skysight-inc/HackerNews huggingface dataset:
> Yes, you can. It's called contributing to a project. If the "half million lines of diffs" were actually things needing fixing, then the upstream team would accept them. If they are not necessary changes (such as ripping out all windows compatibility), then no, they would reject such changes.

I take it you've never dealt with an inactive/apathetic upstream before? Just because someone is the steward of a project does not mean they should be. This is perhaps one of the most valid reasons to fork!

The LibreSSL team says that there were big problems on the tracker that languished for years, such as OpenSSL not working correctly when you disable their custom memory allocator. If the OpenSSL team can't deal with bug reports in a timely fashion, what makes you think they will bother reviewing and merging hundreds of thousands of lines of code?
Ask HN: Please, validate my idea
Hi! I am thinking about building simple service to store interesting places (POIs) to travel in the future. There are many services which let you share your past trips, pics, etc. Sure, there are also many services for trip planning.

I would like to implement a service to keep a list of places to visit and also specify travel preferences + available vacation days and some other criteria to get recommendations from the service. It is not much about travel planning but more about optimally using vacation days and not forgetting about places to see.

Something similar exists on TripAdvisor in Saved Trips section, but I do not find it very convenient.
Thanks for your feedback!
the project just uses the very basic structures from GLib, then it is possible (and planned) to migrate out of it in the future.
Kirk Douglas was known as Isadore Demsky when he grew up in Amsterdam NY in the early 20th Century.

Apparently it was a popular male name for immigrants and first generation children in the early 20th Century. It was often shortened to "Izzy."

There was a social trend in America during the middle of the 20th Century to "anglicize" names. For example, I have uncles who changed their birth name in the early 50s from "Wozniak" to "Wagner." Even Izzy Demsky became Kirk Douglas when he grew up.

Let's take for example, the children in "the Godfather" books, The older children have "old country" names (Santino, Fredo) and the younger children have "new world" names (Michael, Connie.) It's almost as if the older kids "Americanize" the family when they go to school.

Anyhow, names are funny things when taken in aggregate.
How do code security audits actually work? Are various well-experienced people just combing through the code and trying to break it? Or is there a more formal process?
I use CHM format, sometimes exported to HTML if need be. I use www.helpndoc.com for the purpose.
> ...judged summarily by police...

Wikipedia claims [1] that the offender can't be summarily judged by the police because they must agree to be cautioned:

> In order to safeguard the offender's interests, the
> following conditions must be met before a caution can be
> administered:
> * there must be evidence of guilt sufficient to give
> a realistic prospect of conviction;
> * the offender must admit the offence;
> * the offender must understand the significance of a
> caution and give informed consent to being
> cautioned.

Did you mean something else when you wrote "summarily judged?" Or does Wikipedia have this wrong?

[1] http://en.wikipedia.org/wiki/Police_caution#Circumstances_fo...
Cory Doctorow's keynote at Chaos Communication Congress (2011) was about this trend. It's not technically feasible to make a turing-complete system that only does things that the creator likes. All anti-virus and DRM systems are provably limited unless general-purpose computation is removed. https://www.youtube.com/watch?v=HUEvRyemKSg
The Berry That Could Replace Sugar
Gonna toss my hat in here for the engineering bit. Plenty of programming and math out there, probably owing the the fact that physical material is harder to work with virtually... there doesn't seem to be much quality circuit and low level stuff. The micro-controller class on edx just past being a major exception.
Interesting indeed. I wonder if you could hack something more interactive together by making something that generates DICE circuit description from eg KiCAD schematic/netlist, and compiles/runs the project.
I had noticed neither that the arrow in Amazon's logo points from A to Z nor that the arrow resembles a smile. My guess is that the only competitive advantage resulting from such design flourishes is the free press you get from designers discussing your logo.
Setting the Document Title in Ember Apps
Ask HN: Is Node.js hyped fluff?
We don’t need solar roadways, we need to help unleash current solar panels
In 1992, the Galileo spacecraft imaged the Earth-Moon system from 6.2M km
Why's this better than people using Pinterest to pin places they want to travel to?
Lyft plans Austin launch without approval
> what state the SSN-holder was actually born

No, it was the state where the SSN was issued. Not all children applied for an SSN at birth. Centralization of SS offices also altered this practice.

