skysight-inc/HackerNews huggingface dataset:
It links to a bug in Facebook's developer-facing/public bug reporting tool. Lots of angry comments about various products (mostly marketing related) depending on the API for updates, suggested workarounds (rewrite to query/pull rather than accept pushes), and an indication from Facebook that the fix will go out with this week's standard Facebook API iteration (they're released on Thursdays).

This is mostly of interest because at the recent F8 conference Facebook announced a "48 hour SLA" for "major bugs" and it appears this bug wasn't "major" enough to be fast-tracked.
Clickable links:

http://hellowebapp.com

https://www.kickstarter.com/projects/1868398473/hello-web-ap...
So IMO that interviewer was terrible. Iribe gave mostly good answers despite the questions - but did anyone actually think that FB was going to put their messenger in the oculus?

It is also telling to me that when they talked about the emotions that you could evoke with VR vs a 2D screen that most of them were negative.

We have a couple of the DK1's and we really had a lot of hope for the tech - but I remain unconvinced that this acquisition will be a good thing in the long run. I also didn't like how he talked about the kickstarter campaign being the first to prove that the crowdfunding model could be used to create a billion dollar company - I believe if you went back and asked most of the initial investors in the kickstarter I don't think that was something they were hoping for.
Allwinner Octacore SoC due first on pcDuino8 SBC
I'll leave this link here as offering a contrasting view of openbsd's security posture, and talks about an orthogonal set of security features: http://allthatiswrong.wordpress.com/2010/01/20/the-insecurit...
I tend to think that Wikipedia may work because of these problems, not despite these problems.

Very often people visit Wikipedia for a superficial overview of a topic they know nothing about - or perhaps to confirm a commonly known piece of trivia - which tend to be reasonably well curated.

For example, mathematical articles are often considered to be terrible because they miss this layperson target - they appear to be written by experts, for themselves. These are not necessarily people who are good at communicating their ideas to laypeople, nor even to other interested experts.

Wikipedia is not good for the long tails of research and expert knowledge - that's (for example) what research journals are for. I don't think Wikipedia could comfortably succeed at covering expert content while remaning so strong in its core.

Policies which I personally dislike, such as the poor culture amongst editors and pointless deletion policies, surely annoy me. But these may mean that editors who have chosen to contribute to Wikipedia focus better on creating the content which actually matters, rather than on infinitely long strands of esoteric knowledge.
Oculus complete source code is available. That still doesn't guarantee their transparency; I'm certain when the next version( when under Facebook ) is released it won't have any facebook integration, and its protocols will be checked and revealed by the community anyway.
It is true that it does promote analytics. However, one key feature of Google analytics giving privacy as a normal user is that you can never actually look at the profile of a user. You can look at stats such as 10/100 people used the "Best Hammers" search term, and that 80/100 people come from the United States. But you can't say look at X IP address and see where they come from, what browser they use, and what search term they used.
Jimmy Wales, Wikipedia co-founder on Palestine, Israel and BDS.
Funding Software with Bitcoin and Bountysource
I don't agree with it, but I could see how the author would justify those edits. The author rolled back edits that he/she felt were unfounded (whether or not they are is a topic for another debate). The student then reverted all those rollbacks without any discussion on the Talk page or edifying comments in their changes. The attempted discussion appears to have happened after this. The only difference between good- and bad-faith edits here is that the student does not understand Wikipedia policy.

Now, the way the original author responded is completely inappropriate given WP:DNB (en.wikipedia.org/wiki/Wikipedia:BITE). A couple people have already tried having that conversation with the author, and he/she still incorrectly feels the onus is on the (naive) editor.
> While I'm not as familiar with Ember

Ember currently uses Handlebars by default, and will be switching to HTMLbars[1] soon, so it's even better.

