skysight-inc/HackerNews huggingface dataset:
>As it stands, what this app fails to do is establish a channel of communication.

This might be the allure. Its a message without baggage. There's no guilt for failing to say "hey, how are you man?" No shame in saying "yo" and getting on with your life. Because it lacks the ability to "establish a channel of communication," it inherently removes social pressures to extend the communication to a degree one or both parties may not want at the moment.
like "lap top" but it goes on top of the palm of your hand (at least that's my revisionist version)
Even though it often isn't spelled out, this is mostly about content-controlled JS loaded from the web, though the language itself also has its problems. And security-wise that app would not be better than one that stored the messages on a server, which only allows you to read them back when you provide the password.
I didn't downvote, but saying the developer doesn't know what he's talking about and that his reasons for deciding to stop working on a project are flawed are each likely to be downvote magnets.

I may refer to this thread the next time someone asks "why don't companies give explanations to candidates they don't hire?" The answer is that the candidates feel compelled to prove that the company's reasons are flawed. Look how they react to someone deciding to stop working on a project.
And how is the crawling of search bots handled? Does Google render this into HTML and interpret the hyperlinks and try to crawl deeper pages as well?
Surprising to me to use "the map is not the territory" this way when static typing constrains and makes provable claims about the territory.

If none, or even most of those top 25 errors don't mostly look like type errors to you, you don't know enough about good type systems to be making judgement calls about them.
It's not quite as drastic: with egcs they basically just killed gcc and renamed egcs, while here it was more of a merger of the projects. Very similar, though.
Readability is one of the reasons I try to avoid the use of the 'var' keyword in C#. It's useful in object instantiation, e.g.

FooFizzBuzzProvider bar = new FooFizzBuzzProvider()
vs
var bar = new FooFizzBuzzProvider();

But in other instances it hides the underlying type too much, e.g.

var query = (from entity in dbContext.Entities
join entity2 in dbContext.Entities2.Include( e => e.Entity3)
on entity.entity2Id equals entity2.entity2Id
select new { e1 = entity, e2 = entity2.Entity3 });

It works. It's nice. But sometimes it's too nice. At some point the returned type needs serialized, or some other issue which requires a strong type. You end up rewriting the dynamic stuff with strong types anyway.
I grew up in Sweden and I second that. Stockholm imo is literally paradise on earth three months per year, especially the archipelagos. I've never seen a place like it, unbelievably beautiful, people are so full of life, you can wear a t-shirt at 5am, temperature is perfect, and so forth.

The problem is that the rest of the year it's pretty miserable weather wise. You notice a huge difference if you visit Swedish friends in the Winter and Summer, they're just totally different people.

I love snow and I don't mind the cold much. It's the darkness that is an issue. Some people go to hospitals to get "light therapy" and even if you live in Stockholm (which is rather far south) you'll probably have 15 minutes of sunlight per day - on your way to and from lunch. It will be dark when you go to work, and dark when you come home.
Odd. I had always been convinced that they switched back to glibc again a while ago, but it seems they're beginning to do it only now.

A lot of people are against forks that they deem frivolous or unnecessary, but I think it's one of the most pragmatic and important parts of free software. It's a failsafe, a Second Amendment, if you will.
everything needs to be justified
On a related note: back in a previous, embedded incarnation, I was once tasked with writing a USB driver. Not the kind that might first come to mind - this was for the /device/, for which documentation is rather less easily found. With the aid of this resource (no, no spam), I was able to make our gadget come up as a fully compliant composite HID/microphone device.

http://www.beyondlogic.org/usbnutshell/usb1.shtml
I wrote this so others wouldn't have to hunt down all the tools I used, or worse, waste a lot of time on scam jobs.
No. No I'm not. If anything your hostility is indicative why it is so beneficial that we now have these virtual forums where we can exchange ideas on these topics in a non-confrontational manner. Nothing is gained through hostility.

