skysight-inc/HackerNews huggingface dataset:
This is an awesome idea. I signed up a week ago, but haven't heard back. What's the deal?
I am curious about your random number generation, Knuth's book is dangerously behind the times.

Can you be specific about how it is behind the times?
I'm trying to get my head around the keychain changes, and whether they fix one particular annoyance that I have with iOS.

Currently I have the Gmail app installed on our family iPad. My Google account details are therefore stored in the keychain.

If I use the Google Maps app, it PERSISTENTLY asks the user to sign in (using my account already in the keychain). My wife doesn't want her location searches saved to my account, nor those of my kids.

I don't want to login to the Google Maps app, but Google seems to want to force me to, even though this is a shared device. There doesn't appear to be an option to say "no, thanks, stop f%*king asking".

So instead I use Google Maps in Safari and cringe if I really need to use Apple Maps - slooooooooow.

Can anyone shed any light on whether I'll be able to block the sharing of my Google account details between Google apps?
A distributed no-trust-required timestamping service is fundamentally what Bitcoin provides.

So it would be possible to prove a certificate was issued before a certain time (eg. before a breach at a CA), if CAs were forced to immediately publish, in the Bitcoin block chain, the hash of each newly issued certificate. There would be no need to trust a single (bypassable/hackable) entity doing timestamping, since the block chain itself is distributed.

(This is just one of the numerous applications that distributed block chains enable IMHO! And we are just barely scratching the surface of what we can do with such a concept...)
Thanks! I think I'll go off and study some mathematics.
Couldn't that happen with an optional type, as well? Especially if you let it get inferred. Only when you go to use it would you realize you have to map over the value. And then you are back in the world of messed up.
I really love this kind of lateral thinking to uncover evidence of another phenomena.
So let me get this straight, you want netflix in HD, but you don't want to pay for it? Who's going to pay for it if not you?
Nice. I'll look into it. The TCP check was still a bit of a dirty hack.
Thanks! We're really trying to go as fast as we can on the project.

A short email was sent out today at GMT-6 with details, though the short of it is that we will let in a test group of about fifty people to make sure it works all good, then allow everyone to signup in the next week or week and a half.

We REALLY want to get everybody in as soon as possible, and we are super excited to launch (incase you haven't figured that out yet). ;)

For more updates, feel free to follow @meeetco.
They recognize that it's more for prototyping and wouldn't be used at a production level:

"We use industry-standard components — chosen to be powerful, inexpensive, and widely available — that can be designed directly onto your own circuit board, bringing your Bill of Materials down for volume production."
You won't find any precise numbers, because it depends on how early stage you are willing to call a startup.

Stage 0: a bunch of friends have drinks one night and dream about starting a startup. 99% will not even go further

Stage 1: one or more co-founders actually meet regularly and try to make progress on starting their startup - still about 99% will not succeed

Further stages: get an office, or quit and work full-time on the idea, or raise a small seed, etc... Still close to 99% failure rate.
They already are with Netflix. And it has been noticable by the users.
This is from last year (06/12/2013).
Transitioning from founder to employee
If only there was a blockchain for this.
http://www.sizefivegames.com/games/ben-there-dan-that/

It's an extremely self-referential parody of adventure games, made by guys who clearly love the genre. I found it a lot of fun.
In person, pretty often. I was describing it to some friends and it was a bit tricky! "Meeet with three E's."
> That way, when a CA fucks up like this, vendors could remove their certificates from the root stores, but could grandfather in all their previous certificates so the CA's customers have a few months to get a certificate from a decent CA.

You cannot grandfather in old certificates because you have no idea what else may have been tampered with. If they have a security hole, it could have been there for a long time. There is almost no way to know if a certificate was improperly issued unless you're the domain owner. All of them have to be invalidated to stop any other potentially invalid certificates.

This is why the CA model is so stupid. It relies on humans at over 650 institutions "doing the right thing" every time, and when the inevitable happens, destroying a large number of innocent certificates.