1: https://github.com/tildeio/htmlbars
That is indeed confusing. Because the names are so similar, there is an implied close relationship between these two entities. Have you considered renaming the project?
This all goes on the baseless assumption that the original author is a male. If you look through the user's archived talk pages, there are many indications that the user is actually female.
Saving - and now seemingly publishing - search queries is saving and publishing PII.

http://donttrack.us directly acknowledges that search queries can be used to personally identify individuals.

I therefore understood from the later statement on that site, "[ddg doesn't] store any personal information at all", that this would include search queries: ddg almost literally advertises itself on the fact that it doesn't save search queries. (According to the small print, I understood this wrong.)

It would be a shame if your explanation was the correct one.
Meanwhile, I'd bet 95% of people would be perfectly happy with 5 mbps service, while a small minority wants gigabit.

Historic and present demand are terrible ways of predicting future demand when it comes to technology. Most people don't know what they want because they're living in yesterday, but wait five years when they see what their early adopter neighbors are doing, then suddenly everybody would be happy with gigabit service, and who needs to upgrade to 10GbE anyway?

You could easily have said that nobody would want more than 128kb/s ISDN, because nobody does anything more intensive than download music, check e-mail, and watch flash animations. Faster speeds made newer services, services that are used by very ordinary people (like Netflix, Hangouts, Skype) possible.
If the car could map the route automatically, then it wouldn't need the pre-map in the first place. The problem is that creating the map routes currently requires expert human attention. Driving your daily commute manually for a week won't do any good.
Most marketplaces have a small listing fee. Perhaps you could have paid memberships and members don't have to pay the fee to list.
So he prefers rapid growth, with the risk of the whole thing becomming a bubble instead of the stability that results from a slow build of users and developer support? That doesn't put a lot of confidence in me either.
Love that people are still hacking NES. There are numerous other glitches in the original NES, such as being able to jump on the turtle in 3-2 (or 3-1 I forget) to get 99 lives (go over 100 and you die.

Also at this point, can't someone from Nintendo just open source the code for nostalgic purposes :)
Has Light Table fallen off people's radar?
"You And I"-One Direction-Live Cover by Kings Of Valencia
I also use DDG as my primary, but I prefer the `lite` interface: https://duckduckgo.com/lite
These seem to be React wrappers around KendoUI.
There are wrappers in Knockout for the same library as well.
http://kendo-labs.github.io/knockout-kendo/index.html
Writing custom bindings in Knockout is quite easy.
I also do not understand the appeal of React. Performance is often cited because of the virtual DOM implementation, but for example in this benchmark Knockout is three times faster than React in my browser.
http://vuejs.org/perf/todomvc-benchmark/
The only criticism that can be made against Knockout is the syntax when using observables in bindings (the ugly and error prone parentheses) and lack of reusable components. The first is solvable by using the Knockout-ES5 plugin if we are willing to drop IE6 to IE8 support. As for the second, components are finally comming to Knockout: https://github.com/knockout/knockout/pull/1396
windev lol,still have my windev edu CDROM somewhere in my mess... well, at least it can help learn algorithms in french,since algorithms are actually taught in plain french,not english here ... but i dont know any concrete peace of software build with it.
Sorry, I won't scan the copy I have. There's a decent chance you'll be able to read it though, because of your comment.
I'm quite certain that the current TextSecure chat allows my proposed scenario with Alice, Bob and Carol to go through without issue. This is the main problem here. So while transcript consistency is discussed in the blog post, it remains the case that Alice can send a different message to Bob and Carol without being detected.

Are you sure this is correct? From the blog post, it seems like this is impossible:

https://whispersystems.org/blog/images/groups-pairwise-optim...

However, there’s an optimization we can make for longer messages and media. The sending client generates an ephemeral symmetric key K, encrypts the message with K (C = EK(P)), and then transmits a single copy of the ciphertext (C) along with the pairwise encryptions of the plaintext hash and the small key K:

So, when a client wants to send a message to the group (like "How are you?") under this scheme, the client encrypts the message using a random encryption key K, yielding message ciphertext C. The client transmits to the server, then the server sends C to every other member of the group.

