skysight-inc/HackerNews huggingface dataset:
After further investigation, it was in fact WooThemes that leaked my credit card details not WOW Cable.
That's funny most of HN seems pretty disappointed that it's AT&T's free speech right to hand over your (technically AT&T's) phone records to the gov't (or anyone else they feel like).
did you read the blog post? you have to actively consent in installing that plugin to use it. without plugin the sandbox is code without attack surface.
How to Make a Marriage Work
The Call It Forward Movement: Let’s Play a Big Game of Telephone
No, it doesn't. My point is there is no need for such segmenting and overcharging those who want to see it more than once (except greed). Because there is no big difference in expenses for the distributor between these two use cases, except for the fact that the second can use the service more. But they already charge the monthly fee.

Anyway, it's not even the case here! Netflix has no plans for purchasing, so there is no segmenting there at all.
Exactly, it's actually quite similar to those infamous porn dns filters. If there is a plausible reason why not remove the source? The ruling as I understand it just alters the map while the city is still there.
That is a lie. There are plenty of dependencies, you just don't know what they are.
I'll readily admit that studies that show sad rats to more easily get addicted to morphine exists and that they are valid. But they are a far cry from the amazing results the Rat Park study achieved. In the comic, addicted happy rats would rather suffer physical withdrawal symptoms than drinking sugar-morphine water. It's the difference between "environment may have an impact" and "the environment's impact is so huge that it overshadows everything else by a wide margin."
Show HN: Compete Hub – discover, share and manage your triathlon race schedule
It almost seems backwards until you stop and think about it, but the existence of these kinds of laws actually makes this problem worse for most people.

There is no way for anybody without significant means to continuously monitor the internet for negative search results and then continuously sick lawyers on publishers, search engines, blogs, websites, and forums to get this stuff removed. And even with unlimited means, there really is no way to put some facts back in the bottle once it's been unveiled.

The existence of this kind of law makes it much more likely that most people will automatically believe anything negative that they read on the internet about you because then otherwise they'd assume that you'd be able to get lawyers to remove it.

Right now, today, there's a hint of doubt about the veracity of anything on the internet, and that's actually a good thing for people who have been unfairly attacked.

But if this law becomes widespread and sets a very strong precedent, then people will automatically tend to believe anything that they read about online.

This is a net loss not only for freedom, but for most people who have negative search results.
It is usually the simpler issues that bite you when internationalizing. The separation of first and last names don't always work outside the anglosphere (and sometimes even within it). Some users have 5/6 part names etc etc.
> FACT: The Net Neutrality cause is a response to a hypothetical problem.

Except, it's out of date as we've had ISPs intentionally manipulating their networks to their own advantage (and more importantly their customers disadvantage) for at least a year. Even when this article was written, overzealous throttling of select services was/is common. (Youtube in particular)

The condescending tone of the article is pretty entertaining given the level of ignorance he willfully displayed even then.
Autodesk unveils 3D printer as it aims to become industry's Android
> Since they set up the comparison themselves, I wonder if Stripe would be in favor of legislation that forced them to forever treat all their customers neutrally vs. us just trusting them to "work hard to ensure" that end.

ISPs already do that all the time with in-network CDNs, dedicated ports and the like. And nobody cares because it does not make things worse.
Python 2.6 is available in EPEL5 [1]. It runs in parallel, so the default remains the same, but it's better than nothing.

[1]: http://fedoraproject.org/wiki/Python26#Available_Packages_fo...
Don't forget:

What 4chan thinks of what HN thinks of what 4chan thinks of HN: https://boards.4chan.org/g/thread/41920845#p41922057 (thread currently in progress)
I'm not sure how equal your analogy is. It would require that All Payment Processors, not just Stripe, would have to treat all users neutrally. Which would be awesome, because Stripe would beat the heck out of the competition.

Plus, to be a fair comparison, it would mean regulation so that payment processors couldn't actively make it HARDER for you unless you pay them. Which again, they should be in support of.

