skysight-inc/HackerNews huggingface dataset:
Most professionals in this field act as developers and not necessarily engineers. Meaning, their expertise lies in assembling a system out of app servers, frameworks, etc and are not accustomed to building any individual piece from scratch. And in nearly all cases this is what they are hired to do, use well known technologies to solve a problem.

It is up to the architect of any system to choose these technologies wisely. I tend to favor extensibility and degree of coupling in my design decision which can lead to an over engineered complex solution. However, I rarely regret doing so. The time upfront pays off when changes are requested.
I'm a massive fan of http://hckrnews.com/ for viewing the "front page".

I then use the hackernews enhancement suite to allow for collapsible comment threads and other niftiness.
Modern CPU Performance Profiling [pdf]
So what you're saying is below 56kbps? How long do you think a "slow lane" website will take to load? What would viewing resolutions be for something like Netflix in the "slow lane"?

Give me something more concrete.
> At this time, India CCA is still investigating this incident. This event also highlights, again, that our Certificate Transparency project is critical for protecting the security of certificates in the future.

What is there to investigate? If they had a proper system in place this should not require 'investigation'.

While I embrace the global infrastructure, it's a bit weird to give authority rights within a country that has a pretty broken legal system (re: Avnish Bajaj, etc).
Swapping in a live battery probably isn't a problem. They want to see if the device works or not.

What I meant that if I build a bomb into a laptop, and use its battery space to contain the explosive so that it looks 99.99% the same in the X-ray, I can just put the bomb in the checked in baggage and have it in the cargo space while not having to show anyone that the device doesn't boot up.

But if they can already detect bombs built into devices such as laptops for checked-in baggage — which they obviously(?) and presumably do — then why can't they detect these bombs similarly for cabin baggage? They could just do that instead of asking the passengers to boot their devices.
The biggest violation of OpenStreetMap, ever
Do governments support academic freedom? An organization that challenges the social order? What if your research upsets someone; is your career/organization at risk? Will their ideas and whims serve their citizens and world?

Look at that, asking pointed rhetorical questions is easy!
In symbolic modal logic, it would be along the lines of... if an action is done to you, then accept the belief of the imperative of doing that action to another. So, it would be a command for you to intend to do that action to another.

Axu -> _u_: A_u_y

(those are supposed to be underlines indicating imperatives.) This is the same sort of convention that Harry Gensler uses to prove the Golden Rule using his Formal Ethics system. (I should note I am not a logician and this is probably only a rough approximation - not sure whether it's appropriate to use A instead of a, etc.)
Yes, and it is exactly what folks here are in opposition to.
For fun I calculated the hill sphere for an atom out there.

His distance is awful close to 1e16 meters. Figure an atom of H weights 6e-23 (ha ha we'll ignore isotopes) (edited note, well, thats embarassing, but no one else will notice, not here on HN anyway, and it doesn't change the result, so I'm not redoing the arithmetic in my head again). Guess the mass of the sun at 2e30

So the Hill radius would be 1e16 (6e-23 / (3 * 2e30) ) ^ 1/3 and that works out to like 3e-38 meters or so? And if an atomic bond is like "hundreds of picometers" that means that there's no real possible way for two hydrogen atoms to stably orbit each other gravitationally without influence from the sun at 100000 AU. They could get into a chemical bond, sure, which would gravity gradient stabilize... eventually. But the sun is going to be a part of the party.

If you tossed the earth out there, this close in right now our hill sphere is like 1.5e6 meters, but way out there it would be like 3e9 meters which is pretty big, ridiculous close (well, to one sig fig) to neptune's orbit. So assuming he didn't pick a random number, that does work out that if you tossed the earth that far away from the sun, the earth's little "solar system" of junk orbiting it without interference from the far away sun, would be about the size of the solar system. Which I guess means something, although not much.
Substitute coworkers for IRC/Github, and documentation for Stack Overflow and framework pages, and I see you as being in the same place in either case. When those fail, you're stuck with RTFC.

