skysight-inc/HackerNews huggingface dataset:
That is a weird request to me. Telling that it should go to the LibreSSL effort is very much like telling OpenBSD developers what they should work on. The way I understood it, most OpenBSD developers are not for hire, not in a manner like this anyhow. These people work on the things they want to work on, and they share the result of their work as a gift to the world. Donations are a gift in return, and the funding enables them to hack more (i.e. hackathons, hardware for developers who need it, infra, etc.) and to share the result with the rest of us (servers & infra).

Can you imagine someone saying "I want to give you this gift but only if you focus on thing X (which I care about) and not on things Y and Z (which you care about)"?

Keep in mind that the BSDs strive to be a complete, integrated operating system. While some devs focus on small parts of the tree, many or most work on the larger whole. Improvements to specific parts are a part of improvements to the whole. Working on LibreSSL is a byproduct or part of working on OpenBSD.

Can you buy a faster server and more bandwidth to serve this one subdirectory in your project? But don't spend that money on anything else?

EDIT: Having said that, developers are and have been funded to work on specific things.. IIRC the kms work was sponsored, and gilles works on smtpd as a part of his job. But I think it would be kind of rude to disregard the effort the core OpenBSD devs have spent on LibreSSL and only donate if you can give that money to one or two paid developers. Look at it this way: Theo works on many many parts of the system. So does Miod. And so does Bob. As do many other developers who commit changes to LibreSSL. They're in it for OpenBSD. Can you tell them to forget OpenBSD and do LibreSSL for you?

EDIT: Or how about this? Sorry guys, this hackathon we're allowed to touch libssl only. Why? Because some people "donated" for us to work on LibreSSL and LibreSSL only. I don't think it can go like that. It becames work for money. Work on specific things people pay you to work on. Work for people who are voluntarily working on OpenBSD. I doubt many OpenBSD developers would attend such a hackathon.
Machine Language for the Commodore 64 and 128
Crowdfunding for opensource challenge developer
Hi,

We have started here a crowdfunding session to collect $ and give back for the best developers during a "challenge developer".

https://www.indiegogo.com/projects/marketplace-opensource-developer-challenge

If you are like us, and love the opensource and the coding parties, help us and contribute.

For the win!

Denis.
Someone should name a tool timey wimey.
Harnessing fear when things don’t go as planned in business
Similarly, here is a $12 phone, again a design with only 2 main ICs, but with far fewer features (although it does have Bluetooth and an ARM...):
http://www.bunniestudios.com/blog/?page_id=3107

The mention of "XCPU RISC" in the datasheet led nowhere but RDA's site, and I suspect that it's some sort of MIPS clone. They also have an ARM-based SoC, the RDA8810.
Hands On The Sigmund Freud Typeface
Yes, this truly is the phase change that will get us out of this hole. Self-driving cars could also practically use battery-switch-out technology and very rich rental models where we don't all have to own our own cars anymore, reducing the actual cost of manufacturing by making fewer cars, another big win that you simply can't optimize the current system into.
Indie Tech Summit Brighton
Are you a resident in the South East of the UK? Are you a designer, developer, politician, activist, academic or social entrepreneur working in the area of Indie Tech? Then this might be for you!?
Neuron tells stem cells to grow new neurons
Strictly, economics 101 says that if you raise the price the quantity demanded will decrease. Demand is a curve.
Security considerations for DevOps adoption
Looks like a common typo to me.
I found this passage remarkable:
...signing up is so easy! It takes a few seconds...

How can any-one come to such a blatant misconception? No, sign-up is NOT easy and it takes WAY more than a few seconds. I have to think up another effing password and have my password vault handy for adding it to the cheat sheet. Not knowing what it is you sign up for doesn't exactly make it any easier, either.

I still have no idea what Kivo does...
Good point. But his ideas live on and his idea #17 written in 2008 still applies. But you are correct. The chicken man sign should read: "Hey Sam, I have P.G.'s #17 in my pocket..."
App using Google Glass lets you shoot accurately around corners or behind cover
ok, get info-raped by any and all then.
why would you want to be secretive about running a relay?