In terms of sending a message, we already know that you can issue invalid certificates with impunity. Exploit a CA, make your fake cert, use it, get found out eventually, repeat. It doesn't work as well for pinned certificates but there's more than one way to skin that cat.
I'm more curious as to how to get a lightweight Docker container running Python. The one they use pulls in an Ubuntu Quantal image, which isn't something that I'd normally use (I'm more in the RHEL/CentOS camp).

So, how would one go about building something like this that isn't tied to a container that pulls in a whole OS? Or is that just not the way these things work? Or am I just too used to virtualenv?
But there is some weird stuff in Python syntax. Like, why do you create a dict with {} but access it with []? It always felt to me like an organic language, not one that was planned with consistency in mind (which is fine, of course).
Sourcegraph co-creator here. We just pushed a bunch of improvements to make Sourcegraph faster and simpler, and we will be releasing more stuff over the next couple of weeks (including open sourcing the entire source code analysis toolchain we use).

We'd love to hear your feedback and suggestions so we can make Sourcegraph better for you. We are developers, too, and we made Sourcegraph to be the tool we wanted to use 100 times per day.
I'd say it's not the CA model itself that's broken; it's the way we use these CAs that is too static to account for inevitable breaches in security.

There is no easy way to add or remove a CA from our trusted sets. There is no way for a server to send multiple signatures to the client, so the client can choose any CA he actually trusts and silently discard the bad CAs.

There is no problem in having any CA issue a certificate for any domain; the problem is that we have to trust these CAs and we can't move fast enough.
Hair-thin type seems to be a growing trend. I see it commonly in "retina"-resolution-aware apps, as if the designers were trying to show off how small teh pixels are. It's now creeping into advertisement.

I hope this trend dies soon. Such fonts are very difficult on the eyes.
Some limited QOS is. But I don't see a reason why it should be limited.

I don't think any traffic should be throttled, but in times of peak usage, you should be able to pay for priority.
It depends on what you want. Accuracy and price are at cross purposes. Our biggest fear is the glut of cheap devices now is undercutting the long-term value for true health applications.
Motivational posters for your startup with a designy twist
Browsing it on Firefox 30.0 at 1280x1024 and all the pictures look to be badly resized:

http://i.imgur.com/C7QptVL.png

This does not happen in Chrome 35.0 or, funnily enough, IE11.

EDIT: Playing around in Inspector, it's directly related to this CSS attribute on the images:

image-rendering: -moz-crisp-edges;

EDIT2: I'm also getting weird word wrapping, which you can also see in the above image. It's breaking on "you've" and "idea". Directly related to:

word-break: break-all;
Similar for Polish, basically all the tails got dropped when data was moved from one form onto the next, no trouble really except for Ł and ł. The second would often be entered as k instead of l. Lots of trouble for many people later cause of that.
Do these guys have any patents on their tech?
dnschain:

https://github.com/okTurtles/dnschain
Building web apps in Go: a 400 page long primer
The reverse engineering is near impossible. My guess is that their execution algorithms will be as complex as their strategies themselves, so finding out their trades and figuring out the underlying strategies (which constantly evolve with the market) is really hard. Moreover, if one had so much quant ability, they'd be better off making some money for themselves and beating RenTec at their own game.
The CD Case
As long as we're playing code golf, try this for python:

def values_in(dict, keys):
marker = object()
return [x
for x in (dict.get(k, marker)
for k in keys)
if x is not marker]
“Weaponized” exploit can steal user cookies on eBay, Tumblr, other sites
need.
Thank you for suggesting this. An excellent book it seems.
LoremIpsum.io
Ask HN: What is the best VAT validation API that you've come across so far?
Just got an idea - one can make new games using some of the engines supported by ScummVM. That way you'd be able to play it almost anywhere. Will try to look into it.
Sourcegraph is amazing. It's made my life so much easier by pointing me towards concrete implementations and use cases of libraries/projects that I'm learning. It's one of those tools that I had no idea I needed until I started using it, at which point it became indispensable.
I already pay for it.

I pay Netflix in the form of a monthly subscription, and I pay Comcast to deliver me "blast" Internet speeds of 100mbps.