It's more like the DMV throwing down nails and tacks in your driveway and telling you that you can have them removed if you pay them more.
LED incandescent replacements: $7
When DJB has already designed CurveCP et al, why would we use this? Presumably he got the usage of his own crypto primitives right.
Texas - 40.3
California - 25.3

That does not fit into any political narrative.
I loved this article.

It works for him. Nothing to fix there. A lot of people around me could learn something from this article.
Also, just because a zip code has 2 broadband providers, does that mean the entire population residing within that zip code has that access?
I'm envisioning another lawsuit...
I'm going to buck the trend and say that you've got an impressive list of popular tech that will get you a web developer job. Adding Ruby might give you a few more options, but nothing discernibly different than what's already available to you.

If you really want to do something different, start learning Clojure, ClojureScript, and React.
Yes, just like the current rules would affect all ISPs. Sorry if it wasn't clear that the law would apply to all payment processors and not be written to solely affect Stripe.
Introducing js.js: a JIT compiler from JavaScript to JavaScript

Trying so hard not to lol at work...
OS X Mavericks: Add a Signature to PDF with Preview and FaceTime Camera
Comparing themselves to an ISP does not do anybody any favors. It just confuses the issue. ISPs should treat all their customers (and their traffic) the same for reasons that do not apply to Stripe, and do not apply to the market Stripe is in.
Feedback: I moved my file syncing from Dropbox to Spideroak after you announced Rice was coming on board, and recommend all my friends, family and coworkers do the same. It's a shame because I love the product.
Founders: Please call the FCC's Office of Communications Business Opportunities.
Correct. Thus it is a very bad idea to infuriate the people who love music/movies with DRM mechanisms, because otherwise they'll just pirate and not buy.
What profit? Netflix offers rentals only, and no sales. And Netflix DRM doesn't prevent any piracy since users who want to illegally retain the copy can do it either way. So what is the reason for them using it? They can simply use sales and have the same profit.
the vote is tomorrow, but I haven't seen a widespread, concerted effort to make a visible and effective protest online, as was done successfully with SOPA.

I wish all interested players (including the huge ones, especially Google!) had agreed to slow down all USA internet users to "dialup speed" for the day, explaining why it is being done, and prompting people to phone/email the FCC about it.
I get that you disagree, but that's just a glib answer. I thought we were discussing the general case, not brainstorming for Algolia specifically.
I'm familiar with the word, I didn't use it because I was trying keep the focus on libertarianism which I don't necessarily connect with anarchism. Maybe Propertarian Utopia would have better captured what I was trying to say.
Previously on "What 4chan knows-uh, thinks of HN": https://news.ycombinator.com/item?id=6747373
Another Spideroak migration here. Haven't looked back.
NY Times, Justice Dept. under fire for concealing info on NSA snooping
To support my view, here you go https://stripe.com/blog/network-neutrality
Lets Not Be Evil project
Classic game
Do you remember days when we play those games in school?
Now they are available on smartphones for cross-platform playing ;)
https://www.facebook.com/inrowclassic
All the system is rot from the bottom up.. The Honcho's (tm) are putting their dirty hands and corrupting all over .. even the things we take for granted as community driven and serving for a greater good

Dont use Netflix, Dont support DRM, fight for DRM free software..

We took millions of years to make copy and cloning of any information free(as in freedom and in beer) and now some bastards want to turn this into a crime just because they want to profit?

Its just the beggining of something really bad that can corrupt all of the good things we take for granted now, as free education, knowledge sharing and the free flow of information
<statement regarding your mother's social life>
FWIW this is on hold until I know for sure what high-security-margin curve to use. I'd like this to be a "one-ciphersuite-fits-all" protocol, which puts a lot of pressure on getting that choice right.