You're varying the "if you've got nothing to hide" argument. You would want to be secretive because spy agencies quite definitely ARE interested in who's running nodes, as if they know who runs the nodes, and where they are, shutting the thing down becomes possible.

This is how they think. Strategic opportunity. Not what they can do with the data today, but what they could use it for tomorrow. What opportunities they might lose if they didn't have it.

This is therefore how you need to think too, and why I think that volunteering this information is a bad idea.
Opens world for kid phishers :)

Almost good, but no images (tried with google.com)
Agreed. The sheer brilliance of clarity in the classic TCP/IP Illustrated: Volume 1 - The Protocols only becomes visible in hindsight. Anyone know if the the LaTeX source for its diagrams are available? I have been able to emulate them for the most part in graphviz using shape=record when required, but wonder if that was the technique used.

(PS. Reading the above tome ~1999, I actually discovered numerous specification flaws in the RFCs ... eg. for ARP and ICMP, that could be used for remote OS detection.)
4 Signs Your SaaS Business is Dying
If latency isn't a problem a tape writer and a bunch of tapes can be very very very cheap...
The LA Clippers Sale – Ego, Scarcity and a Tight Auction
The requested URL /how-to-tell-if-your-ui-sucks/ was not found on this server.

Well, that's one way...
> If you can link against crypto libraries written in C, why is that an issue?

Rust is memory safe and C is not, so it seems to go against the benefits of Rust.
I knew something was going to be changed, and still fell for it. Good job.
Dropbox announces Webhooks
With reference to the parent's suggestion, 'winning' the game means getting paid. Hence game theory :)
The very first step, assuming you already have an email account, for all platform pages:

>INSTALL THE ENIGMAIL PLUGIN FOR YOUR EMAIL PROGRAM

I Googled Enigmail as I was not familiar with it. It is "a security extension to Mozilla Thunderbird and Seamonkey." This seems incredibly shortsighted. Tons of people out there are on Outlook, Apple Mail, Gmail, etc. and not interested in Thunderbird.

There are other options, for example the surprisingly EXCELLENT gpgtools.org installer for Mac, which makes it super-easy to add signing and encrypt/decrypt and key management to OS X and Apple Mail. A quick Google reveals the nicely packaged gpg4win.org (I haven't used it). There's also Google's new Gmail GPG plugin (although yes it's beta) https://code.google.com/p/end-to-end/

I know this is the FSF, but I'd hope in the interest of defeating the surveillance state they could set aside dogma.

(Also, that page shouldn't default to the Linux options when I'm visiting from a Mac browser.)
Well, most of it is redundant.
How long will you be storing the data?

How important is the data?

What level of redundancy do you need?

How much data is there?

How frequently will you be writing new data into the storage set?
Aternity Mobile APM for App Developers Now in GA
The 226 billion gave it away. No chance they will sell for less than half a trillion.
4. A "mis-use of JS"?
It's certainly non-canonical - but I'd argue that many "standard" common practices got their start being just as heretical and then were later replaced by standardized ceremonial ways of doing thing

----------------------------------------

I can't tell you how many hours of time I've wasted on non standard "Standard" things simply because it saved some other guy 20 minutes in time somewhere else. It's a nice hack, but let's leave it at that.... try to improve your resume with other methods.
The change can be seen here:

https://github.com/openssl/openssl/commit/bc8923b1ec9c467755...

I noticed (in that commit anyway) there were no tests changed. Is it pretty standard not to test things like this? If I find a major bug in code I write, I usually write a test first and TTD until it's fixed.
Since tls-auth merely creates an HMAC around all the TLS message types, it makes me wonder if there's still an aspect of initiating a TLS connection (or flaws in the HMAC generation?) that could leave tls-auth vulnerable to future TLS-related flaws. But that could be excessive paranoia.
Selfies Anonymous. (VIDEO)
If you're feeling particularly nefarious, run the URL that Shtrurl.co gives you through often used and more readily "trusted" shorteners like bit.ly or tinyurl.com.
A friend of mine made Uncontext [0] with the goal of having people use it to create content as in this article. Instead, I made a hopping bunny. [1]