Since C can only be decrypted by someone who knows K, our client must of course send K to every other member of the group. This is easily accomplished: the client encrypts K once per other member. So, if there are N members in the group, this yields N-1 small ciphertexts. Let's call them "key ciphertexts". These "key ciphertexts" are sent to the server and routed to the appropriate recipient, who decrypts it, thus receiving K. Then the recipient decrypts C using K, yielding the client's original message ("How are you?").

So even though the client is indeed generating a ciphertext per recipient, that ciphertext contains nothing but the decryption key K. It doesn't contain the client's actual message. The actual message is contained in ciphertext C, which is generated by the client and sent to the server only once, and C is relayed verbatim to every other member. That's why I say your attack seems impossible: every member has the same message ciphertext, C, so there's no opportunity for a malicious client to send different message ciphertexts to different clients.)

As long as TextSecure uses this implementation of group messaging, then your attack shouldn't be possible, right?
Show HN: PrintReddit.com Send Postcards of Top Reddit Images Lob/Stripe/Reddit
http://en.wikipedia.org/wiki/Traffic_Light_tree (sculpture).
Apple detractors keep predicting its downfall due to availability of commodity hardware, however Apple fans continue to purchase Apple gear because everything else is commodity hardware.
Of course it is. “Move fast and break things”
I didn't say anything about number of users or about benchmarks.
Because the two have different physical limitations. DSL is strongly limited by distance to a cabinet, and most people can't get any better than 7mbit/s, 20 if you're lucky. Thus, DSL provides no pressure on cable, and the only reasons people use DSL are because they get it bundled with their phone and TV service, or because they got fed up with the cable company and switched to a lesser service out of frustration.

In areas where something actually competitive is available, cable companies rush to improve bandwidth, or offer two-year contract deals at undercut prices to try to outlive the competition, then jack the prices back up when the competition goes bankrupt.
Computer Game Reveals 'Space-Time' Neurons in the Eye
From a guy who dumped AAPL @ $97 5 yrs ago. And exactly 12mos later Steve Jobs showed up to present the iPad (and iPhone4, Macbook Air...later on). I thought the core value of a good VC is seeing the big trend, along with seeing the financial potential.

Source:

http://www.businessinsider.com/c/536798b6eab8eaa7579683e0

http://avc.com/2009/01/selling-apple-a/
I'm using Sticky Password - http://www.stickypassword.com/features/cloud

So, I can remember only one master password and for every new password I use password generator in SP. It is the best, 'cause generator make very strong passwords.
That is the expected result for a sub-population that has a shorter lifespan.

My sibling comment addresses deaths lagging over time. But even in the steady state of (say) 18% smokers, you expect more than 18% of deaths to be smokers because their life expectancy is shorter.
How would you initiate any transactions from your live-key if you don't have the client installed? And the client needs the entire block chain.

(I'm aware of light clients that work with a server, but that's not the standard.)

You can store the wallet cold on a usb key, certainly, but that's not the use case here. The use case here is a usb-key you boot ONLY for bitcoin, and nothing else. No web browser, no nothing, just the bitcoin client.

This is recommended if you are on windows, or if you aren't certain you can secure your computer (most people can't).
The birth of the Personalized Video Ads
Of course, but shouldn't we have gotten to the point where xx.UTF8 should be the default locale on modern operating systems?
Interesting to see the common socket proprosal - this harks back to the days when AMD's x86 chips were sharing a slot with the DEC Alpha (although I'm not aware of anyone ever making a motherboard that could host either processor).
Awesome. I spec'd out literally the eact same app years ago but never did anything with it....

Good job
Apple surprisingly remained in its mindset from the 90s. Such backwards things like using proprietary ports in the age of ubiquitous USB really explains Apple's way of thinking. I.e. complete lock-in, no interest in system portability and etc. While it served them well in the past, it can also be their downfall in the future.
Um, no one has enough contacts to ping and hire the amount of candidates a start-up or any other company needs. This isn't lazy recruiting, this is just recruiting.
We made this hack for fun because we thought the Lob API (send mail by hitting an API) was a cool concept, and we wanted to build something to try it out.