In addition to DJB's Curve41417 (not yet implemented), Mike Hamburg's Goldilocks-448 curve looks pretty good, so I'm waiting for that to shake out.

http://sourceforge.net/p/ed448goldilocks/wiki/Home/

The "curves" mailing list will (hopefully) be a good place to track that discussion:

https://moderncrypto.org
https://moderncrypto.org/mail-archive/curves/2014/000139.htm...
This morning I called the FCC hotline and mentioned that I'm a small business owner. They immediately redirected my call to the Office of Communications Business Opportunities where I spoke with the Director Thomas Reed.

After I raised my concerns, he took down my name, business name, phone number, and email, and said he would get back to me. I asked if many small businesses had called, and he said not many.

I'm worried that entrepreneurs and small business owners on HN don't know there is a special FCC office just for small businesses. If you have a startup or small business and want to raise concerns about the pending Net Neutrality policy, please use this office to get through.

(202) 418-0990

Here's some suggested talking points:

* "Hello, I'm <name> and I'm a small business owner. Could I please speak with Director Reed regarding the pending FCC Net Neutrality policy?"

If he's unavailable, suggested message to leave:

* "I'm a small business owner in <state> and the success of my business depends on the internet. Why is the FCC working with ISPs to make running my business harder? This will kill small business jobs like the ones I am creating. Please raise the small business job consequences of this pending policy with Chairman Wheeler, and please give me a call back. My business is <business_name>, and you can call me at <phone_number> or email me at <business_email>. Thank you."

As always, the more times you mention "jobs", the better.
A precedent for which the case becomes invisible to the public because all articles about it had to be hidden because of the precedent itself....

(I realize the precedent wouldn't allow for that because an important legal case like this would remain relevant, and therefore not fall into the category which it allows for removal of, but its funnier to me to imagine that it could apply to itself.)
It's not really using 100%. rAF means they do their work, then it goes to sleep until the next vblank. They then get their rAF event, check if they want to make any changes to the DOM, queue another rAF and then go back to sleep. So it really is only 10-20%. But it's still 10-20% :-(

I would be curious why it's at 10-20% though. If they don't touch the DOM and their checks are quick (just a pointer as the article says) then there's some crazy serious overhead in the browser or somewhere just to call into JS once every 16-17ms and have it go back to sleep.

It would be interesting to look into where 10-20% is going. It seems like in a perfect impl, a mostly no-op rAF should take 0.001% or something along those lines.
Yes he's slow, no doubt about it. But if you had read any of the books he's written you'd see he's a legitimate author.

Quality of writing, to me, is a more important trait of an author than volume of output. It would be nice if he got moving though.
If you pay for the business account, you get unlimited space. If you actually do use multiple terabytes, then the per-GB cost is pretty good.
The way this is done in the OTR protocol and friends is that the information is signed, and the recipient is given enough information to verify the signature, but also to forge the signature.

Given that the recipient knows that they did not forge the signature, they can infer that the signature is legitimate.

Given that a third party, to whom we fear the recipient might reveal the message, cannot know that the recipient did not forge the signature, they cannot infer that the signature is legitimate.

It's possible that i have misunderstood the OTR protocol, or Mr Perrin's claim about Noise boxes. As a result, please do not infer that the above explanation is definitely correct!
Are you opposed to the idea of search engines in general?
I use scanbizcards. It does OCR and all, doesn't NEED to add to your adress book, and I just love the coverflow view :)
Killed the internet in Europe? Come on.
Free speech in the US and in Europe are two different things. But neither is better, it's a matter of culture. This decision is not backwards and it's not killing free speech as I know it in France (and most of the EU).
Now, on the technicalities of the decision, there's probably to be said.
They are asking that this area be protected from artificial scarcity (which is illegal in all markets), not 'market forces'.
> We don't get DRM-free copies of all our music from Spotify, nor should we reasonably expect that.

Why not? I use a number of internet "radio" stations that send DRM free mp3 streams to my computer (complete with ads). Some even have paid accounts that stream at a higher bitrate.