Let's be clear. I do have an agenda. But you also have an agenda. Your approach is only going to make my resolve firmer not weaken it. Maybe, I don't know, think through what you're trying to say a bit more before hitting 'reply'. Also, have an unbiased look at the other replies to my comment.
Can you provide any more details on your stack and what you're seeing that blows away alternatives?

I'm running a staging version of our Rails 3.8 app with MRI 2.1 and Puma in clustered/threaded mode and everything looks pretty good .. but I haven't been able to throw a ton of concurrent traffic at it yet. Potential thread safety issues give me the niggles, not quite ready to replace Unicorn on production just yet.
You are delusional. Two separate congressional commissions in the 70s and the 90s concluded the long term sustainable population of the USA is under 200 million.

Moving people from poor places to rich places increases the environmental impacts.

https://www.youtube.com/watch?v=XW-NtQr89u4

Anyway, "moving people around" is not a useful way to look at American immigration. The numbers of people overseas who would move here are effectively infinite.

https://www.youtube.com/watch?v=LPjzfGChGlE
Couple projects I've contracted on were using codespaces for their private SVN repos. I used git-svn, so that's a mercy...
Have you considered that perhaps the investors have more information than you, or the founders have an insight that you don't have, or that this is not their final product?
Gravity’s strength still an open question after latest measurement
the meaning that can be given with a single word.

Very little in this case. There's a reason simple "This" comments are discouraged on HN. Having said that, I do agree that single words can contain a lot of meaning at times. This just ... isn't a great example.
whats a debian?
Um, does it make phone calls?

Find it weird how the primary feature of the device is glossed over.
You presumably gave the app permission to (among other things) read all of your texts when you installed it.

iOS's sandboxing mechanism doesn't expose text messages to third-party apps.
Good point. That I can believe.
It seems I stepped on some sensitive (Norwegian?) toes here by a sloppy formulation seeming to imply that Sweden == Scandinavia. :-)

If so, I am sorry about your national pride. The countries and weather are really similar, especially from my present viewpoint from far to the south.

(And if you're just a troll wasting people's time, get a life kid.)

Edit: It seemed from other comments you are Norwegian, so I assumed you knew all about the local weather. (I.e. similar, maybe a bit warmer and more rain in Norway, depending on exactly where.)
That's not a small correction and it's worth noting, thank you for pointing that out! Yeah that information should be prominently displayed there. "This phone costs $200+contract and comes with $100 worth of Amazon Prime for free" is a much better selling point than "This phone costs $200+contract, just like every other high-end phone out there"
It doesn't have that permission on Android to read texts.
In Europe and a lot of developing countries, where missed calls aren't charged for - this kind of 'nudge' communication is pretty common. I have no idea if it'll work in the US but it's certainly valuable when both parties already have known context, e.g. 'I'll missed call you when I'm outside'
When Apple stops bothering to compete.
This is coming to Docker. libcontainer is getting support for user namespaces[1] and the Docker engine will have a static configurable root map once the changes land.

[1] https://github.com/docker/libcontainer/pull/23
200 million is ridiculous and obviously not true as we've already broken 300 million without any problems. Japan supports around 130 million people with an American-level lifestyle..it is much smaller with ALOT less arable land (the interior are all mountains!).

A billion is really not a problem for a country as resource rich as the USA. We already produce much of the world's food, and our biggest problems usually amount to not being able to water our Kentucky bluegrass lawns whenever we want to. Even if we forget about much of the dry west, we still have lots of space (and the west actually isn't that dry...).