[0] - http://www.uncontext.com/

[1] - http://www.uncontext.com/literature/bunny-hop
OpenSSL was such a painful codebase to work on that people quickly gave up trying to test it. https://twitter.com/OpenSSLFact Also their memory-management wrappers made it impossible for valgrind etc. to even see which memory was "used" and "freed" inside the program. http://www.openbsd.org/papers/bsdcan14-libressl/mgp00007.htm...
Indiegogo’s Danae Ringelmann on Crowdfunding as Market Research
Yes, it has been about 13 years since I took econ. Since children are integers and are in daycare in quantities between 1 and 30ish per employee it's possible to increase the price to the point where it either covers the cost of the employee's OT or the quantity of demand is zero.
Elasticsearch $70M Raise: Enterprise Open Source Grows Up
Maybe I'm weird but writing a test, seeing it fail, fixing the bug, and then seeing it pass is quite delightful. Having a set of 100+ test, doing a large refactoring and seeing them all pass, is a completely joy. Then again, I also like writing documentation.
Show HN: Trellodoro – Trello + Pomodoro = Personal Kanban Bliss...
The merchant is always the loser unless the fraud was so high the merchant goes bankrupt (this happens) at which point the payment processor is on the hook.
Apple To Abandon Headphone Jack. Suddenly Beats Deal Makes Sense
Havok: Bridge between Docker and Vulcand
Aha! I should have thought of alt+f4.

The reason it becomes a problem for me is that once I have a handful of apps open, it gets frustrating to use the hot corners to flip through open apps and find the one I actually want, past the multiple programs that I'm done with.
Phone, flashlight, and self-defense tool, all in one!
http://shrturl.co/lwqKm
I don't think we need all of those seven things to be ready for use, otherwise we'd block 1.0 on them. They're all high-priority though.
On a touchscreen, you swipe top to bottom. On a non-touch device, you update to 8.1 update 1 and there's a close button in the top right. Admittedly, that close button should have been in there in 8.0 for non-touch pc's.
I think it's pretty hard to take a stance in this case. On one hand, Amazon wants to keep prices low for customers, but don't want to pay the subsidy from their pocket anymore. On the other hand, Hachette doesn't want to pay part of that subsidy either, and they threaten the authors that if Amazon has its way they will have to get a smaller royalty (because they aren't willing to lower their costs).

Amazon has a lot of power, and they could easily start abusing it either soon or in the future, but for now I think they are fighting in the interest of the customer. Hatchette on the other hand, is acting much like the big music studios - threatening that the authors/artists will be the ones to lose, and not them.

The truth is the publishers and big studios are becoming increasingly more threatened with extinction, and in the future there won't be room for them to take the majority of revenue from a book. Either they adapt to take a much smaller cut, or they will go bankrupt.

That's why I think Amazon is on the right side of history here. I also think Amazon is on the right side of history, because I don't think most ebooks are worth $15, which is what most of these publishers want them to be at (going by the deal with Apple).

Either way, Amazon won't be subsidizing their ebooks by $3+ forever. They will eventually raise the prices, and I don't think that will be good for anyone. Not Amazon, not the authors, and not the publishers either, as there will be a lot fewer ebook sales. I think the $9.99 price point played a huge role in getting people to read e-books (remember when reading ebooks wasn't anywhere close to the acceptable way of reading a book?).

What's the ideal scenario here? It's for ebooks to remain $9.99 (or less) and for Amazon to end the subsidies (which would make things easier for their competitors), which of course means the publishers will have to take that $3 cut themselves (I don't think the authors should take any cut, as they already get pretty low royalties from the big publishers). If you agree that this is the ideal scenario, then you agree that Hatchette is in the wrong here.
X-Men: Days of Future Past, Explained in Git
The bizarre secret of London’s buried diggers
`module.exports` All The Things!
It will be more helpful when GMail has it built in... Google?
Am I missing something, or did they just break backwards compatibility again? Bad enough the first time around, when they conned a bunch of lazy-ass devs into only supporting 360 pads and our standard USB gamepads stopped working.

I try to avoid knee-jerk Microsoft bashing, but they're really making it hard.
Someone call the ghost of McCarthy.
Well, this is sort of fudd being spread by the libressl project.