An HD stream is well below 100mbps, so I expect to be able to stream Netflix.
Heroku PM (Amazon, PayPal Alum) Matt Soldo on "Selling More with Math"
Debate Continues on Hazards of Electromagnetic Waves
Right. Anyone who's gone to Stanford will know the name. Cool to read the backstory, though.
> or PRISM

Google. Facebook.
I think semantic beats short if you have to resort to misspellings and alt TLDs.

Here's a freebie: sidetogether.com is available :-)
Currently? No, they're not. There is no "Netflix" option from Comcast that a consumer can purchase to increase their Netflix streaming speed.
Cool product for small businesses to create a mobile website with a few clicks. I tested other solutions and this one was by far superior in terms of clean transformation and usability
Their product is open source: board design, firmware, and cloud software. The WiFi module is CC3000 from TI.
I've been looking forward to giving Deis a shot. I'm a huge fan of Dokku, and Deis seems to be a very similar project with the added bonus of handling scaling for you.
Observable – Simple, unobtrusive data synchronization
Thanks for letting us know! Cole is working on a fix right now. fistbump
Quick note about your own page.

Your font size is way too narrow for either retina or non-retina. This is what it looks like on my cinema display, https://www.dropbox.com/s/2ialdcjqba0wthr/Screenshot%202014-...

The YMeter doesn't make any sense. Even after reading the description, it doesn't do anything to expose information (up votes) in a meaningful way. Its like trying to read a binary clock.
You should be good to go!
I applied there once, didn't even get an interview. I was from Stony Brook so I thought the Alumni connection would be useful... oh well...
Accept Bitcoins in Europe and Emerging Markets
Knuth on the Direction of the Tree in Computer Science
This is pretty neat; I'd definitely use an app that did this. Not really a "new algorithm" as they say, though; when you boil it down it's really just A* and MTurk. However, it's a really cool application, and what use is science without its applications?
A null Optional sounds like a cross between Murphy's law and a Zen riddle. You achieve enlightenment, but wish you hadn't.
Very interesting. Has anyone used Mechanical Turk to get work done?
I suggest including parameters mentioned in the book "The intelligent investor" praised by Buffet. For example, the earnings in last 20 years, total value of tangible assets, etc. Company information on value investing are hard to find, and this could be a great help.
For this case and similar cases where the API provides a "supply your own default value for the failure case" option, this kind of "unique one-time null marker" is actually a very good approach that addresses much of the problem with standard null values.

Its not as composable as Option- or list-based approaches, though. (OTOH, you can use it to implement those approaches, and its cleaner for that than the way I did that elsewhere in the thread.)
Actually, at least in PHP, I find myself using arrays and other iterables as pseudo-Options quite a lot; eg. when checking the existence of a DB value, xpath element, etc.

// Using if/then/else
function foo($x) {
$results = look_up_something($x);
if (count($results) > 0) {
$val = $results[0];
return do_something($val);
}
}

// Same as above, but with a foreach loop
function foo($x) {
foreach (look_up_something($x) as $val) {
return do_something($val);
}
}

Of course, the nice thing about Options (other than being able to distinguish between "None", "Some None", "Some (Some None)", etc.) is the availability of combinators to lift and compose non-Option functions with optional functions. Sometimes we can map and fold ("reduce"), but sometimes we can't (eg. PHP's "array_map" doesn't work on iterable objects, which many APIs use in lieu of arrays).
I am on XFCE using the same version as you and the highlighting works.
The problem is that companies don't suck up the operating expense. They pass it along to consumers. Most Internet companies have enough competitive leverage that they'll just raise prices or show my ads - tech is winner-take-all, so it's not like consumers have a lot of choices. And those industries that don't have this leverage (like Internet radio or podcasting) will simply cease to exist, which is also bad for consumers.
Oh sure that's no problem, once netflix pays comcast.
Per-directory bash history
the hckr news plugin for chrome/safari has a few nice things including collapsible comments. Maybe you should check it out.