Enjoy it, and let us know if you have any questions about what the experience was integrating with the APIs!
Currently, 'recuding accidents' are the primary driver for speed regulations (at least in Europe)

There are a lot of other variables to optimize for, both on individual basis (fuel, travel time, battery life, ...) and collective basis (congestion locallity, total time lost in congestion, emissions, ...)

I guess legislatures - over time - will try to optimize some variables for 'the greater good' instead of minimizing your travel time :-)
This isn't actually true. In theory a blockchain could be maintained by interested parties only. For example, if an honest blockchain solved a problem of great importance to me (value = x) and even by putting a small amount of work (value < x) into mining the blockchain I could protect myself (say withdraw from action during double action attacks) then you can create a system where many people are mining, making the entire blockchain more secure each while guarding their own interests.

The closest analogy would be people setting up water sprinklers in their home. Sure it helps keep the whole town safe, but the reason they do it is for their own protection.

Similarly, in theory there are some other blockchain applications that give each miner a gain just from mining. For example, imagine that scientific communities around the world built a blockchain that checked folded proteins for applications in medicine. In order to compactly represent this they use a proof of work algorithm that solves these protein problems. The blockchain allows them to quickly share paths that do (or do not!) bear fruit in a specific direction, but it also coordinates search efforts along various veins of discovery.

These are just two examples I thought of in the span of 5 minutes, I'm sure there are countless ways of using blockchains, PoW algorithms, and cryptographic techniques for communication, synchronization, and commerce.
If you launch too gently, there's a risk no customer will buy it because no developer supports it, and no developer will support it because no customer will buy it.

That said, I got the impression things were going pretty well for Oculus without Facebook's help.
The World's First 3D Makeup Printer Unveiled
San Diego, CA or Mountain View, CA. Relocation available to the right candidate.

http://www.storycloud.co/careers/

jobs@storycloud.co

---

StoryCloud’s mission is to become the leading mobile backend as a service provider. Our system empowers people to take control of their digital lives on any device, everywhere.

We are funded, talented, ambitious, and working on very cool projects. Your reasoned thoughts about internet-scale system design will always find a receptive audience.

---

Mobile Developer (Advanced JavaScript programming required. Android, iPhone, and Apache Cordova experience desired.)

We envision a suite of specialized apps, each carrying the StoryCloud look and feel but built on a subset of the API and tailored to a particular use case. Your ingenuity and user experience design skills will frequently be tested as you aim to build the cleanest, most intuitive, and most delightful mobile experience for StoryCloud users.
A VC who invests in software predicts that hardware will become a commodity.

I hope he's wrong. Cheap commodity hardware is such a pain over the long term. Plus, a desire for quality goods bodes better for US manufacturing.
Before my wife and I had a child, my favorite escape was backpacking deep into the wilderness here in Montana, and camping near a mountain lake. Like in the pool, there's no connectivity out there. Exploring the wilderness has instilled in me great respect for those who lived without the technology we have as well as deep gratitude for that technology I may have otherwise taken for granted.
It doesn't. If anything change the line SSH emits and how it identifies itself. You want the automated tools to send the wrong exploits. If you can make your OpenBSD machine look like a Windows server running a commercial SSH server you're going to deflect a lot of attacks / attract the wrong kind of attacks.

The proper way to do something like this is generally three fold:

1) Trusted host (OpenBSD?) that runs only SSHD, and only allows users to run ssh from the shell. Log the fuck out of this server, and likely port mirror and record raw packet logs. Since no one should be talking to this machine except for SSH simply drop everything from those IPs when you recieve something other than SSH.

2) Ensure all other servers only accept SSH connections from the trusted host.

