skysight-inc/HackerNews huggingface dataset:
Are you insinuating I am getting paid to? Sorry if it came off that way, I tried to acknowledge my fanboyism. It's mostly that I just have this believe that everything John Carmack touches turns to gold.
Android may technically be Linux, but I am not sure I would count it as a step towards changing the desktop computer people get for their home. Chromebook is similar- as far as I can tell it just runs one browser window. This makes it more like a video game system than a PC.
Don't get me wrong, I've been using containers for many many years. I run pure LXC on my desktop at home for simple containers. Containers are great in many situations. It's a shame LXC didn't get as much hype as Docker (not sure if Docker is LXC based anymore, but was for quite sometime).

However, you do require Docker (or LXC), and you need proper cgroup support in your kernel if you want true isolation. This is perfectly fine for myself and perhaps a few of my developers running Linux, but it starts to look less appealing in other environments.

Personally, I have to maintain multiple FreeBSD servers and even have a local FreeBSD machine for related purposes. I've also had to develop and maintain python applications for SmartOS (solaris based) machines.

Perhaps one day Docker will support Solaris Zones or FreeBSD jails, who knows. :)
> So, sure, you got rid of null from the language. Does your program handle the case where it was handed a negative number correctly? All positive values? All unicode?

Aren't you just moving the goal post? You can play the 'OK so you can eliminate that from the equation, but can you ...' indefinitely. Well, perhaps only until you get to the question of cosmic rays.

> So, fine, we'll make our programs where they handle all cases... Rapid prototyping probably just flew out the window. As did worrying about actual honest to goodness use cases.

The topic is a few special cases, like null, not every conceivable case. If things like null and undefined cause the majority of crashes, and they are simple to handle with a 'proper' language (and they are), then you already have gotten a lot of bang for your buck.

For rapid prototyping: if handling null cases is too much, use a function that unwraps nullable values directly, and if they are null, crashes (and no, this is not the same as a null pointer exception). Then go back and clean up the program when you are not prototyping quite as rapidly anymore.
That's a really cool re-design. Two things I liked about it: collapsible comment threads, and comments that are readable on mobile. Honestly, if the HN design remained exactly the same but fixed those two paint points I'd be happy.
Are we finally approaching consensus in the field of systems programming that security is more important than performance (thanks to heartbleed)?

Or put differently: have we reached the point where computers are fast enough so that we can move on and sacrifice some of those abundant MIPS and extra RAM for much improved clarity in our critical infrastructure code?

OCaml could actually be a great choice for maintaining a solid TLS layer.
Or (c) what the other person claims to be racist/sexist/homophobic/transphobic/etc. isn't, at all, and this is simply the other person's way of "Well, actually."'ing you, except not even pedantically, but completely baselessly.
Introduction to machine learning in trading
FCC proponents will say what you have now. The rule says “sufficiently robust, fast, and dynamic for effective use by end users and edge providers.”

Opponents say that it will kill innovation.

I think the opponents have a point, but I'm actually okay with a "fast lane" approach.

Some degree of traffic shaping is probably a good thing. It doesn't make sense to equally prioritize by dropbox update and my VOIP traffic. I want that VOIP to have low latency and high enough bandwidth. Dropbox update can wait. I'd rather have my FPS game have a low latency connection than my neighbors bittorrent connection.

I'd propose a fast lane but also ensure the slow lane isn't intentionally slowed down for no reason. Punitive throttling shouldn't be allowed.

It might be more effective if the tech community made thoughtful input in the rulemaking process instead of pure rage and outlandish demands.
Founder Frustrations: "If Only We Had ______."
Once again, demonstration that the CA model is broken. Why does it make sense for any CA to be able to issue certificates for any domain?
Let's just assign a UUID to every baby born and nature solves the problem in about 100 years. ^^

...historic data you say...
Well the reasons that he states look sound. How many other cipher approved for classified data have been cryptanalysed?
Microsoft offers 130 eBooks covering a range of topics for free
You do say "The UK," "The USSR," and "The United States" though. I wonder if, because of this, it's a habit among English speakers to refer to countries who's names start with that U sound (juː according to wikipedia) to put the article in front of it.
I ponder this very question daily. I don't believe there are different types of intelligence. Instead, there are intelligent people who optimize single variables, and those who optimize multiple variables.

