skysight-inc/HackerNews huggingface dataset:
I have doubts that a timing attack would even be exploitable here since it's a hidden service, but I just made the string comparison constant-time to be safe: https://github.com/micahflee/onionshare/issues/3

Keep in mind that the username/password are just hex-encoded 128 bits from /dev/urandom, so they're not guessable at all without some sort of leakage attack, like a timing attack. And if anyone attempts to do a timing attack the person hosting the file will see all the requests scrolling down their terminal in real-time and can always hit ctrl-c.

There's also the bit about knowing the hidden service .onion to attack in the first place, which wouldn't be trivial to discover, especially since I envision these to mostly be very short-lived.

But all that said, this is great feedback. Keep it coming and feel free to open security issues on github.
let's not even speak of the 2014 budget.
I agree 100% with everything you said. Considering our savings rates these days are atrocious, even a high paying job does not guarantee future job security
The problem is that there are too many things in this world which people assure me will be amazing if I just stick with them, and not enough time to try them all out.

Got to season 3 of the Sopranos -- still hated it.

Used vim for 9 weeks as my only editor -- still hated it.
I've found a lot of these tend to be blog-centric, which seems odd to me considering the primary use case I've found with static site generators (Punch in my case) has been creating one-off content sites for clients in scenarios where we don't need a CMS. Folks seem to be really fixated on building these as blog engines, which I find baffling
:D Doesn't take a genius to see my English is funny.

However, I assure you it's not hypocritical humility. I'd go with honest arrogance.

The things I say serve to give context. I wonder if I must give the info then give the context, or give the context before the info. I chose the latter. Unfortunately, the context triggers such strong reactions from people who have suffered as children, that they read the context with biased eyes: This guy's an asshole, let me own him on HN.

It's funny too to see ad hominem attacks by people on the very topic about nerds not being popular and bullied. Kind of ironic and makes me think: If these guys were so rough with their finger muscles on a keyboard, I wonder what they'd do if they had strong biceps if I were to be in front of them.

Anyway, thanks for having a cool head.

PS: I upvoted every single one of the posts attacking me before I replied to it. I figured they voiced their opinions on me, which deserved an upvote.
The OP is pushing "Algorithmica" whose manifesto is here: http://blog.algorithmia.com/post/75680476188/algorithm-devel...

and this doesn't really strike me as much of a victory for the idea that it's just the implementation of an algorithm being the sticking point in practice.
How can you tell a series like that from one that just sucks? Putting 40+ hours into an entertainment product before it begins to pay off just isn't reasonable.
Interesting. We have those libraries already written so if you let us know what you are building we may be able to help.
Just FYI, the image at the top doesn't look that great on my retina display!
Playing with d3 in the cloud
It's great for standalone, spare-time projects that don't need 100% uptime or monitoring, though. I have low-traffic websites I haven't touched in months or years and they're still running fine. On anything else I would probably have shut them down by now due to some forced upgrade or other.

You pay a bit more developer effort up front (weeks, not years, for these projects) so you can walk away, but that's when I'm actually interested in working on the code. Migration is a non-issue since I don't plan to migrate. If I have to do any real work at all, I'll probably shut the site down anyway.
A Bad Day for Patent Reform. A Bad Day for Innovation
Curious if people think this sort of components driven development approach scales down to very small teams (2-5 ppl) or is this approach just for the big guys?
I forgot to mention that we do have features that unbounce does not provide.

Example: We provide a wordpress plugin to easily publish pages to a website built on Wordpress.
The question they asked was...

“If you had to choose just one additional JVM language to learn about, it would probably be..?”