When you're stuck reading the code, if the code was written in a style assumed by your company and by people whose code you've read before, it will have the advantage of being written in a familiar style.

I will grant you, however, if it's a bit of code that nobody has touched for years, open source software will have an edge.
3D printed earphones – Normal
It's a scary thought that this probably has been going on mostly undetected for over a decade before Chrome added cert pinning.
The article mentioned Commodore 64 and wow, that takes me back. I remember being about 10, we had a Commodore 64 and I spent my weekends typing in programs from "The Gazette" magazine and getting them to run. When we got a cassette deck to save to I was in heaven. I remember asking my dad for the cassette deck stating I didn't want to have to re-type these each time I wanted to play it. Then the floppy came out!
Eminence- "Guess What"
Yes. This isn't something many net neutrality proponents want to talk about, but allowing netflix to have sweetheart peering deals or offering rack space for caching at no cost inside ISP locations IS treating traffic differently.
Does Facebook break up marriages? Research links social networking and divorce
Yeah, in the process of killing millions and all imaginable crimes against humanity, they did a few good things, no one denies that. But if you use those good things as your argument, that's known as the broken window fallacy.
That does not appear to be the case, at least according to anything I've been able to find with a bit of searching. I think you are thinking of Axcom, which RenTec acquired. Axcom was associated with Berlekamp (he was either founder, co-founder, or purchased a majority interest after it was founded...the internet is unclear on this).
This event also highlights, again, that our Certificate Transparency project is critical for protecting the security of certificates in the future.

No! Certificate Transparency still relays on central authorities. We need to get rid of CAs. TACK + Convergence is the correct solution.
Why not just use one of the apps? I know we have half a dozen on Android, and I've seen at least one iOS one, and a couple mobile targeted web versions...
http://www.certificate-transparency.org/how-ct-works
It would be enough for you to notice or else it wouldn't be an effective sales tool. It hasn't happened yet because the FCC has not ruled on it yet.
I don't know why I can't reply to the below comment.

The volume traded on any exchange is absolutely massive, especially on the products where funds might be putting in millions of dollars. There's also an enormous number of prop firms, banks, institutions, hedge funds, mutual funds, and whoever else constantly buying an selling. It would be near impossible to be able to say "Firm X traded at these specific times."

Furthermore, any worthwhile firm moving that much money knows to break up its trades. If they immediately dump $10 million into the market, its going to cause a large market impact, and they're going to leak information they probably don't want to give away (since that's their edge). (See the whole Flash Boys nonsense.)

Lastly, if you could identify a set of trades that were owned by a single firm, it would be a massive benefit to anybody opposing them (ie: everybody else).
you could try the remote programs , On the top of my head hack reactor has one
Good stuff; resonates with the reasons I've stayed away entirely. How much time have you invested in checking out Clojure? The Clojure community while a bit small is fairly hot. If you find the learning curve intimidating, but haven't taken much time to dig in, give it maybe 10 solid hours and I think you'll love it. The syntax is a tiny bit off-putting at first for a non-Lisper, but once it clicks, it clicks HARD.

As I got into it, I discovered that I have to hold myself back from getting too crazy too quickly. It's just that easy.
Name constraints apply all the way down the chain - intermediates are implicitly limited by the constraints on their root.

CAs have been name constrained in the past, see the update here about ANSSI: http://googleonlinesecurity.blogspot.com/2013/12/further-imp...
This reminds me of "The War of Art" by Steven Pressfield. One of the main thrusts is that if you are serious about your art -- whatever it might be -- you should treat it like your profession. Do your (creative) work every day, and make some progress, however small, every day. Whether you feel like it or not. Make your art your day job, and your old day job your side gig. Even if the change is just mental at first.
Excerpt:

One theory: Extramarital affairs might have taken months or even years to develop in the past, but with Facebook, Snapchat and other social networks your ex-boyfriend or girlfriend is just a click away, says New York-based divorce financial strategist Jeff Landers, author of “ Divorce: Think Financially, Not Emotionally .” When marriages go through rocky patches and people do seek support, temptation has never been closer, he adds. “You can easily reconnect with an old boyfriend or girlfriend from college online,” Landers says. “It all starts innocently enough, but the next thing you know you are meeting for coffee and the next thing you know you’re having an affair.”
Nice One Dad
Interesting, I didn't know that. I always wondered why (non "functional") Ada doesn't get mentioned more often in these kinds of discussions:

http://www.adaic.org/advantages/

http://www.seas.gwu.edu/~mfeldman/ada-project-summary.html
If folks here are in opposition to peering, they're attempting to literally destroy the Internet.

If we abolished peering agreements (setting aside the legal nightmare that'd cause, telling people what they can and can't do with their private networks), the subsequent Internet traffic that'd be generated would literally destroy the current Internet infrastructure.
Ask HN: Pitching a two-sided market
I'm starting to build the pitch / deck for Card for Coin[1], but I'm having trouble with the two-sidedness of the business.

On one side, we buy gift cards at a discount for bitcoin[2]. On the other, we use those gift cards to power in-store bitcoin payments[3].

Most two-sided businesses I've seen have a single marketplace product. Ours is spread over two different products, and right now they don't share many users. I'm not sure how best to convey that in a pitch, while still showing why the two sides work best together.

Any examples of successful two-sided business pitches or advice specific to us would be appreciated!

[1] https://angel.co/card-for-coin
[2] https://cardforcoin.com
[3] https://coinforcoffee.com
Bitcoin For Potato Salad
Sadly, until they get around to adding value types (maybe Java 9?) that just adds another layer that can be null.
> You misunderstand.

Yes I did. Thanks for clarifying.

> The existing CA system doesn't solve this.

So that's why Moxie is pushing for TACK. Now I understand how all works together.

> The attacker that can control a TLD is the sort that can control a CA. But you're claiming Convergence would fix it.

No I don't. I didn't even think about that scenario.

Thanks for the discussion. HN is awesome.
The current status is that it's doing pretty well. They ended up splitting the game into two acts; they released act 1 a few months ago, and act 2 is in active development right now. The response to act 1 has generally been pretty good, and it's available on Steam for anybody who wants to purchase it.
hmm.. I'd not heard of stylebot. Feels like a nice thing if you want to easily tweak some css on a website for personal use. Thanks for the tip.
...is your theory that only non-anonymous persons are allowed to disagree? I am not anonymous - you never asked me my name.
Codeigniter-Aauth a User Authorization and Management Library
The ‘perfect Aryan’ child used in Nazi propaganda was actually Jewish
How can I remove a project?
huh, never seen operator "". Seems to be a c++11 feature.

[1] helped me understand it a bit, but Im not sure I see a compelling use case. Does it just provide a shorthand for calling functions on primitive types (and strings) or have I misunderstood? While requiring less characters might it not decrease readability?

1. http://en.cppreference.com/w/cpp/language/user_literal
Because it's always easier said than done.

Multiple applications in different languages that are running on different environments and managed by different teams posses a real challenge.
Couple of years back, I implemented a natural-language-ish solution for querying ERP data. My approach was to

a. have structured queries that can be precisely parsed

b. provide query completion to guide the user while entering the query

It turned out quite well, if I say so myself. But I never got the time to market it.

It can be seen in action here:
http://nlq.lavadip.com/servlet/demo
With the spread of the LGBT+ movement, the connection between titles, personal names, and gender can also change. Some people would rather not identify as being male or female, and instead identify as a specific gender minority. This has different conseqeunces for different languages, since some have gender-specific naming and others have gender-specific titles, prefixes, suffixes, etc., but the fact is that most websites ignore gender minorities.

There is also the distinction between gender and sex, which websites often neglect (in some cases to the detriment of intersex individuals).

