skysight-inc/HackerNews huggingface dataset:
>if all else is considered equal, the best practitioners are statistically most likely to come from the largest population. //

So as USA has a slightly greater female population the best practitioners of anything, say, will be female?

>"The population higher in testosterone makes better bricklayers? [...]" //

My point is that whilst I find that completely uncontentious and largely unremarkable it's the equivalent assertion that in other fields no one sex can in any way be said to be better, eg based on biological principles, that feminism trumps scientific observation that there are actual differences in the sexes that can manifest themselves in different occupational abilities (across a population).

This is writ large in the assertion which is often found that because there are fewer of one sex than the other in a given occupation there is sexism involved rather than there being the possibility of a sex bias in ability or desire to participate. I might also note that it's almost exclusively "too few females" in higher-paid jobs that are male dominated but that the proponents never seem bothered by their being "too few females" in lower paid jobs or "too few males" in higher-paid female dominated occupations.

>eugenics* //

We're pretty far away from that in asserting that observation of populations show that traits often have a statistical sexual bias. Surely so-called "positive discrimination" is far closer to eugenics than my laissez-faire approach of not concerning ourselves with the sex of people in any occupation but instead providing equal opportunities to the sexes to enter careers their personal inclinations and proclivities favour.

Though TBH I'd be happy to entertain the debate over whether reproduction should be supported by states along more meritocratic lines in order to avoid breeding the population away from desirable traits. So now you can justify commenting on eugenics to me as at least related to concepts I'm happy to explore.
It's great to see more adoption of the open source Spree Ecommerce platform. Ultimately its open source platforms like Spree with all the community commits that will win out when it comes to platforms of choice. Elevating more examples of adoption is great
HN submissions to help you learn something in just minutes
Great idea, pretty poor execution. Gifs are bouncing/animating around all over the place for no apparent reason. Clicking on a gif to view just keeps loading indefinitely. Then I have to earn points to get a gif so I click to tag, but that doesn't seem to work either. I genuinely saw value in this idea. I was hoping for an app that aggregates the searching of gifs across all the popular meme/gif sites and let's me manage and tag them so I can quickly grab them when I need them. Instead, this app opts for a more complicated, less valuable, and unstable service. I hate to be so harsh, but thems my thoughts.
I think this is a positive move. My gmail for instance is one of the better-protected services I use: I have a ludicrous password and 2FA. The reset options only include dialling my mobile (not voicemail) or emailing another account (which isn't otherwise associated with me to anyone who knows me), which is also protected by a strong password.

Why not allow Apps to not use passwords in this case?

In addition (for me) the app would be on my mobile, which is passcode protected (and fingerprint). Beyond that security you have full access to my email anyway, so what's any additional app password going to provide?

since you need the device (which you're presumably steeling) AND the passcode for it, does this make it 2FA? I think I've read Apple claim as much in a Data Protection document, but I wonder whether you can really count the device you're trying to log in TO as one of the Factors?
I love these tools lists. It's great to get a lay of the land out there if you are new to web development.
love streamus! is it still in the top?
It works! Thank you, rsl7. I retract my DDG hate.
The Visible Problems of the Invisible Computer [1999]
If someone else had access to my email I'd have bigger problems than my shopping app being compromised.
Mods should switch to the NYT headline ("Scientists Report Finding Reliable Way to Teleport Data"), which is appropriate. The current HN headline ("New Research in Faster-than-light Communication") is out to lunch.

Entanglement is not FTL communication.

Edit (having now skimmed the paper from Spittie http://arxiv.org/abs/1404.4369): Quantum teleportation isn't FTL communication either.
That's great that you feel that way and that your team may not discriminate. So why can't Google post those numbers, too? It would make them look great!
I'll mention my theory of what happened with TrueCrypt here, because it's relevant to a search for alternatives.

I believe TrueCrypt was started as a student project, and was no longer worth the effort to the developer(s). For a student or young developer interesting in cryptography, the reward is in the work itself, and in other people using the software. A decade later, though, with less free time, it's much less fun. At that point, a developer could either commercialize their work, or abandon it. TrueCrypt had very little chance of commercial success, since full-disk encryption comes with all new operating systems, so it's been abandoned.

My conclusion is that only for-pay (open-source or not) FDE software can be a viable alternative to TrueCrypt, anything else will eventually be abandoned too. Consider that every project mentioned on this page is based on dm-crypt, part of the Linux kernel, which is supported financially by Intel, HP, and so on. That is a viable, long-term solution, and probably the only one.

But if we want a diversity of cryptography software, we are going to have to start paying for it.
Easily. It performs the same task, is actively maintained and supports things like EFI. If you know of a better alternative on the windows platform, please do tell, because I'm not aware of one and neither are the TC devs it appears. Just because an alternative is not as perfect as you would like does not invalidate it completely. If you try actually reading, you'll note that I am the poster of many of the comments above. Please avoid making an ass out of yourself in the future. And keep your retarded paranoia out of legitimate discussion.
I've just started using git recently and have completely fallen in love with its power and flexibility.