...to which 47% replied Scala, 31% Groovy, and 12% Clojure.
So does Discover. When I wouldn't take "just because" for an answer, IIRC the explanation was that it resulted in fewer password reset requests, so I believe your take is correct.
The big difference there was: It ended quite a few political careers when it came out, including federal minister Kopp's (since we have no real president that's actually the highest political chair). Switzerland has checks and balances in place that make it very risky for politicians to act contra the people's interests. In the US I can see no such outfall even after all the dirty business has come out - it all seems to be legal.
Not sure it helps, but this thread and my partner convinced me to drop the yearly to $5.99. Taking into account bad winter weather, $9.99 isn't much of a discount on the yearly option.
amazon has been doing "run at break even or a loss" game for awhile, and they are taking many incumbents lunch with them.
I'm actually running two access points right now. One of things I've valued the WRT54G on has been it's stability, where my AC router tends to crap all over itself depending on how demanding the active video streams are. Additionally, I barely get 15mbit down from Comcast currently.
Hi everyone. I just wanted to let you know that we started pushing the documentation here: http://learn.websecurify.com/help/proxy/ - soon to be bundled with the app itself.
While I understand the thought process behind giving the mentally ill a free pass when it comes to saying things which seem inappropriate to the rest of us, I also understand that those of us that suffer from those illnesses also have valid political and social preferences and opinions.

I've met plenty of mentally ill individuals who were as kind as can be. I've also met individuals that are filled with a special kind of hatred.

The question I have : Are there any documents or papers that Terry has written that go against his insensitive and racist ramblings, and explain that his inappropriate use of certain terms that the rest of us would never touch? If there is no formal explanation of language, how can everyone be so sure that the hatred is indeed generated by an illness rather than a hateful person with an uncommon opinion?

I know, a formal letter from someone with a mental illness seems like a stretch to ask for, but Terry has been extraordinary in every other facet. He's a true hacker, OS author, and the creator of a language. He commonly posts opinions he has on new articles on his own site, and the posts are relatively lucid, as are technical aspects of his work. I don't think that an explanation of his language use is unworkable, however I do not have any firm grasp on how he interprets reality and can only judge the difficulty on that job in comparison to the difficulty of the work he has already shown he's quite capable at (his OS, for example).

I know everyone is going to jump down my throat about all of this, so let me summarize at least what i'm try to get across for anyone that might misunderstand.

1) schizophrenia and racism can exist individually. (however, Schizophrenia can also form racisms.)

2) an individual looking in really has no grasp on what is or is not formed by the condition rather than the individual

3) It's wrong to assume someone isn't something they practice, simply due to a personal flaw. (Example: I'd hate to be the world's biggest racist stuck in the body of a Tourette's patient, everyone would probably blame my rants which I worked so hard on on the disease)

(to those of you in this thread that mention Terry doesn't use racial language to describe race : please read more of his work, you're incorrect. Example : http://www.templeos.org/Wb/Accts/TS/Wb2/Rants/TAD/2014/02/Ra... )
> It may be more the dealers themselves with the "casino" turning a blind eye.

That strikes me as even less likely. Given that dealers are tipped from winning players, they wouldn't want to cheat in the house's favor unless they're also pocketing the extra winnings. This is the equivalent of overcharging customers and then skimming from the register, except the store's surveillance is better than most.

FWIW, the one instance I have first-hand knowledge of someone being ratted out, it was the casino's owner. She asked a surveillance employee to destroy a tape and he sent it to the state Gaming Commission instead.
I'm with you. I felt less like I was playing a game that interacted with me and more like I was forced to watch the cool things that animators thought of when they had access to an input device. And then every once in a while they remembered that this wasn't an animated feature and they needed to toss the user a bone so they lit something up on the screen, cause that's fun and interactive, right?
API SDKs Will Ruin Your Life
Well, this thread, and my design partner, have convinced me to lower the yearly price to $5.99. That way people can at least break even with bad winters and it looks like a much bigger discount.
Fair point. I'll admit I'm biased because I've messed around with trying time attacks on my vulnerable code in arguably ideal scenarios and haven't had much luck. So the feasibility of this is questionable to me, but I'm willing to accept that it's an issue. In any case, the above block of code should be easily fixable.
> People are screened for employment online

The solution here is to regulate hiring practices, not access to information.