I would love to see either more websites that, like Facebook, offer treatment of gender as more than just a binary data value, or forgoe it altogether. Of course, gender is always going to bring up problems when attempting to translate both names and standard text.
So when does the CA death penalty occur?
My Half Workday as a Turker
> I have seen great systems written in COBOL.

That's not really the point. The problem is not that you can't do something great. Every Turing-complete language has the capacity to do that. You can write a great program in Brainfuck.

The problem is that they encourage you to do something terrible. I have seen COBOL programs that I did not wish to see. Good languages make it easier to do the right thing. They provide strong type checking even for user-defined types and well-tested abstractions (like templates/generics) so that you don't have twelve copies of the same function one for each expected input, each slowly diverging and multiplying under maintenance and developing their own subtly different bugs.
To help with the lightness of the font: document.getElementsByTagName('body')[0].style.fontWeight = '400';
Javascript, Ruby and Python implementations are available.

https://github.com/koyachi/go-nude#other-implementations
Author of the article here. The Python solution using lists-as-options is actually even simpler:

def values_in(keys, d):
return [x for key in keys for x in getOpt(d,key)]

Using lists as options is a neat trick I hadn't thought of when writing the article. Unfortunately, no dynamic language uses this idiom (or really any other non-exception option-like patterns) natively.
I've been using that for a while and have quite liked it. I almost find it jarring when I look at HN on someone elses computer as I forget what it normally looks like. :)
Perhaps the takeaway here is that the research is getting done despite reduced funding from government.

Also, all of your questions regarding the motives of the wealthy should be asked of the government with equal scrutiny. After all, government is made up of individuals, each with his/her own level of bias and ideology.
And it's "cousin" SPARK, which adds proof capabilities: http://git.codelabs.ch/?p=spark-crypto.git
Thanks, I'll have to give that a try!
I'm not sure if I care about people's surprise as much as I care about the inoffensiveness of it. People are and will continue to be surprised by technology. It's an inevitable consequence of technological acceleration.

Lots of companies have lots of data about me that is sensitive. So long as they do not betray said trust or suffer a security breach then I'm content with that state of affairs.
I've never heard of TACK before.

Are these what you are referring to? [1] [2]

[1]: http://tack.io/
[2]: http://convergence.io/
Tie it to the DNS. Globally, there is one root CA which is authorised to only issue certificates for ?. Then, each top-level registry (DENIC, Nominet etc.) get a certificate from this CA which allows them to issue certificates on ?.tld.

This is quite similar to DANE mentioned in the sibling, except that it doesn’t directly tie into the DNS and instead just merges the two organisations. Vendors could then either ship the root CA and/or each TLD certificate. Even when one NIC gets compromised, all it can do then is issue wrongful certificates for that given TLD (and rogue/untrusted ones are restricted to their namespace). There is still a SPOF in the “root” CA issuing TLD certs, but at least there is only one instead of 100 or so in the form of all root CAs plus the hundreds of intermediate CAs which, in theory, can issue certs for any domain just as well at the moment. Since it’s been a while that I heard of a case where TLD nameservers got wrongfully replaced in the root zone, this seems to be reasonable safe organisation.
Of all the Hacker News redesigns and variations I have come across, I still prefer the Georgify extension for Chrome. It's 99% original Hacker News with Georgia as the default font, bigger fonts and more subtle colours that are easier on the eyes.

Screenshot: http://i.imgur.com/qft9Y6q.png
> The India CCA certificates are included in the Microsoft Root Store and thus are trusted by the vast majority of programs running on Windows, including Internet Explorer and Chrome.

Jesus Christ, the CA system is so broken.
I think the problem you're trying to solve is way more than "let your family members track you". The more important thing i would say , is a way to alert the nearest police station incase you need help. family members more often than not know where you are.
An open question.... Are the scientific and philanthropic directions of wealthy individuals that much worse than our government? Remember - the US government doesn't fund stem cell research.
the most surprising thing I read was "Many of our students have never programmed with a text editor before" - what kind of CS students haven't tried programming before with a text editor?