http://hckrnews.com/about.html#extensions
Don't know about this Certificate Transparency thing but Namecoin does allow a certificate fingerprint to be associated with a domain, without using a CA, and it works rather well.
There's a growing literature and conversation about the tradeoffs between blockchains and the approach that CT takes. They are actually historically related to one another.

http://www.aaronsw.com/weblog/squarezooko

Ben Laurie (a co-inventor of CT) had some particular objections to blockchains, partly to do with the problem that the total computational power that is or will be brought to bear on mining is unknown and maybe unknowable.

http://www.links.org/files/decentralised-currencies.pdf
http://www.links.org/files/distributed-currency.pdf

I'd like to actually make a web page that talks about the historical relationship between blockchains and other decentralized append-only data stores, as well as the points of debate and trade-offs between different designs, and the space of proposals that achieve consensus about the contents of an append-only record.
The public would prefer to have the most possible value out of their internet service. While charging content-hosts extra for bandwidth can increase the quality of those services, it risks degrading the breadth of content, the ease of small-business- and user-publishing, and the level of competition in the content- and data-service market. It's a trade of dubious value for consumers and for data services.
Much better, thank you. Also, please note EDIT2 in my original post.
An arbitrary start and end date means that you could post-date the certificate to be good for two years starting from 1 year ago, even though you created it today.

That's what the parent post is talking about.

[edit: You're right. Even w/ arbitrary dates, end dates crossing the threshold will still not be accepted.]
The "word-break: break-all;" CSS for every <p> element makes reading your text very unattractive.
With break-all CSS: http://imgur.com/UmLnCg2
Without break-all CSS: http://imgur.com/Inp58BN
Buzz Aldrin AMA
A cool system but I'd suggest this is NLP to the extent SQL or a similar (or somewhat better) query language is NLP. You've made queries in your query language easy but it's more like interactive programming than free-form NLP.

Not that it's a bad application, it's nice, it's just if one extended this model, one would wind-up with a query language, not something new.
Which makes sense, given the lopsidedness of traffic in the peering agreement.

And it's also what they're doing, currently. So yay for that.
Analysis of overrepresentation of engineers in terrorist groups [pdf]
My peeve for a long time was not having the bookmark bar work (drag the bookmark over a folder and popout the submenu). It worked on Mac and Windows. The just fixed it a few months ago (it's a little clunky though but I will take it)! Yay!
On Holy Wars And A Plea For Peace
And in Erlang:

1> X = #{"a" => 1}.
#{"a" => 1}
2> maps:find("a", X).
{ok,1}
3> maps:find("x", X).
error

Constructing and destructuring tuples is cheap in the Erlang VM, so Erlang uses them where other languages would use types.

Further, in idiomatic Erlang, you don’t bother with a branch for each case of the option type; you just do the following:

{ok, Val} = maps:find("a", X).

Effectively, that's a type assertion: if maps:find/1 responds with error instead of {ok, _}, that’s a process crash.
Most comments are focused on the y-meter... and I understand why: it's the most different from the current page and is visually complex so it draws attention. I'm also not sure what all it adds outside of some graphical interest... I don't actively really need to know the # of votes as the current rank is supposed to be a better indication of what I should pay attention to. The argument over remembering 5-7 things doesn't really apply to the y-meter, but simplifying the numbers to give some relative scale can help I suppose.

I liked the minimization of the name & domain and making that & the comments all in one line. It helps focus the attention on the titles themselves.

However, the issue I have is that the font choice is not legible for scanning. I think Vellum, an NYT project recently posted to HN, does a much better job of making a list of articles easily scannable. Screenshot here: https://dl.dropboxusercontent.com/u/779054/Screen%20Shot%202...
BlackBerry Messenger beta arrives in Windows Phone store
If the future of programming is JavaScript then I'm becoming a barista
Thanks for pointing that out! We're having a little trouble replicating the issue, though I'm sure it'll come up.