See, e.g., http://www.ssa.gov/history/ssn/geocard.html
>though men tend to use the former and women the latter when referring to a theoretical or nongendered person or whatever //

Any evidence to support that assertion? If one isn't comfortable using the neutral pronouns - identical as they are with the masculine pronouns in English - the tendency is to use [singular] "they" or "his or her" IME (anecdotal as that is). I don't find women generally choose to use feminine pronouns more unless they're trying to make a point in doing so.

Example: suppose there is a sentence "Each Cub Scout must build and light a fire in order to gain his backwoodsman badge". People, myself included, will tend towards saying "gain their backwoodsman badge" rather than choosing to say "his backwoodsman badge" or "her backwoodsman badge" according to the speakers sex. Of course some people will also get upset about the gender neutrality of words that end "man".
Wikipedia has a page comparing OTFE (on-the-fly-encryption) products [1].

It compares them on features such as operating system, Hidden containers,,	Pre-boot authentication,	Single sign-on,	Custom authentication,	Multiple keys,	Passphrase strengthening,	Hardware acceleration,	TPM,	Filesystems,	Two-factor authentication

[1] http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_s...
One of the benefits of using a url router is access control - you could have a problem with just letting every file be executable by url, especially if you happen to have a remote file inclusion issue anywhere. With a router you know explicitly what can get invoked and what can't.

Although, doing it without a router is probably always going to be faster.
What is the customer's recourse though? Get even slower DSL?
It's surprising that Jacob isn't one of the top 25 most common male names considering that it's been the most popular male baby name for 14 of the past 15 years.
In both states in which I've participated in the operation of a business the rule is that any business which has operations in the state has to register and pay taxes in that state. Maybe VC firms require it, but to me incorporating in Delaware just means I'd have to keep track of another set of corporate regulations in addition to the ones in the state I actually do business in (currently California).
UX architect at a stealth AI/Search startup
Company:

The founding team is comprised of recent Stanford Alumni from the Algorithms & Artificial Intelligence Labs. We're backed by tier-1 VCs and we are currently in stealth. We've been instrumental in founding key projects at Twitter, Google and some reputed silicon valley companies.

The Role - UX Architect:
- Design and implement UX for our flagship product

- Opportunity to invent new interfaces on mobile for something people use everyday

- Take on a Leadership role

Experience:

- Excellent Javascript, CSS, HTML skills

- Comfortable with frameworks like backbone.js, etc

- Some basic experience with with design photoshop/illustrator is a plus

- Familiarity with ios/android programming is a plus

Location:
- SF Bay Area/ Silicon Valley

We'd love to hear from you! Please email us at
stanfordfounders2014@gmail.com

with a link to your linkedin profile. Thank you for your consideration
Consider it validated by at least me - I already run a similar service, although it's user-hostile and insecure, not suitable for general use, but I already use it and find it of value.
Comparing requests to a server to edge sorting in blackjack is really insightful. The analogy isn't totally similar, though, since in the edge sorting case, the player walks away with money, while URL chopping just gives information.

I should mention that the player involved, Phil Ivey, is probably the most famous poker player in the world. According to Wikipedia, "Ivey is regarded by numerous poker observers and contemporaries as the best all-round player in the world today...his other nickname is 'The Tiger Woods of Poker'." [1]

[1] http://en.wikipedia.org/wiki/Phil_Ivey
Theo's "outspokeness" is believed to be the reason that DARPA canceled a million dollar development grant.

https://en.wikipedia.org/wiki/Theo_de_Raadt#DARPA_funding_ca...
Coshx Labs is giving away $50k: last day to vote (50k of development work)
50k of development work
I am just going to note that in five^H^H^H^H six comments you carefully avoid discussing how I motivate that you are a bad troll: https://news.ycombinator.com/item?id=7809359

Trying to avoid that is admitting I am correct.