For example, in the US, it is not legal to base a hiring decision on whether an applicant is married. Anybody can search newspaper archives for marriage announcements, but we don't ban newspapers.
Such an issue is hard to affect on a personal scale, perhaps this is part of the reason for the indifference?

If there isn't anything I can personally do to resolve it and it's a slow barely visible change, I'll sit quietly and hope for some of the worlds governments to fund a viable solution.
Header and footers, layouts. Just use something like jade?
John Regehr gave a presentation to the Bay Area Rust user's group recently about his work. Since then we've started applying C-Reduce to Rust bugs and it has been working surprisingly well. If you've got a curly-brace language then give it a try.
very good point, store front or no store front, the "secret" to achieve apple like success is to design something with the mass appeal of the ipod et al. The article wasn't explicitly wrong.
Server side includes amount to a preprocessor, no? A lot of code is written that way without major incident.
I played the entire original Dark Souls on my Nvidia Shield - which is more or less the same concept. I never ran into an issue.
The link to BlackPast.org on his site[0] disagrees.

Usually if he's trying to be insensitive to a different race, he just hyphenates that race along with the word you mentioned.

Although, I do agree that most of his use of that word can probably be changed to some other generally negative word and make just as much sense. He usually isn't implying a race.

[0] http://www.templeos.org/Wb/Accts/TS/Wb2/Rants/TAD/2014/02/Ra...
I've been reading "A Guide to the Good Life: The Ancient Art of Stoic Joy" by William B. Irvine and Marcus Aurelius is one of the 4 eminent Stoics featured in that book. His "Meditations" is referred to often. I've found the philosophy behind Stoicism to be very helpful in my day job coding and at managing a team. One of the most useful practices is knowing the difference between what you can control, what you have no control over at all, and those things that you have some but not complete control (i.e. I can play to the best of my ability in a tennis match but the outcome is not really up to me). It's incredible to think that Marcus was sick (with an ulcer, more than likely), his wife probably cheated on him, out of 14 children, only 6 survived, and he was emperor! And yet, when he died, their was a public outcry.

So, after reading "A Guide to the Good Life" and now that I've read your article, I'm definitely inclined to pick up "Meditations" for my next read. Thanks for the insights!
A friend of mine made CheneyStar.

https://www.youtube.com/watch?v=q_x6-kwvKSE
Fun. I spent some time with memory-training last year and used it to successfully impress my 7-year old son and his friends by having them suggest random words and write them down in a big list (one word per line, legibly - they had no idea they were secretly practicing penmanship!) and then I'd recite them from the mental story I'd created from each one after only a few minutes study. Six months later, I could still recite 50+ out of the 75 words without hesitation, and for multiple lists.

My "trick" was simply to create a visual story that incorporated each word and linked it to the next one. As long as I could remember the first word and the initial plot of the story, it was pretty simple to link to each subsequent word. In addition, I had great nonsensical stories to tell my kid when he couldn't go to sleep at night.
The NSA is Not Made of Magic
What about tag size (i.e., word length)? For the example of the knuth article, it'd be good if length was > 3.
OK but how do you do pre emptive multitasking?
You want the serving pc to have hardware accelerated video encoding (e.g. Intel Quick Sync), otherwise it runs terribly. Similarly, the client should have hardware accelerated decode, but that is very common.
So it seems that Middleman offers very little than the latest version of Jekyll, though I did read someone say Middleman is more focused on pages as opposed to Jekyll being very focused on a blog/posts.
Better Crypto: Did Snowden Succeed?
Research Shows 48 Developing Countries within 5 Years of Crossing Digital Divide
Data Analysis of new Political startup
> Unless, for instance, any of that required spending money, and Congress explicitly forbade spending money for the purpose. Or Congress otherwise prohibited the military from doing what the President wanted to direct.