But as someone just starting out, I can relate to how demanding git can _seem_ to a beginner. Say I have some refactoring ideas floating around in my head. I could either begin accommodating for these changes in git (namely branching, perhaps also chunking my edits into commits) or start coding and go back and handle commit isolation and branching later.

For me it can seem like git is getting in the way if I select the former method, and that the latter is just messy and cumbersome. But the more and more time I invest into the tool, both my efficiency and the cleanliness of the code base increases. Persevering through the higher learning curve (which exists probably due to a minimal (bad?) interface wrapping a set of concepts that can best be understood visually à la Dwarf Fortress) appears to be a worthwhile investment.
Yes, your analogy does stand. And it stands to reason that the intruder should be punished, and/or sued, for trespass. It is not a legitimate reason to be in someone else's house.

Going around trying to open everyone's doors is a similar analogy to some other security research. And while its not as clear-cut, in fact arguably not a commonly cognizable crime, it certainly is suspicious and its reasonable for law enforcement to investigate such activity.
Precisely why we should be supporting companies like DuckDuckGo.
Great comment!

In case anyone is interested, there have been some studies done where researchers send in two identical resumes. The only difference is that one has a traditionally 'white' sounding name, whereas the other has a name more associated with minorities. The 'white' sounding name performs better in these types of tests.

http://www.slate.com/articles/business/the_dismal_science/20...

^ This article gives some more information, including an interesting story about two brothers named Winner and Loser. The most relevant quote, however, comes right at the end:

"The data show that, on average, a person with a distinctively black name—whether it is a woman named Imani or a man named DeShawn—does have a worse life outcome than a woman named Molly or a man named Jake. But it isn't the fault of his or her name. If two black boys, Jake Williams and DeShawn Williams, are born in the same neighborhood and into the same familial and economic circumstances, they would likely have similar life outcomes. But the kind of parents who name their son Jake don't tend to live in the same neighborhoods or share economic circumstances with the kind of parents who name their son DeShawn. And that's why, on average, a boy named Jake will tend to earn more money and get more education than a boy named DeShawn. DeShawn's name is an indicator—but not a cause—of his life path."

(Levitt and Dubner, "A Roshanda by any other name")
Be number 1 on HN in 10 minutes
If OpenSSL software foundation is a for profit operation, why are tech companies funding it(1) instead of LibreSSL?

1: http://arstechnica.com/information-technology/2014/04/tech-g....
Can't believe I never caught that until now... and now I can't "unsee" it. Impressive.
Poll: Unban TempleOS?
Today after reading the article on Emperor Norton a parallel with SF/HN, Emperor Norton and Terry Davis struck me.

More and more HN'ers are re-posting his writings and even if they upset some I suspect that we could survive if we let Terry post as a regular account. Sometimes he has good points to make and he's an interesting fellow, and more of a genuine hacker than many here can lay claim to. All those who wrote an operating system from scratch please raise your hand... He's not always equally easy to follow, sometimes downright offensive but it's all just bits. Since I browse with 'showdead' on it makes little difference to me but I suspect it will make a huge difference for Terry, as far as I can see he means absolutely no harm.

So I propose we re-instate TempleOS as a full member, if that has popular support and dang agrees.

I recognize HN is not a democracy and that the 'management' has every right to ignore this petition if the answer is positive.

If you vote in the poll remember that is not the same as voting for the poll.
yes, please un-dead TempleOS' account
abstain
no, definitely keep things as they are
Hyped, yes. Fluff, no.
Interesting... I hate it.

I don't want any applications with a different interface or unique looking widgets... round tabs, menus different than anything I've ever seen, buttons that no longer move, etc. Have always despised skinz! of any kind.

If I decide on a new theme, I'll choose it myself from the OS, thanks. Please improve standards support and fix bugs and stop revolutionizing the interface every six weeks.
The way it is stated assumes that 0.12 won't be coming until all issues and pull requests are closed, which clearly is not the case.
We can, as long as you believe these new warnings shouldn't be taken at face value. It adds a layer of doubt to the situation that wasn't there before.
I have always wanted to create a Data Science training course which finds the right dataset to expose the power of the technique in question. I think this dataset will give me a good start. Thank you!
> Email is much easier and more controllable than notifications.