Immigration is a great way of allowing for global social mobility. I hate the mentality of the "we got ours, screw the rest of you" mindset of the anti-immigration types. It is not only selfish, but morally wrong.
This may all be true. At least they have the M in MVP covered.
Ask HN: What Is The Best Way To Discover New iPhone Apps?
I was wondering if there is a good service/app/website for discovering apps that are newly released, are on a deal, or are truly interesting and new in nature (like the sort of thing you would find on producthunt.com). Also, is there a way to find apps that are in an open or invited beta as well?
That's why I have a Mini on the bookshelf that SSH's into an EC2 instance (IP restricted) during a 1 hour window each night when the router is set to open and copies that day's PGP'd backups over. Then it goes back to sleep to wake on schedule the following night. Not the same as a tape in a vault, but it's my last resort.
I'm not recommending that they do it one way or another - there're a lot of new possibilities that should be explored, which means that more of the same might not be the way to go. All I was saying that it's silly to say categorically that "drones are slow", because they certainly don't have to be - if anything, they have the potential to be even faster and more maneuverable than manned fighter jets, because you can get rid of a lot of the cruft and restrictions related to keeping a pilot alive and letting them pilot effectively. No more canopy, no more cockpit shielding, no more visible instrumentation and layout requirements, no more ejection seat, no more oxygen supply, no more human survivable g-limits, etc.

I'm also not advocating for a completely autonomous drone, just saying that automatically flying a plane to evade a missile doesn't seem terribly difficult, as far as AI problems go, and the amounts of money thrown at these sorts of things are absurdly large.
It's nice to see Seattle being promoted. 'cuz, you know, maps and photos are almost always of SF. Go Seattle!
We had a game of it erupt at my office as well. I wasn't even an actual player to the game but had _far_ too much fun seeding discontent among the alliances and feeding real/fake information to the other players (all good friends of mine).

The best is when someone actually got betrayed and then I'd get to say "I TOLD YOU THEY'D DO THAT!"

Can confirm it's a game for trolls lol!
OpenGL and Chinese.
I'm using Firefox and it worked for me.
A good one, thanks. Yes, that makes good sense. I guess that in some languages twitter really does carry a lot more information than it does in Latin alphabet languages.

If your language would only allow for 140 bytes you'd be really out of luck if your language routinely requires multi-byte sequences in UTF-8.

Hm. You could do a 'tweet compression' trick where you use a fixed number of bit from a subset of UTF-8 that you know is multi-byte (selected for the extra long sequences) in order to put longer messages on twitter, and then use a decompressor to turn it back into ascii.
Actually he sprang up from the Ben Franklin franchise store he first bought and learned a lesson the hard way, a short term lease is a great way to lose a location based business to an unscrupulous competitor or want to be competitor. Wal Mart was modeled on Meijer's idea of one stop shopping.
When I wrote this, I'm not sure if the iPhone had been released; certainly at that point if you were carrying around something computer-like in your (large :) pocket (more powerful than a PalmPilot) it was something like a Jornada http://en.wikipedia.org/wiki/Jornada_(PDA)

This sort of form-factor came directly out of things calld "palmtop pc's" like http://en.wikipedia.org/wiki/HP_95LX
"The only proof I need is the proof of my own life experiences"

So basically you are a fundamentalist who is not interested in evidence.
Japan is a global shipping or energy crisis away from utter catastrophe. You really think that's a situation we should shoot for? Japan is wisely choosing to lower its population.

And major lol at the idea that Japanese have a quality of life comparable to Americans. They commute over an hour one way to tiny apartments and enjoy spacious neighborhood outdoor recreation facilities such as this: http://treasureheart.weebly.com/uploads/1/8/3/3/1833287/3026...

Clearly we haven't broken 300 million without problems. Quite obviously we've had an explosion of sprawl and loss of open space. We've had massive growth in infrastructure demands. It's very easy to argue that most major urban areas have seen a major decline in quality of life for the middle class.
7 Tips For Stellar Sales Prospecting Emails
"Saf" means naive in Turkish.