You've been awesome. Do you have a Twitter account? We'll follow you, you can DM us your address, and we'll send you a few stickers. We won't stalk you... We promise!
The problem is that distributed block-chains are not a panacea. It requires a certain inertia to increase the difficulty of attacks on the block-chain, and even then attacks are still possible if your pockets are deep enough.
Radical dual tilting blade helicopter design targets speeds of over 270mph
Which political decision? Coincidence seems more likely.
Yea, I would too. You can't customize the model (ram, SSD, etc).
I've collected experimental data using Mechanical Turker. In my experience, you have to do a lot of validation to make sure the data you are getting is reasonable. You have to kick people out who aren't paying any attention at all and just want to click through your survey to get paid. (Similar techniques also have to be employed for undergraduate participants who just want to get done with your survey so they can earn their 10 points of extra credit).

If nothing else, Turkers are good at making sure your data collection instruments are working the way that they are supposed to.
Clicky link to the reply is:

https://github.com/mirleft/ocaml-tls/issues/6#issuecomment-4...
Thomas Sowell?? On HN???? Please G*d no.

An old-school conservative op-ed--page troll who now looks moderate compared to tea-party FOX newsers -- boring but still toxic. Please leave him in his regional-newspaper dungeon where he belongs.
It's all fascinating all right in many respects, but doesn't the noble business of fast trades and hedge funds give anyone on HN creeps anymore? After all it's moneymaking in a form of taxing the society as a whole (if you think that this money comes out of nowhere or somehow is a newly created value, think again).

Of course he used some of this money for good purposes, but still.
Cloud Debugger, Cloud Trace, Cloud Pub-Sub and more from Google Cloud Platform
While looking at the numbers of how many startups failed as a business, look at how many relationships were formed and how much was learned in the process that contributed to individual successes.

I seperated from the military to work on a bootstrapped project that started with myself and expanded to include a few others, my relocation to LA, etc. It eventually failed. Statistically, it's just another failing number. To me it was a very enlightening and educational experience and I don't think my partners at the time and I would be where we are now without that experience. Best of luck to you!
Why would that make sense when you the customer want to retrieve traffic at an advertised rate from a company you're paying?

Surely netflix also pays for traffic at their advertised rate from their ISP. What's the problem? Oh yeah, comcast et al want to be greedy.
I could have used a feature like that when my GPS told me to cut through the Chicago suburbs to avoid highway traffic on my trip across the U.S. last summer.

I was nearly scared to death.
Maybe we need a browser add on that warns us when a shady/incompetent CA has signed the certificate of the current site we are on? As it sits today there is no repercussion for these terrible CAs that screw up like this.
Nice to see this was finally added. I remember trying this when I got a Chromebook earlier in the year and was really surprised and puzzled to see the lack of support on Linux. There's even a year+ old thread about it that didn't look good: https://productforums.google.com/forum/#!topic/chrome/VT2_wL... Great to see support now!
One thing I don't think enough courses teach is how to actually get your code online. I suggest using Github Pages. Maybe get them into using some form of source control for their projects?
To elaborate on what taejo said, in Danish personal names do not change spelling, even if they mean the same. It is not uncommon to see people's given names or surnames being small variation of similar names. But in these terms, you should think of »Kierkegård« and »Kierkegaard« in the same manner as 'Philip' or « Philippe ». They are the same name, pronounced the same way and mean the same, but spelt differently.

Of course, some do make mistakes and spell it in a more common way. My surname, for instance, is on occasion spelt »Utzon« because of Jørn Utzon (who designed the Sydney Opera House), who's surname sound like mine.

But the problem in Danish isn't just limited to personal names and proper nouns. In English, words like 'subtle', 'segue' and 'colonel' are not pronounced as you'd think (from their spelling), because they are loanwords, and you just need to know this. This problem is more unfortunate in Danish, as it is far more common, even amongst Germanic words.

It can be hard to explain to foreigners, why the o's in »mormor« is pronounced differently ([ɒ] and [o], respectively).
I think it's perfectly fine for meta-level code.

Such meta-level code should be encapsulated well and be very useful.
This might break if the language the name is in has a vocative case http://en.wikipedia.org/wiki/Vocative_case