The only reason Spotify can't do that is because the recording studios act like frightened little children, scared that someone is going to take their toys away. They've (somewhat successfully) planted the meme that DRM is required or the evil pirates will just steal everything and they'll go out of business. But I just don't buy it.
And I just noted the wording made me look like an asshole, sorry.
Automated instant MongoDB sharded cluster based on docker
I chortled at very many of these. So good.
Not at all. dsl speed strongly varies based on distance from who-knows-what; all I know is that it tops out at 1.5MB/368K where I live in the peninsula (in Belmont, CA -- between the valley and sf for people not from the area).
House GOP Leadership Calls for FCC to Abandon Proposed Net Neutrality Regulation
Fusion is Qt5 only for now, so you won't find it by default.

There is a port to Qt4 which works fine, you can get it here: https://code.google.com/p/fusion-qt4/ (only source, so you have to compile it).
When fighting ecommerce fraud, you have to be careful that the cure isn't worse than the disease. You could absolutely institute procedures that would cut fraud down to nothing, but your conversion rate and fraud prevention costs may suffer.
Well design site. Maybe I'll get off my lazy butt and do a triathlon... or not.

How do people keep sites like this up-to-date when there are so many repositories of information and/or small players that are not standardized? Do they have go event by event or store by store? Is there a better way?
Sadly, most of the things on there are true. We can try to deny it all we want, but most of the stuff that's there is true. The power of anonymity is that you get to voice honest opinions without tying it up with your identity and/or feeling responsible for it. Of course, this can be argued otherwise too, by citing some (bad) comments as example from that thread, but for the most part, what you see there are honest comments.
Alternative is TPB
Case-sensitivity is an interesting observation. It makes it 1) more likely that the passwords are being stored and that 2) there are multiple interfaces used: the Web front-end which can handle capitalization (something which can be unambiguously transformed) and a back-end SABRE system which likely cannot but a case-shifted password could still be passed to it.

As for your voicemail system, that merely gets around the issue of competing standards by enforcing its own. And the mapping has to be repeated to every user for every use of the system. I'd actually consider it an argument in favor of the keypad theory.

Escape codes (or testing codes) is another possible explanation. And legacy code cost is indeed often a consideration.
The issue of Net Neutrality is consistently misrepresented. ISPs are not trying to extort the little guys (who have no money), they want to throttle YouTube and Netflix. The giant corporations have convinced average people to join their cause so they don't have to pay for their bandwidth hogs (which does cost ISPs more money than small sites).
That is utter BS! Worthless! They DON'T correlate! The numbers coincide(or are proportional) for a specific time range. So what?!
Interesting. If you're worried about correctness I'd just do integration testing. Get a bunch of raw files from different manufacturers and test them with rawspeed on the desktop and on the browser, comparing output. If it's performance though it seems strange when there are 3D engines being ported to asm.js that something like rawspeed wouldn't optimize well.

The alternative seems a little crazy to me. Reimplementing a full raw library in JS is a huge task. I've just spent a total of 6-7 hours getting the basics of MRW support in rawspeed and those formats are just insane, and change continuously between models of the same manufacturer. And even within a single model you'll get crazy variations depending on camera settings.

Best of luck.
That's specifically the problem that the Q/Z restriction works around.
"There are other features like the issue tracker, pull requests, editing files and committing from the browser, etc."

Yes, bitbucket also has issue tracking and pull requests. I have no idea if they have file editing from the browser (though they probably do), because I'm a programmer, and I have an editor.

I know this is hard to believe, but Github really is a commodity product. There are many alternatives, and they all work pretty much the same -- particularly if you know how to use git from the command line.
One does not preclude the other, no.
Autodesk Launches Their Own 3D Printer, and the "Android of 3D Printers, "Spark"
Founder here, looking for feedback!
It's unclear to me from the post that the sandbox code will be unbundled from Firefox. Furthermore, it should be possible to distribute a compiled version of Firefox that doesn't have the ability to install the module in the first place, with a minimum of effort.