True, but not for the user. I would much rather accept notifications than type in my email address. I avoid the risk of getting spammed, don't need to decide what email to use, don't need to decide if I trust the developer. And with app notifications, the ability to unsubscribe is much more consistent and reliable.
Other than Facebook Ads you can try hashtags on Twitter, Pinterest and Instagram to reach a few more of those audience.
i had this conversation with a friend on why are tech companies the darlings of public opinion but guilty of such terrible things. look how Monsanto is the Devil Incorporated, while Apple has in US tax evaded cash more money than around 2 times Monsanto's market cap (Monsanato trades at a frothy 24 PE). Walmart is everything evil despite cant do no wrong Amazon does everything they (in a negative sense) do only many times greater.

Meanwhile Google has done terrible things including ripping off bandwidth providers, and not to mention they hold a monopoly on search. conspiracy theorists seemed ill concerned on one organization responsible for answering all their web queries. could go on about outsourcing of jobs, h1b visas, causing a recession, etc etc.

not that any of these companies are 'evil' or even 'wrong' in my eyes, but why do others treat tech companies with such endearment and throw so much hate at a handful of other companies?

we're thinking geography has a lot to do with it. Many influencers on the east and west coasts know a lot of people that work in these companies, and write very positive things about them. not completely altruistic, as they are also heavily invested in them.
How would you feel if I broke into your place of business, made a list of all of the things you were doing that were out of compliance with federal and state laws and regulations, then left you my card and offered to let you hire me to do legal compliance work for you?
me too.. it's more likely to be a token that's cookied and sent over SSL per api request. Same token that would get generated if they auth'ed via password.
Announcing the Chorus.js project: API Orchestration for #Node.js apps
Fair criticism, though largely due to the fact that the server is completely overloaded :(
A security audit may also miss subtle bugs, and the proposed corrections may introduce new bugs.

A rewrite has the benefit that it will lead to manageable code, instead of the current mess. Clean code has less places where subtle bug can hide, that does not change just because you are doing cryptography.

Anyway, they should send money to both. Both are important, and those companies make so much money using free software, they shouldn't be choosing the projects with that fine granularity. The problem is that they won't, and as much as kyledrake does not like the answer, it's because of Theo. Yes, it's a stupid decision, but it does not make it less real.
The title, along with the rest of the article, seems to obscure an important point. Although the entangled particles appear to communicate with each other FTL, the observers can't communicate any information with each other this way. There are still lots of applications of this to quantum computing, but there wouldn't be any way to build an ansible with this.
Shameless plug - I wrote a Rails engine for this type of authentication mechanism called NoPassword - see https://github.com/alsmola/nopassword
This seems to be the full paper, if anyone can understand it: http://arxiv.org/abs/1404.4369

(If there is a way to make me feel stupid fast is to read those papers).
Thank you for letting me share my opinion.
A logo is nothing like a city layout.
nice aggregation. Takes me far beyond my few usual go-to sites. I have some reading to do!
The tagging aspect of the project is interesting. Being able to find something specific easily on the web can be at times difficult due to a general lack of descriptions for images.

I have a habit of describing by filename every single image/gif/video I download which helps beyond measure when performing a search, and have over 8,000 files named in this way. I can find what I'm looking for in a few seconds. The benefit is it only takes a few moments to name initially but saves an enormous amount of time in the long run. Rewarding users to tag descriptively is a nice idea.
Sure, and there are lots of companies that don't have any policies against hiring women. It's just that everyone who does hire, happens to hire from their fraternity, or their best friend's recommendations (which are from his fraternity), etc. And it just happens that there are no women in any positions of power at that company, so nobody ever even asks the question if they should do things differently.
Soylent - Juice Fasting re-invented, but now with branding.
"...this kind of "pro bono" work isn't telling us anything we don't know..."

That's scary right there. If you're deploying something you know has vulnerabilities you have bigger problems than losing sleep at 3am. Same for operating something you know is vulnerable. You (collective, not you, personally) totally deserve to get up at 3am. It's grossly irresponsible, because what you probably don't already know is how that harmless XSS vuln you know about is really a leaf in a 7-level deep threat tree that results in information disclosure. I can just imagine that such a cavalier attitude is how the Sony PSN network got owned.

My point stands. Attack from Iran or probe from a researcher (your points in your following paragraph noted and notwithstanding)?

"...If you don't own a system and don't have permission for it then don't attack it."

That's loud and clear, for sure.
You've spammed this same message a number of times now, isn't it enough?
You're right about the pinkwashing. I didn't mean for it to sound as bad as it did.

Having a much younger little sister sort of led me to that comment. I'd enjoy if there was some way to teach her programming that she would also enjoy and undeniably, for her, it would be something stereo-typically associated with what young girls like (cute creatures, bright colors, etc.). Obviously girls, just like boys, have much more diverse interests than what society sees as the "standard", but it just seems that something targeted at stereotypical young "girl-y" interests (forgive me for using girly and not a more descriptive term) is missing, while there is lots of tutorials for stuff that is more stereo-typically associated with other demographics.