(And to call an obvious troll for troll is not insulting.)
> Chances are, someone will either fork TrueCrypt (version 3.1 of the TrueCrypt license seems to make this a legitimate possiblity)

Given this comment and some inspiration from tacotime in this [1] post, it dawned on me: What if this whole thing is a not-so-subtle effort by the developer(s) to renew interest in TrueCrypt and pass the torch? The license ambiguity might be an issue (in terms of whether it retroactively covers encryption support in earlier versions or not), but if that were resolved, then perhaps all of this speculation, wild conspiracies, and other noise is for naught. Maybe this is their way of stepping down and saying "Hey, look, we're not maintaining this anymore. We're changing the license, so knock yourselves out."

[1] https://news.ycombinator.com/item?id=7814800
No one is trying to "prove" 0.12 isn't coming soon, we've put lots of work into it, and look forward to its release, and its got some great new features.

I'm not sure the tag states are always up to date, perhaps they are, but the fact remains that 0.12 has been "real soon now" for quite a while, so saying it might be a while still is a pretty safe statement.

The core team is working hard, but I think the PR queue is a good indication of how scarce a resource review time is.
Manage, Tag, and Send Your GIF Collection From Your iPhone
Its great to be unpredictable (Owen, slightly older than 8).
They're supporting 4 projects so far: OpenSSL, OpenSSH, NTPd, and an Open Crypto Audit Project (OCAP) audit of OpenSSL. The Network Time Protocol project is here: http://ntp.org/
World's largest event dataset now publicly available in BigQuery
I kind of like that. If you don't get the reference, you have nothing to worry about yet. :)
While I never noticed it pointing A->Z, I did always recognize it as a smile. I guess it depends on your perspective.
My computer seems to be unable to contact the airgif servers. :(
Have you ever noticed the arrow in the FedEx logo? I'm always surprised how few people have "seen" it.

Go look now: https://www.google.com/#q=fedex+logo if you don't know what I'm talking about
Your "so-called" diversity blog post makes no mention of color-blindness. :-p
There's a screenshot in the article. http://tctechcrunch2011.files.wordpress.com/2014/05/2014-05-...
I love that he went a little crazy in public and the city residents just went with it.
In many ways yes. There are very real downsides to the node.js programming model and it's not necessarily faster than other tools and frameworks. Even boring old Java Servlets outperform node equivalents in many areas.

Where node excels is if you want to write your server in JS and you don't mind the evented nature of it.

If you don't love JS and evented code, avoid it.
There have been several cases of adulterants in both food and medicine from China for the purposes of increasing profit margins -- and two cases that come readily to mind were in 2008.
Ask HN: Which open-sourced mobile app codebase is the most insightful to study?
I am trying to learn how to build mobile apps and want to know which codebase you guys think are particularly clean/well-laid out. Preferably ones which have good architectural documentations (or bloggers explaining the architecture).

For example, this guy does a lot of code reviews for open sourced games/game engines: http://fabiensanglard.net.
He has a very good code review of DOOM on iPhone: http://fabiensanglard.net/doomIphone/index.php.

