to use the CCleaner utility (available for Windows and OSX), which not only cleans out pesky Flash cookies, but also a host other rubbish

You should mention BitBleach[1] instead of CCleaner or in addition to it. BitBleach is open source and even Bruce Schneier swears by it. I used both simultaneously for a while on my Windows systems and I found that BitBleach found many more files and junk to erase than CCleaner.

[1] http://bleachbit.sourceforge.net/
Server-side languages, yes. There are lots of those, so each one doesn't impact many. But there's only one client-side language on the web, so it impacts everyone.
Indeed, short-lived certificates do seem like a solution to this problem. One downside might be the fact that (anecdotally) many users have inaccurate clocks. I read somewhere recently that a large web site has to back-date their new certificates, because, otherwise, certificate rotation/revocation causes a large spike in support tickets.

Short-lived certificates were explored in Towards Short-Lived Certificates
http://crypto.stanford.edu/~dabo/pubs/abstracts/ssl-shortliv...
It's a matter of taste. I personally feel that your specific examples make Rust more readable, because of how little space gets wasted on those frequent, unambiguous names. Ubiquitous boilerplete-ish things that show up everywhere should recede a bit, imo; let me spend my line width budget on what's unique and important about my code.

But again, it's just a matter of taste and not really worth wasting a lot of time worrying about. The important thing about Rust is its semantics (speed, safety, control), not its syntax.
if `str` is too short, surely `int` is, too:

function fibunacci(integer index) {
if (index <= 1) {
return 1;
} else {
return fibunacci(index-1) + fibunacci(index-2);
}
}

compared to:

fn fib(int n) {
if (n <= 1) {
return 1;
} else {
return fib(n-1) + fib(n-2);
}
}

Personally, I prefer `fn`, `int`, and `str`. I actually think that the short names are a nice way of distinguishing between built-in keywords (abbreviated, like `str`), and user-defined names (typically whole words). Also, short names are useful since they can be used as pre/post-fixes to function names like `strsplit`.
Your chance to be an entrepreneur has a lot more years left in it than her chance to have kids. In her mid 30s, it's her final years to ever have them (with good odds to have them be healthy at least).
Future Programming Workshop: By Richard Gabriel, Alex Payne and Jonathan Edwards
you might want to give restclient a go: been using it nearly daily for the last year and am quite happy with it.
http://restclient.net/
One of the interesting things that's changed some since that article was written has been the advent of truly itsy-bitsy sensors, for instance on cell phone cameras. Sony, OmniVision, and Aptina are all making sensors on the scale of 1/3", with pixel sizes as small as 1.1µm; the upshot of this is that the electrons wells for these pixels are fantastically tiny, and saturate well below 2,000 electrons.

This means that even on a bright, sunny day, with brilliant opportunities to pour light into the sensor while maintaining short exposure times, we /still/ can't get as much light in as we want, because if we do, we'll saturate the pixels -- and no amount of lowering the analog gain in the readout circuitry will recover the electrons that spilled out of the wells. So, we end up with shot noise as a dominating factor for cell phone images, even in "perfect" conditions.

As we cram more pixels into sensors, noise reduction -- in many different modes -- will become an important battleground in which image sensor and SoC vendors will have to compete. Glad to see it getting some attention :-)
SO I just read the whole thing, and... I don't get it: Who are the confessors in Ch 7-8?
Thank you for the recommendation though, to be clear, I never became a professor. Just a guy with an Internet connection.
very, very bad
And pray that in 3 years Google will not decide to drop App Engine.
Justice for the 96, justice96.com

I recently watched the ESPN 30 for 30 on the Hillsborough disaster of 1989. Towards the end, at the 25th annual memorial of the 96 deceased, the crowd of 30,000 begins to angrily chant, "JUSTICE! FOR THE 96!" and man what a powerful moment. What a powerful, beautiful human moment.

I believe it was this act that galvanized political figures to organize an independent panel to determine the truth.

The very truth that would bring justice and the long-awaited relief of some of the grief that haunted the victims of those who were affected.

So, justice96 will be a site dedicated to Acts of Injustice.

Content aggregation with a justiceboner-driven narrative.

However, the potential for witch hunts is too great if it's a purely community-driven website. Claims would have to be verified and independently investigated by admins of the site.
There should be a clear statement about the status of Convergence on the web site. IIRC, the Firefox extension has been broken for more than a year now. Why? If Mozilla broke their APIs and made it impossible for the extension to work, then we should know about that. Otherwise, what's the excuse for the extension being broken for so long?

Convergence had the momentum, and there was a small but vocal group of people willing to support it. But, due to project mismanagement and lack of communication, that momentum has been lost.