Most old and large codebases will have a mix of coding styles, etc... even at big companies (take a gander at the recently posted Windows 2000 source code for example, or the leaked Half Life 2 codebase, etc).

Does it make testing more difficult with preferred tool X? Maybe... but perhaps tool X isn't the best fit for the codebase? Or perhaps minor changes could be made to make it work well.

In any event... part of being a developer is being able to read and understand a variety of coding styles... since, coding styles have zero effect on the code's purpose/execution.

Not trying to detract... but we should remember the people who complained about the coding styles and difficultly in reading/understanding the codebase were new to the codebase, and the codebase was not in their expected format... which is normal when you sit down to any new codebase. Also... this is a crypto codebase... so there will be an element that is always difficult for an outsider to read and understand.
The only reason I clicked was that I was wondering, "no, that couldn't be it."
Bullshitting developers who are about to use your compiler to verify your claims, would be silly, right?

I mean, as opposed to users who won't run benchmarks.
How the Recession Reshaped the Economy, in 255 Charts
it's still bloody damn hard i get nightmares about cashflow
It's a pragmatic decision. Incorrectly implemented crypto has worse consequences than potential memory safety problems.

We have crypto experts on staff who could write this kind of thing, but we have a shipping schedule to meet and crypto is the kind of thing we definitely don't want to rush out the door.
Hopscotch Design Fest 2014 Announces Speakers
Based on the differences between ++i and i+=1 alone I would think that there are just bugs they need to squash and that the open beta, and all these eyes on it, are going to help find the cases that are stumbling.

Also, for many of the tests where it was a 400% or order of magnitude knock in performance there are a lot of comments in here refuting those results, so I'm not sure what to think yet.
Show HN: Teddy – HTML DOM templating XML-style with minimal verbosity
How Software Dev Offshoring Creates US Jobs
Thanks! Done: https://news.ycombinator.com/item?id=7852417
I'm still constantly surprised that this feature isn't ubiquitously built into mail clients by default and users don't get a big 'enable encryption' button which automates sane defaults/manages the keychain transparently. It doesn't seem like such a complicated abstraction that it needs so much manual setup
There is psychological difficulty in changing your eating habits. If your actions have resulted in obesity, then the difficulty to change to be losing weight will be higher. So, psychologically it may be of a difficulty high enough to be considered infeasible, still not impossible.
Lima: announcing new funding
Adam Langley at Google has a good technical description here: https://www.imperialviolet.org/2014/06/05/earlyccs.html

Specifically,

With any OpenSSL client talking to an OpenSSL 1.0.1
server, an attacker can inject CCS messages to fixate the
bad keys at both ends but the Finished hashes will still
line up. So it's possible for the attacker to decrypt
and/or hijack the connection completely.
Consider this:

1. It's probably better to remain civil in your discourse if you want people to take you seriously, and not just dismiss you as a troll. If you really do feel so strongly about your position, then you're probably doing more harm than good to your cause by firing off such remarks.

2. I doubt that you personally communicate with everyone using encrypted email. If you do, your world is probably fairly insular (and you should probably consider expanding your experience to include communicating with people outside of your comfort-zone).

3. The most constructive response to the parent post would probably be a suggested plan of action. I'm sure that many here would be all-ears to even a decent framework for convincing the average person to use encrypted email.
An example of a link to a GitHub page: http://shrturl.co/VUYHJ. (Original: https://github.com/mozilla/rust/issues/14657 .)

I see that SHRTURL deleted the page title, which users might also notice – but it’s better than keeping the original title, which would now be wrong. SHRTURL also can’t handle GitHub’s custom font with which they render their icons, so the site logo is missing. And you are logged out in the linked page, which is pretty visible, but there’s no way SHRTURL could get around that.
Four Steps to a Better Agency Homepage
Who is the target audience for this article? Lines like

I leverage the power of my computer to generate the
artwork. Where a classical fine artist would pull out
his oils and brushes to express colors and shapes,
I do the same with parameters.

make it seem like it's written for people who have never seen code before, but then there are extensive code samples. But (!) as people have mentioned, there is almost no context given for the samples and the code file is an RTF.

What?