I am actually a big fan of statically typed languages. But it's naive to think a type system will make your programs correct by catching type errors. I do believe a type system helps making programs correct as a design aid.
Does it run Windows? Because libvirt/qemu does. A slow speed beats 0 speed usually? ;-)
Make your browser go OMG rAiNbOwZ
hue morphing javascript craziness in a tweet.
Real companies don't. I know a major video provider in Cambridge that replicates everything to S3 and Google Cloud storage for this very reason. Now, neither has ever gone down for them, but if you've got to stay up, you have a resilient architecture.
i think they measure tank armour as equivalent to RHA steel

so it probably isn't steel in large quantities just as good as 300mm of RHA
C#'s var keyword tells the compiler to infer the type. It still has a statically determined type so that shouldn't interfere with type-polymorphic functions such as serialization routines...
6*140. But as your sibling comment points out twitter is not based on octets but on code points so there is actually a lot more information in there. I made the assumption that the limit was the 140 byte limit from GSM messages with a 'payload' of roughly 6 bits per character position but as was pointed out it is in fact now 140 UTF-8 code-points.

https://dev.twitter.com/docs/counting-characters
Reminds me of LiveJournal's dead harddrive induced closure. When will startups learn how it's done?
You are more than an atheist. You are an anti-religionist, regardless of the content of the religion.
Yeah. The ability of Javascript to underpin a cryptographic system isn't a question. For some systems, where the code will never be transmitted to an executing system, no problems.

It's the transit that presents a vulnerability. If the cryptosystem can be intercepted and modified enroute to the host that will execute it, it cannot be considered secure. If the cryptosystem is delivered as part of an embedded system, it's more likely it can be considered secure.

edit: I'll add a caveat to the cannot. It's more reasonable to consider it secure if it sends a hashed checksum of itself to a server, using itself to generate the hash and it sends a copy of itself to the server to generate the hash. If the hashes match, it's quite likely good to go. The total transmission required for this style of code authentication is worth consideration.
Have you ever seen late night TV ads for a golf club that allows you to piss in it? I never understood Instagram and Snapchat and the likes. I don't use it and I find it's ridiculous that there people who use it. But apparently there is whole mass of 17 yrs olds who live on this crap. It's similar to whole mass of 65 years old craving for pissable golf clubs. These kind of things either will inspire you to make more things like that or just brush them off as side effect of huge human population where even 0.01% of market is pretty big number.
Thorough Guide to Ember Data
The problem is that with the in-browser use case, which is what this whole discussion is about, the code being executed locally came from a remote source. For all of the reasons that Monsanto and the others name it is impossible to ensure that the code does what it claims to. So even if all of your data is stored locally, you have no strong way to ensure that the code that is performing the cryptographic functions is not secretly compromised by an attacker so that, for example, it sends your data in clear to some remote server.
This post shows a problem with YC. It's very technical, and frankly - great content. But generates exactly zero discussion here.

Why? Where are all the memory-barriers discussing hackers? Where are all the JVM implementators? Where are all the low-level concurrency geeks? Memory model experts?

Clearly not here. Sigh.
I don't use Docker, but this is just good peace-of-mind practice.
This is interesting. It would allow me to make quick work of all the markdown files I have to get them alive. +1.
Does this conflict with the NSA's collection and retention of mostly non-responsive files?
You are painting everything connected with religion as if it is fundamentalism.
Pass a basic test? Written? Fill-in the blank? Multiple-choice? What would it test? The potential user's conformance to your ignorance about the effects of cannabis?

Your idea is basic as hell, that's for sure.
Ortega y Gasset was right.
Curry and Howard would like to have a word with you.
http://en.wikipedia.org/wiki/Curry%E2%80%93Howard_correspond...
> So, it isn't actually a bit more challenging then?

More challenging, yes. Riskier, no.

I don't like that Javascript doesn't have native support for big integers (like Python does), or that it stores numbers as floating points in a 52-bit mantissa, but I fail to see why this makes developing crypto code riskier.

> Also, it seems to me like you are at least forgetting timing and possibly other side channels.

Well, I ain't. When you don't control the instructions being executed by the CPU you may have the risks of security-sensitive information leaks. This applies not only to Javascript, but also to all scripting languages. I could say that it also applies to Java, if the methods in its BigInteger class aren't fixed-timing.

In other words using Javascript doesn't make the problem any worse. If you disagree, you're invited to take a look at End-To-End, find a side-channel leak and write an exploit for it. You could earn serious cold cash with that finding.