3) Restrict unconditional access to the trusted host to a list of trusted IPs, turn off all unused SSH options, you probably don't need that many if all it is doing is proxying connections to other hosts. Now that you have a list of trusted IPs you can be very aggressive in firewalling malicious connections from non-trusted IPs. (It's nice to have some way to getting back into your infrastructure when you're on vacation, etc)

Generally the best thing for security is a default deny rule. Chances are your database server doesn't really need to connect to the internet. Chances are your webservers only require inbound connections on ports 80 and 443, and only make outbound connections to your database & log server.

Fuckery with port numbers is generally a waste of time. The best thing for an attacker to do is extensive slow scanning in advance, then when an exploit comes out it's a quick lookup in a DB for likely vulnerable systems.
It takes a special kind of investor to have lost money in AAPL in 2009, a year where the stock more than doubled. Fred Wilson is that investor.

So consider the track record.
Apple's Data Tapping patent accounted for 85% of its damages award
It's crazy to think that Rancid, MRTG, & RRD are all fundamentally underpinning of all of these major carriers.
How do I change the link? :(
thanks, must have missed him
No problems here, but it does have several Adobe Flash embeds.
Easy Way to Keep Your Unicorn Workers Slim
uh? you can sign the message to prove your identity
This is some awesome engineering, and an equally as awesome result. Does anybody know if the author is going to put these boards on sale or what he does with his designs?

I'd imagine from the look of the PCB (2 layer with no solder mask or silkscreen) that they're designed & printed with ExpressPCB - they look similar to a few I've done with them before.

This really makes me want to start tinkering with older gaming systems.
No problems with FF29 on Win7.
The Doge Pound Invades the Podcast
Jay and Story from The Doge Pound join Andrew in a conversation about movies and games on the AS Movies & Games Podcast!

The conversation began with two simple questions:

- What have you been playing recently? and...
- What have you been watching recently?

However, it didn’t stay on-topic for long, as the three delve into a variety of games, movies, and even online marketing related discussions like social media and crowdfunding. Leave it to wandering minds to get derailed mid sen... wait, what was I talking about?
I like the sports idea. The question is where do you get the content from.
If you don't 0wn your phone, you don't own your phone.
Apple has held onto many proprietary interfaces in the face of much more widely adopted standards, but usually the products have been better off for it. Sure, the one-button mouse is horrendous, but FireWire was better than USB, the Lightning charging port is miles ahead of Micro-USB and other alternatives, and iOS development is not good, but not as bad as Android.
Dollars Invested in Software Companies Reaches Q4 2000 levels
Hey moxie, I recently myself switched to using TextSecure (mostly was just looking from an SMS app from reputable people, but the crypto parts are a nice bonus). The above question about the business model was also my first question after my initial evaluation. It would be awesome if you could put this info somewhere on the website (maybe I missed it?).
I would have guessed it was French ISP Proxad/Free, which is notorious for having generally shitty peering to a large part of Internet (like Youtube, Imgur or Github, among others).

But though they are a large ISP they are not dominant, and their peering with Level3 is actually quite good... which is why I tunnel most of my connection to my server (the route to which happens to be through Level3) so I can get usable internet.

It really sucks to be able to download an iso from some server in the US at 2 MB/s, but seeing small Imgur gifs load frame by frame, or Github repos cloning at 20 kB/s.
Are they relevant though? How many results do you need? Also Google is wildly optimistic about the number of results. Try paging through and it might cap out at the same number.
> It's ruled by people who don't have quality on their minds as much as power, politics, and maintaining their fiefdoms.

I think its ruled by people who just have different views of quality than their critics. Since quality is highly subjective, but people are frequently very heavily invested with the idea that their vision of quality is universal and objective, its very common for people who disagree with a speaker on what quality is to be described as not caring about quality.
Nokia pivoting to automotive tech
He got it from the previous Dread Pirate Roberts of course
Look like I can't change the link, re-post again here:

https://news.ycombinator.com/item?id=7701902

Sorry for the confusion caused :(
which USB? USB, mini-USB, micro-USB, USB 3.0 Micro-B, USB Type C?

http://en.wikipedia.org/wiki/USB#Connectors_types

ubiquitous, indeed.