I find that incredible. Long before I got to university I was been programming by myself with whatever editor I could find, edt, vi etc
Yes - you'll need to login at mailflo.io. We haven't added that functionality to the browser extension. Do note that deleting a project would not delete the associated emails and labels.

Just email us at support@mailflo.io if you need help.
That just says that web browsing is now a mobile activity. I think this project is about replacing desktop and laptop computers with linux. On desktop laptop windows is still dominating and losing mostly to MacOS
And it became irrelevant in 5 years or so.
Moxie Marlinspike gave a talk at DEFCON 19 about how broken the CA model is and suggested an alternative.

The talk - https://www.youtube.com/watch?v=pDmj_xe7EIQ
The alternative - http://convergence.io/
Looks good. How do you get the photos in the first place? Do you buy them with a reseller's licence?
I see no reason that just because I run "a charity" that I should not have to work hard to justify to individual people with money that they should give that to me to continue my charitable works.
Why DevOps?
"we have ten weeks to take people who may have never programmed by typing text into an editor and teach them enough CS and programming that they can implement their own hashmap in Python"

that seems utterly pointless to me.
DES, never approved for classified data.

The biclique attack on AES looks a lot more impractical than the results on GOST... Looks like O(2^124) time complexity and a stupendous amount of data if I scanned the paper properly....
Ask HN: Any tools to write copy?
Just curious to see what tools others might be using to write copy for their landing pages?

Any help would be greatly appreciated,

thanks!

-- 24x7
So we're talking, what, no HD from YouTube or Netflix? Is this just about video? Are my pings going to be artificially inflated in Starcraft?

If they throttle based on service, can't I circumvent this by just using a VPN and buying a fast enough base service?

Isn't this mostly a, "but the police man could shoot me whenever he wants if he gets to carry a gun!" argument?
Inside Box’s Updated S-1
Guess it's time to update talesfromthefortress.com to include the new version number.
Thanks for posting this version! Does anyone know where one can find the resources listed in the book (standard libraries & source code)? The link ftp.cs.ucr.edu seems to be long-dead.

Also does anyone know if there is a solution manual available anywhere for this edition? Thank you!

This is a great find; looking forward to learning this stuff the right way.
I like it. One minor bug I noticed. It grabbed the info for my current employer, and placed the end date as the Unix Epoch time of 1970-01-01.
Google Hangouts only works on Chrome
Most these operator discussions seem to go down the same way: "man you can make some really confusing operators, and I hope that doesn't become a thing... but gee writing == is so much nicer than isequalto and can't beat the + operator when adding things together!". People seem convinced that its all or nothing. Lua has such a nice compromise to this: you can overload +, -, ==, etc using special methods (__add, etc.), and you can't overload or create any new operators. Its a completely controlled environment that disarms the "but what if I want to add complex numbers together!" argument while still removing the temptation to create really absurd syntax (which Swift has taken to the next level with emoji).
A Chrome update was needed because the constraint was applied retrospectively. A name constraint is usually an X.509 extension that is included in the certificate.
MiniHack for iOS is currently my favorite way to browse HN now.
Well, it's a break of the national symmetric encryption cypher of Russia. Changing standards like that which are used in equipment in the field is expensive. A LOT of military equipment is going to have to be changed, and if they're using ASICs as accelerators in it they'll have to change the hardware. Some of their equipment will use software only, but quite a lot likely accelerates it with hardware.

So it's certainly of historical importance. It's not often that a math paper spurs millions of dollars of changes. As for scientific importance, it's a near-practical break in a well-used cryptosystem. The breaking of DES was a similar event, and that's considered of scientific importance by the cryptography community. This isn't quite as strong a break, as building a cracker would be quite expensive, 2^101 is quite a few operations, but it's not so far outside the realm of possibility as to be unthinkable.
Underdogs Successfully Reach Goal on Indiegogo.com