Wait, can Congress do that? I know that they approve budgets obviously, but I thought all they could do was allocate it to different departments. I didn't think they could say, "here's this money but you can only use it for this purpose.. you absolutely cannot use it for this other purpose". I thought their only way of stopping some part of the government from doing something was to create a law removing that authority. And it's hard to imagine them removing the military's authority from withdrawing from a war. :)
You're absolutely right, of course!

For what it's worth, I posted my reply before the poster admitted they were the CEO. I took the accusation as being slightly tongue-in-cheek. :-)
The upsides remain the same, but in small teams there is less pressure to go for a component architecture, so you have to come up with the discipline to go through the extra effort initially.
Yet another password leak. This one is for eBay.
Here is the story: http://www.washingtonpost.com/blogs/the-switch/wp/2014/05/21/ebay-asks-145-million-users-to-change-passwords-after-data-breach/?utm_content=buffer21d31&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer

What do you think of SAuth? It could really harden such cases and protect users from leaked passwords. Here is how it works: http://www.cs.columbia.edu/~kontaxis/sauth/index.html
That's a good explanation indeed. But then again that applies to almost anything of a political nature.
So why not use a service like Squarespace (or their dozens of competitors) to build a new, attractive website with a hosted WYSIWYG editor, and everything else the non-profit might need?

Even hosted CMSes have a lot of cognitive overhead,
and the content is trapped away inside someone
else’s system.

Fair point, but I'd much rather explain to someone that I'm helping that they click this button over here, type in a box over there, and then click the big "PUBLISH" button than try to explain HTML or FTP to them.

I've had a few occasions to help friends with the websites for their small businesses, and I've always tried to impress upon them that they need to be self-sufficient for their long-term web content updating strategy. I can't upload files for them every time they need to change some copy.

$10/month should not be a deterrent, especially given that you, as a professional developer should be able to bill out that hosting bill for a year in a single hour of your time. If you're helping out a non-profit, donate an hour or two of your time and $120 to help them build a new website, instead of ten hours of your time today, and then an hour of your time every month in perpetuity.
When Doctors Play This Game, You Get Better Medical Care
Which modern router do you propose? I am currently running Tomato, it's a great balance of ease-of-use and customizability. I'm not interested in having to do everything on the command line on the router as well, so if a modern router can run some great version of Tomato, it would be fantastic.
It depends on your definition of "dense"
Gambling games are bad for the exact same reasons that grind-based are bad: people play them for the addictive reward mechanisms. If you're not affected by those mechanisms, you're usually left with garbage.

Variable rewards are also the reason why poker is one of the few games with a heavy skill component that can move large amounts of money directly between players; few people are willing to be a sucker. So losing players have to either get something else from the experience, or be convinced that they aren't losing players.

I said elsewhere in this thread that skill-based vs. luck based is a continuum. The most popular poker games tend to land on the sweet spot where "enough luck that bad players can think they're good" and "enough skill that you can actually be good" meet.
You have to include a provocative title that excites the newer HN members. Rename the article "How race/gender/class sees irreversible climate change" and re-submit it.
Or what a bunch of projects have been doing for years -- Erlang on Xen, HalVM, etc. etc.
Lack of true competition.

ISP's have little true competition anymore against other ISPs, so there is very little competitive pressure to force prices down to the actual costs plus a small margin.

Or, to put it another way, the ISP can charge $50 just because it can.
Great list. Especially:

Convincing others is delicate work - Start with the most important point only. Once they begin to see that the current situation might not be perfect, introduce more ideas slowly. Act unemotionally. Allow them to think through the idea on their own. Watch 12 Angry Men again.

Obvious now that I read it, but until I did I hadn't thought about it that way.
How to use the “yield” keyword in PHP 5.5 and up
Should be better now. thanks :)
I edit my own site by hand. I ssh into linux vps, navigate to folder, launch nano, edit, save, exit.

Then I go to my browser, hit F5, and presto, my change is displayed.

Ahhh, and I don't even use CSS! Only html5.