Particularly insightful blogs on how to architect modern mobile apps (even if it is closed source) are also welcomed. For example Dropbox's tech blog on how they structured the code for their photos app:
https://tech.dropbox.com/2014/04/building-carousel-part-i-how-we-made-our-networked-mobile-app-feel-fast-and-local/
Completely agree that the Amazon logo is a pretty questionable example of a "great logo" and the story doesn't really improve it. I'm increasingly often thinking that the Twitter logo is genius. That little bird is so recognizable – and endearing!
No. (If you want a more nuanced answer, ask a more nuanced question..)
This totally nailed my Mom. That sounds worse than I meant it.
Frida 1.6.0: Spy on any Android app in real-time
Thanks, Colin! Good to hear that I am not the only one needing such features. Do you have any plans on launching public service?
¿Qué es Play 2 Framework?
As to point 1). In the publishing industry "editing" is not the same thing as "copy editing". Good editors are typically (at least with their established authors) involved very early on in the process and are usually pretty close collaborators with the author with regards to the shape/narrative structure/pacing etc. Waiting to get that sort of editor until directory before releasing a book is akin to getting an analyst involved right before shipping a software product.

The economy that allows for this time/skill intensive work is the blockbuster phenomenon. J. K. Rowling's later books didn't just repay her publishers for the investments in her early ones, they subsidized a large percentage of all the other books published while she was popular.

Lots of industries work this way, movies, music and VC are all predicated on a similar model. Does that mean it can't be disrupted? No of course not, but it isn't as simple as "authors can hire their own editors", because quite frankly none could afford it.
This is great news. NTP is one of the least appreciated OSS projects. Harlan and the rest of the ntp dev team are very helpful and deserve a lot of respect for keeping the clocks on time. I can only hope that increased ntp funding/awareness/development means that BitKeeper (not a typo) is finally replaced by git/mercurial.
Any error handling that forces me to add extra lines into my code is one I see as too obstructing. First and foremost, asynchronous exception handling and propagation, and "long" stacktraces that go with it, should be a core part of the JavaScript language, and I'm personally waiting for that to happen at some point.
In the meantime, the best solution I was able to come up with is "LAEH2". See it here: https://github.com/ypocat/laeh2
As I writer, I feel the author is painting a picture that has been painted a thousand times before. In that particular paragraph, the additional material dominates the paragraph at the expense of the main point (which itself is strangely spread over a block of paragraphs).

As a reader I felt my time was wasted. Some explanation was in order, but I did not need to know the origin of the technique. "Work-process manual" is snooze-inducing.

Rewritten:

This spring, after staff at Washio had gathered for their daily "stand-up" meeting–in which employees are kept on their toes by giving status updates literally on their feet–operations manager San Nadler broke some bad news.

This draws the reader a bit into the meeting and explains what is meant by a "stand-up meeting" without bogging the reader down in details or the "philosophy of software development." If that philosophy was important for the author to communicate, it really deserves its own paragraph.
I did. It's not worth posting though.

I think writing a php router is one of those things everyone who works with php should learn to do. It teaches you a lot.
Are Static Web Apps Cost Effective?
The visual storytelling of the associated video https://www.youtube.com/watch?v=XH863XXRZEQ is fantastic. You can watch the vid w/out sound and still understand the point they're trying to make.
We have a 1-minute launch video, too. Check it out https://www.youtube.com/watch?v=KjeTnfD70jM
Is it possible to give them more granular donations? I want to support OpenSSH and LibreSSL, but I don't cae about OpenBSD.

The reason I don't donate to them is that I feel like most of my donation will be going towards something I don't care about.
But I just told you. Social. Linkedin. Vimeo. YouTube. Other things. Sure you don't get the "instant win" of having a big player link to you. But you also are not so dependent on ONLY that big player.

It's kind of like the difference between being discovered by an A&R department of a record label or going the indie route like Ben Haggerty.
is it easier these days (since ~2000) to outsource lab work to other countries ? i would imagine shipping + people in china / india are much cheaper than even grad students.
This depends on a couple of different things. The most important of which is "at what stage of development is the application? (i.e. how mature and well tested is this code)". Software Development Life Cycle (SDLC) processes are great when followed from the start. When they are applied long after the first 100k+ lines of code are written then its harder. A typical code audit for us (I do this professionally at http://leafsr.com) involves some threat modeling, attack surface enumeration, manual data-flow and taint analysis ("where does untrusted data come into this application and how is it handled") and finally just reading the code. Timing and scope will heavily influence how deep you can go. 1 week on OpenSSH will probably get you nothing, 6 weeks on OpenSSL will definitely get you something.