> I just can't see any actual scenario where that helps, mostly because it seems to me that the cipher text usually would be a plain-text equivalent, so it doesn't really matter to the attacker whether they have the plain text or the cipher text.

I described where it helps in my article.

Re your last point: if doing SSH in a browser isn't crypto I don't know what could be. Is the only thing you consider Javascript crypto encrypted webmail? That's your problem then. You know one wrong use case, and you refuse to admit that there are other legitimate ones.

Edit: remove a few unnecessary sentences.

Edit: some people don't like Javascript crypto so much that they downvote me without saying anything.
Introducing Canvas – a new way to build emails
I uploaded these datasets to Google BigQuery in case anybody prefers to use that to go data-diving:
https://bigquery.cloud.google.com/table/833682135931:nyctaxi...
https://bigquery.cloud.google.com/table/833682135931:nyctaxi...
Go 1.3 is released
Big Scope Status Bias
Bitcoin is only one of a wide range of digital currency's and seems likely to fail long term. Not for any specific reason just the odds of a first mover winning long term have historically been low. Which suggests the most useful discussions are going to occure with the designers of a new currency.

PS: I can't think of a single technology over 20 years old where the first mover is still the leader. Bell telephone company is the longest run I an think of.
This is the sort of comment that belongs on Reddit.
He could check how long the spam sites have existed by using archive.org.
The main criticisms of JS crypto that I've seen have nothing to do with the language, just that it's in-browser scripting hosted by a third party. Even if the language were perfectly designed for cryptography, the problem is the trust model - every single time you decrypt or sign something, you need to load your private key (or give a password for key generation, or whatever) into the script, which means that you need to make sure that the code has not been subverted every single time, which is nearly impossible to do anyway. So if you try and offer a service that says, "Even I can't access your e-mails, they are end-to-end encrypted using Javascript in your browser!", that may be true right now, but you can revoke that trust unilaterally by changing the Javascript and I won't notice. You could be compelled to do this. Your server might be compromised in some way, then all of a sudden you've got my private key. The whole problem that end-to-end encryption solves is that the server/cloud can only say, "We won't look at your data.", not "We can't look at your data." If you're controlling the encryption process with javascript, then you can't necessarily decrypt the data when it's at rest, but the next time I log in, you could snatch my keys, and maybe you've already done that at some point. So now we're back to a "We won't look at your data." model, because you're just making the choice not to subvert the crypto javascript.

Think about what you'd do if you were going to install TrueCrypt or some other security/cryptography program. Assuming you didn't want to build it from the source, you'd download a binary, and that binary would have an SHA or MD5 hash next to it, verifying that it's the correct file. Other people who compile the binary from source should be able to generate the same file and compare the hashes, so at the very least it can be audited and you can verify that you've got what they say you have. To do the equivalent thing with in-browser Javascript, you'd need to check the MD5 hash of the javascript that you're executing every single time you use the script, BEFORE you start the encryption/decryption process. You could use some sort of browser extension to check that the script you're about to download and execute is the same one you've used before, but if you're already installing browser extensions to do something like that, you might as well just install a browser extension that does the crypto for you without having a trust relationship with a server.
> * Is the company good for suppliers / producers of content/goods? I honestly cant answer this one.

Producers? Yes. Wholesalers? No. Amazon will do its best to cut you out if it is a noticeable amount of money.

> By the way I like the phrase "unusually unethical".

Hah, thanks. I wish I had higher expectations but I think capitalism makes that hard.

As for the rest, I mostly agree.
> None of this bickering changes a simple truth: when a web mail provider claims to provide "NSA-proof" end-to-end encryption, hosted in Switzerland just to be safe, using software that you don't have to install on your computers at all, then you need to assume that web mail provider can read your email, and so can anyone who can coerce that provider into doing something. If you believe that --- and you should --- then I don't care what you think about the rest of the Matasano article.

This. The whole article could be replaced with this paragraph, and it couldn't be clearer.