I use the following tags: h1, h2, h3, h4, p, ul, ol, li, br, strong, and i.

I use &copy; and &amp;

And I let the browser render as it wishes.
Just wanted to say that I love the naming of the OS. Brings back memories to the classic Dune games I played when I was younger.
> "Actually, could you remove the facebook link from the header and put it on the footer"

This assumes the site has a header and a footer. The author just specified navigation. Maybe the facebook link is only on the home page. Is that a real problem?

> "James might need to make some changes in the future, don't worry only the edito ... HTMWhat ? FTPWhat ?"

Then someone can help them get it set up, when that happens, and it will be easier for the person helping James to get them set up with whatever tool James is comfortable with. It's hard for people to learn skills they don't need to use right away.

> "This needs to run on IE8"

Depends on the tools that are being considered, some new tools like ZURB Foundation (which is one way to use Sass) and Angular don't support old browsers, for reasons that are valid for a web app but not for a simple website.
My First Macaroon: A New Way to do Authorization
I use it from Greece through a proxy and, even then, it's great.
I haven't used the latest version of Jekyll, but from having used older ones, I can say Middleman definitely feels more flexible to me, in terms of how its configured. See my comment elsewhere in this subthread for more color on that.
The story of sending away for a guide to this opaque game is pretty funny. I'd never heard of that.

I have heard however that with a similarly difficult and opaque game, Tower of Druaga, it was not uncommon in Japan to find a little box next to the machine where you'd find a collectively created strategy guide. Gamers at the arcade would add to the knowledge of what worked and what didn't in order to pass each level of the game. It was a sort of early strategy wiki.
There is a good write up here about Swiss privacy laws and how they have their own, which do not comply with the EU, etc.

https://www.bestvpn.com/blog/6803/5-best-vpns-for-switzerlan...

Not an promotional link, it just happens to be a decent article with linked source material.
Perhaps someone who knows more about this than I do could explain why in this article it says that static electricity is not a form of energy. But I know I've see cases where you can get static electricity to light a bulb for a brief time.

http://amasci.com/emotor/voltmeas.html

Actually here it is:

http://www.scientificsonline.com/human-powered-light-bulb.ht...
Ha! I did the exact same thing when I beat Dragon's Lair, had the crowd gathered around, mic drop and everything. A computer gaming magazine had listed most of the moves so I studied up the night before.
IMHO, and with respect, poker results have a very high variance which may yet overwhelm your good results.

According to back of an envelope calculation, if there was no skill in poker, and you were just coin flipping, approximately 1 player for every 28 would come out with similar results.

This is a statistically significant result, I suppose, but not very. There are presumably many thousands of players who can present similar results, whether or not they have any skill. The jury's still out over whether you can continue this streak and claim +EV in the long term.

You should have some serious concern about this, since you are subject to self-selection bias in posting these results.

All-in-all, your results don't yet convince me that poker is a skill game, or at least not (yet) that you are skilled. Get back to me after the next 18,000 games, if you feel like it.

I confess to some dubious assumptions but I tend to believe that those assumptions averaged in your favour. This perhaps illustrates why poker is so good at hooking people.
Ok so I got in touch with support, and I had to reconfigure the behavior of my mac's, which in turn affected my other iOS apps that I run on this machine.
I think I would like a refund for this app, I truly need something like this but charles would just drop in and listen and not interfere or force me to change the behavior of my mac.
Frankly, I've yet to see a truly stunning game pass me by, either in the indie space or on the App Store (where this problem has existed for a little while now). Market saturation causes mediocre games to become buried. The obvious solution is to not make mediocre games. I'm still convinced the cream will rise to the top.
Glass Sphere Could Revolutionize Solar Power
Part of your problem is probably that it's not really news.

Pretty much everyone knows that climate change is happening and that we should be doing something about it (not that that translates to much action).

The IPCC keep publishing reports like this mainly in an effort win over 'skeptics'.