(edit: expanded on what is most important)
i's irreducible simply because it's a unit-sized basis vector for how much of a quantity is in the "i direction". It's just something to hang a coefficient on so that it doesn't mix with the real part. We could just as well invent a similar thing for the reals, and call it g. Then your result is 6i + 8g. Or we could use tuples. It doesn't matter, as long as you do proper bookkeeping of the real and imaginary parts.
It's kinda dumb that you don't have a video of this.
> Lots of industries work this way, movies, music and VC are all predicated on a similar model. Does that mean it can't be disrupted? No of course not, but it isn't as simple as "authors can hire their own editors", because quite frankly none could afford it.

Well, some could, but only ones that are already succesful (either as authors in the existing system, or from some other field.)
Balsamiq fits well to most iterative needs atleast in my experience.

I am talking exercises where you are tweaking, changing an already sketched experience or work flow.

When it comes to wireframing for an experience from scratch, my first choice remains pen & paper, simply because I know that tool for 20+ years now and it gets my creative juices flowing :)

After the basic sketches are done and critiqued by every "design conscious" person (read everyone in your organization), its usually time to migrate that work to Balsamiq for future iterations.
Obligatory pg link: http://www.paulgraham.com/submarine.html
Task – a pure PHP task runner
UBER: A New Hypermedia Format for APIs
I am just trying to imagine how would I use Pinterest for that, and think that I need more control over the list/board, travel specific filters maybe, etc. But for simple list, most probably, something like Pinterest will be enough, imo. I will check Pinterest once again to see if it is convenient for what I am planning to build.
> Things not to do with your gloves on: ... II. For your safety: ...III. For other people's safety: (a) Using the phone.

Heh, had to remember that this was way back in the year 2000, and not everybody had cell phones.
This looks like a good resource. But be sure to understand all the implicit assumptions in each data set before announcing your amazing discoveries!
And as someone who has been on both sides of doing security research and systems administration. Generally, this kind of "pro bono" work isn't telling us anything we don't know, and since its not coordinated with the target it'll potentially get system/network/security adminstrators up at 3am in their morning to respond to your probes, and will drain company resources. You're also demanding that the company address whatever it is that you find, in short order, when it may actually not be the most important thing to the business -- particularly when you announce it to the world rather than follow responsible disclosure.

When "researchers" then flip around and talk to the press and don't follow responsible disclosure, then what you're dealing with really is a hacking attempt. You're walking up to the doors and windows of a business and jiggling then to see if they're open and taking notes on what kind of locks they're using and how they could be bypassed -- without any kind of approval from the business owner. Then you're turning around and damaging the business by talking to the press about it.

Back when I was more interested in computer security (roughly '94 just like tptacek), I knew that scanning systems that I didn't own without permission would get me in trouble. We seem to have devolved a bit in our collective maturity where we think we can just fly the flag of "security researcher" and that this gives us permission to initiate what look just like attacks on systems.

If you don't own a system and don't have permission for it then don't attack it, and don't put the government in the position of trying to discriminate between a foreign government launching attacks and a "security researcher" with pure motives... And don't be too shocked if the government and legal institutions have issues in distinguishing between those two cases and throw you in jail for 15+ years. The way to avoid that outcome is not to do it. Only attack and probe systems that you own or have permissions to attack and probe. Just because you're a "security researcher" who is egotistical enough to think you can save the internet from itself, that doesn't mean you're going to get treated differently from a foreign national with less pure motives. Stay away from shit that isn't yours (and the security of the entire internet is not your sole responsibility).
I'm not certain, but the abstract says We prepare the teleporter through photon-mediated heralded entanglement between two distant electron spins. So I think there's a classical setup phase, then the information transfer is instantaneous.