If you don't enable it by default, but the first time a user visits any website with a video ad they get a clickthrough that downloads and installs it, a huge portion of the user base will end up with it installed. This is less than desirable if you care about security.

I'm sure security- or ideological-focused distros will do a version of this anyway, but it should be supported upstream to segment the code as much as possible so as few vulnerabilities leak into the "main" codebase as possible.
This is discussed at https://github.com/trevp/noise/wiki/Noise-properties-and-pro...

CurveCP: CurveCP lacks in-connection forward secrecy and resistance to key-compromise impersonation for the server. Also, a compromised ephemeral client key can be used permanently for impersonating the client. CurveCP requires the client to know the server's key prior to connecting, so trust models based on server certificates or "Trust-on-First-Use" are not directly supported. Like NaCl, it has a 128-bit security level.
"Any half way decent free market economist will tell you that every non Netflix user is subsidizing the crap out of Netflix users under the current set up and that's not very free marketish."

Can you explain the reasoning of this statement?
Actually Cinavia is an interesting example of trying to close the analog hole. You can point a camcorder at your screen and record a movie, but if you try and play that recording back on a fancy TV or BluRay player, it still won't work because the audio track has encoded instructions in it saying "expect an encrypted/DRMd media stream". If the player sees the content expects to be DRMd, it silences the audio after about 20 minutes.
But you're making the mistake of assuming they're hashing passwords at all ;)

That, I think, is the correct inference.
I think it's the other way around ;-P
djb is to be commended for his foresight. I always found it depressing that people would slate him for doing things his own way. I'm reminded of this quote:

"Don't worry about people stealing your ideas. If your ideas
are any good, you'll have to ram them down people's throats."

-- Howard Aiken
There's nothing new in Autodesk buying up everything they can get their hands on in the parametric modelling space, but I was surprised to see recently that they have made a rash of acquisitions and new product developments targeting the hobbyist/hacker community under their '123D' banner.
I'm curious: Is it currently possible to load a proprietary OS/Browser in VirtualBox and re-direct the graphics/audio stream to a file?
Having "transparent" bulk surveillance over large civilian populations of billions sounds like an oxymoron. It's sort of contradictory to the goals of it.
Ask HN: Are solo founders as screwed as they're led to believe?
As it is I'm looking at becoming a solo founder for an app-based venture. It just happens that all of my friends are liberal artsy people, and the couple programmers I know are happily buried in corporate culture.

I've heard over and over that co-founders who lack a connection and strong history don't do well in the long run, and it makes sense, so I'm hesitant to just go co-founder shopping at tech meetups. And anyway, at this point, I would be hesitant to bring someone on board with equal share when I've developed the entire business plan and written the initial app myself. I would happily hire employees and give them relatively small share, but like so many others I'm just very new to all this.

How do you hire your first employee as a solo founder without giving them 50% of your venture?
> How 2048 will make you a better programmer

They may make fun of this, but implementing another 2048 clone has helped me become a bootstrapped digital nomad with seed funding, as well as helping me to learn Ruby, node.js, mongodb, AngularJS (including Providers and Factories), while simultaneously embracing JSON to double my sales by 2x within just a couple of days at a recent hackathon.
I thought Gnome 3 wasted a lot of screen real estate. I recently tried going back to XFCE and found I missed Unity. They dragged me kicking and screaming, but I've come to like it afterall.
How to Add Edge to a Sundress
Definitions of competence vary with time and circumstance. The formerly competent may become the currently incompetent, with no change in skillsets or capabilities.
Thanks for the suggestions. Yes, I checked /var/log/auth.log and I saw some strange IPs trying to ssh as root. Good idea to change the ssh port.
I believe some important documents were accessed via this loophole -

http://grahamcluley.com/2014/05/dropbox-vulnerability-privac...
Mozilla bends on 'built-in' Firefox DRM so it can keep streaming Netflix