Hope that explained it without coming off as sexist or discriminatory. If not, I tried.
I wrote a similar blog post a while ago advocating this approach. It was inspired by MixPanel sending me a login link alongside a forgot password link - http://dangoldin.com/2014/05/20/logging-in-through-your-inbo...
Django's now part of Google's Security Patch Reward program
It's actually a fully-featured framework that can be set up in whatever way you like. The realtime part is special because it's one of very few web frameworks that have integrated WebSockets from the very start in the core.
this guy's been places :)

http://en.wikipedia.org/wiki/File:ISEE3-ICE-trajectory.gif
Whoa I did not know anything about this story until now ><

On a related note, I also just noticed that the "Arecibo Radio Observatory" was in Goldeneye!
"All these logos are sized to fit in 16 x 16 pixels." - I was surprised how crisp these look for 16 pixels, then noticed the file was actually 32 x 32 and shows up as such on a retina display. It's a fair point that only the first four logos are recognizable when 16 pixels though.
Then you become the steward of the project and continue forward. Forking will introduce an untold number of new bugs, some of which may be worse than imagined. Right now, native libressl only works on bsd's, when openssl codebase works on many os's. There are ports being made, which will introduce more bugs.

Bugs being in a tracker for years is not uncommon.

Here's OpenSSH's tracker:

https://bugzilla.mindrot.org/buglist.cgi?bug_status=__open__...

331 bugs, a large majority of which are pre 2012.

This is not a sign of inactive/apathetic developers. It's a sign of big and old projects.

I have no doubt the OpenBSD folk are excited about this now... but 5 years from now? More? What's the long term viability of this project? Will they eventually put all OS's on an equal footing instead of *BSD's first and port to other OS's?

Forking was not the answer. The answer was to fix the perceived problems in OpenSSL and make it as solid as it can be. It's splitting talent and resources unnecessarily. Especially when the two projects are under the same umbrella (OpenBSD Foundation).
I wonder how names with alternate spelling fit in?
It sounds like you're saying they shouldn't be entangled, which is reasonable, but under what definition of "entangled" are they not currently entangled?
Is this the satellite NASA had given up because there was no communications equipment left?
Apparently they're gonna win, however seems they'll choose a winner among top 5
How OpenDNS decided to eliminate ads (and the revenue from them)
What This Dive Bar Can Teach Startups About (Not) Marketing
Setup Cloud CI in 15 minutes with Jenkins, DotCi, Docker and DigitalOcean.
I don't think this is a great solution for highly sensitive information like banking - most people have lots of different devices that receive their email and just one "weak" link could give malicious access.

That being said, for sites this that are more concerned with "verification" than "authentication" this seems like a viable approach.
Ask HN:  When should I stop telling people about my business?
I run a bootstrapped startup that's three years old and growing steadily. Revenue is doubling year over year. We'll hopefully do $400,000 in 2014 sales with a gross margin of 25-30%. I'm having a lot of fun, learning a ton, and the business is providing a living wage for me and my one full time employee. I'm almost 23.

I share a monthly update of our financials and a general summary of what is/isn't working with a group of 20 friends and mentors. The goal is to get feedback and spark ideas based on what's working for me. If someone asks me out in public about how the business is doing, I still tend to tell them our revenues and my goal for the year. I want to give out real info - not hide behind "we're doing well".

I think that, being an HN reader, I'm inspired by others' stories and I want to share mine to have the same impact. However, I think at some point I'll have to stop sharing all of our info with such a broad group. I'm concerned that some friends may become jealous and the updates will have a negative impact. I'm concerned that the updates could come off as arrogant. And to some slim degree, I'm concerned about the info being used maliciously.

What do you think?
- Is sharing financials and updates about a young startup beneficial for others to hear?
- When is it time to tone down the updates?
- Is it likely to come off as arrogance when giving financial context to non-startup friends?
It looks like TrueCrypt and BitLocker has been trying to solve a different type of problem.

BitLocker is somewhat more business oriented -- thus they feature things like key recovery, more protection (or might be taken as limitation to some) when the hard drive is removed from one computer and ported to another machine, etc.

TrueCrypt seemed to be aimed more toward security than manageability, lacked those features above, which might have aligned with user demographies that these "business" requirements either they didn't want to have or not relevant.
This all could make sense if license for TC would be open source, like MIT, GPL or AGPL. If he simply do not want work on it - no problem, just give it to people who want to keep it running.
Brawn v brain: Muscled out
Is it an allowed solution to have instantaneous information transfer between distantly separated points if there was a slower-than-light bulk transfer phase beforehand? This is the idea of physically carrying a supply of entangled photons to Alpha Centauri, which might take a hundred years, then enjoying your Netflix streaming in real time until they're all used up.
BrightnessTheme: Adjusts Sublime Text theme based on your Mac's brightness