Edit: I also meant to say that 86 points for this article at time of writing this comment must mean HN is the audience. I'm not sure I like that.

Edit 2: Which is not to say I don't like his work. It's pretty cool.
Email is insecure at it's design, yet we trust our digital lives to it and use it as proof of identity. Security should be at the protocol level for it to be universally used.
Andreessen says he's surprised that people are surprised.

That's because even if you did follow the NSA, you assumed they spied on foreign government officials, "bad guys," not _everyone_. That's the source of the surprise. I don't know anyone who's surprised that the NSA spies on, or hacks into foreign government agencies.

Another thing is the wording - Andreessen says Snowden's a traitor by the basic definition, in which he stole national secrets and gave them to our enemies. That is a consequence of his disclosures. But this information was hidden from the American taxpayer (which is also easy to justify because we all don't have security clearances), but more egregiously, the information was hidden from Congressional Committees that actually have direct OVERSIGHT. And they have security clearances, so what's your excuse then?

So sure, the Russians and Chinese governments now know what the NSA is up to. But that was their full time job to find out and they are probably hardly surprised.

But thankfully, even Congress and the American public know exactly where our taxes are going. And we really aren't the enemy of the NSA.

What we ask our representatives to do with this information will say it all.
Lost all my work due to pressing the backspace key :(
Some pretty big news organizations have run with Onion sources and / or wikipedia falsehoods.
If the fee wasn't supposed to be a price then they shouldn't have made it a price.

Yes, that's what I'm saying. If we replace the altruistic motivation with a monetary one, and we don't have enough money to incentivize people, they will just stop. They won't take the altruistic motivation plus the monetary one.
Ask HN: Configuration Management for Windows Servers
I have a side-project which is a Puppet/Ansible-like server configuration management and orchestration tool for Windows-based servers.

While useful for us, I was wondering if this is something that general community might be interested in (in case you happen to be interested -- http://opsflow.io/ ).

There are several reasons I doubt someone will be interested. First is PowerShell DSC (which, IMO, is an overengineered disaster) and second is the fact that Windows administrators (and developers) still prefer clicking around to configure machines.

So, fellow NHers, is there a place under the sun for something like:

infrastructure {

import {
modules: iis,
roles: [ web_server ]
}

server [ 'mow1aps3.xxx.int', 'srv-aps11.xxx.int' ] {

include {
roles: [ web_server ]
}

directory 'c:\inetpub\xxx.aero' {
ensure: present
}

iis::application_pool 'xxx.aero' {
ensure: present,
integrated: true,
runxxx_version: 'v4.0',
requires: windows::feature('iis')
}

iis::site 'xxx.aero' {
ensure: present,
id: 1001,
physical_path: 'c:\inetpub\xxx.aero',
application_pool_name: 'xxx.aero',
bindings: [ 'http:*:80:xxx.aero', 'http:*:80:xxx.xxx.int' ],
requires: [ directory('c:\inetpub\xxx.aero'), windows::feature('iis'), iis::application_pool('xxx.aero') ]
}
}
}
It's certainly a possibility, but my guess is that based on windows' pretty crazy market penetration (I don't think I've ever met anyone who's _never_ used a windows machine at least at work or school), and the fact that most switching is going the other direction (away from windows), the number of people "new to windows in general" is not worth considering.....but that's just a guess.

EDIT: I guess I'm not considering people who are just buying their first computer, and that that computer is a windows 8 machine......I would be really curious to see the numbers for OS breakdowns for "first time computer buyers", and how many of these were people who genuinely never had their own vs. adults who previously used machines owned by their parents.....I'd imagine this number is also pretty small these days....
Also, have you heard of ejs? It seems like it has similar design goals to what you're working on. https://github.com/visionmedia/ejs
Ask HN: What math, science, and developer comics do you follow?
I am always looking for quality and regularly updated web comics with topics in software, mathematics, sciences, and nerd culture. What do you follow?

http://abstrusegoose.com/

http://www.commitstrip.com/en/

http://notinventedhe.re/

http://spikedmath.com/

http://www.smbc-comics.com/

http://thedoghousediaries.com/
And when you go to their website:

Error

Over Quota

This application is temporarily over its serving quota. Please try again later.