The stupid interview questions about pointers involve just one variable, whereas a multi-variable (and higher order) analysis would consider what your company's business needs are and how software can help achieve them. The truth is, higher-order multi-variable thinking (also known as strategy) is far more critical to success than low level single variable thinking. However, due to the financial structuring of companies, there are very few positions for strategic thinkers.

What it boils down to, is how many times you ask "Why". If you stop at one iteration, you won't get a very optimized solution. But if you keep going until you're questioning the definition of reality, you're at about the right place.
It looks like they have some odd cipher suite selection mechanic.

https://tls.openmirage.org negotiates TLS_RSA_WITH_RC4_128_SHA which is the second worse suite that Chrome 35 will offer by default. If I renegotiate, the server will suggets TLS_RSA_WITH_AES_256_CBC_SHA, so it looks like the server wants to change the cipher later, which seems odd.

This means it doesn't support PFS or several other advantages in the newer protocols.

I'd be very interested to know about side channel attacks which may be possible in OCaml, as opposed to in another languages - there doesn't seem to be any discussion of them here.

They also refer to the Apple Goto fail bug as a memory safety issue - that's not true, it was a programming flaw that could be made in a GCed language.

Finally, if I look at the issue tracker I see things like https://github.com/mirleft/ocaml-tls/issues/6 - closed, with no explanation and marked as a security concern - which gives me no confidence that the issue was addressed.
BMW i8 – Lots of geeky fun
Please make this happen. We need ... something.
I actually think it's fairly exciting they're still collecting data from this thing, data that allow them to say with increasing confidence that it's in interstellar space.
Ask HN: How did you get your startup from 0 to 1?
In any business/startup the hardest sale is your first sale. Going from 0 customers to 1 is a task that can take a lot of time and persistence. What is your experience with making your first real sale? By real sale I mean not to a friend or family memeber; someone you did not know before.

Please share any tips for marketing and sales targeted for a brand new startup with no customers, no budget, no history, just a service/product.
Not the same really. Strike Suit Zero is somewhat close, as are the great FreeSpace 2 mods. Games that put you in the pilot seat are not that common.
One thing that concerns me is the entropy source in Xen guest domains, but hopefully that'll be worked out for the final version.
Jerry the Bear: A robotic learning coach for kids with type 1 diabetes
Do you mean originate and write the paper?

Or do you mean just maybe understand the general essence of the paper's title, and understand major contributions after spending some time reading the paper?

If the former, well... yes. That's probably true for almost all significant research, especially in mathematics.

If the latter, I think you're probably wrong. And that's not to trivialize the work presented in the paper; if anything, the contrary -- the paper's actually quite well-written.
What would the solution be?
This will also allow HAProxy to be brought into the fold if you're using Circus (http://circus.readthedocs.org/en/0.11.1/) for process monitoring. Probably not a big win in reliability, but I bet there are plenty of other things you can do with that (like parent mentioned)
Show HN: Ziggedy – Shopping while helping your charity
Back Sproutel’s crowdfunding campaign to get Jerry the Bear, their robotic healthcare coach, into the hands of every kid in the US who is newly diagnosed with type 1 diabetes.
You are correct that Microsoft would deserve some of the blame, if there is to be blame. However, user pessimizer put it very well:

> Microsoft has no obligation to you. Your judicial system does.

In any case, there is no "hating the game" here. The fault -- if one has a problem with this action -- is not with "the system", but with a very specific player: the federal judge who issued the order. (I don't feel like going through the trouble of finding his/her name, but I doubt it would be difficult.)
Is it a business requirement to offend people? In some cultures "Good news Joe" is offensive. In others "Dear Mr Biden" is offensive.
A point made is that the Y meter obscures an otherwise instantly understandable metric with a visualization that must be deciphered. If you don't care about that number, sure, it's less information and thus perhaps less clutter. For myself, it's chart cruft.
CyanogenMod 11.0 M8 released
Most of you would probably have known about Amazon Smile. Here at Ziggedy, we're providing you the same concept, but for other online retailers that doesn't have similar program: you shop at our supported retailers, and we donate a percentage to your charitable organization of choice. A list of retailers we currently support can be found at http://www.ziggedy.com/Retailer/#filter=popular .

The process is simple: register for an account, choose your charity and start shopping!

You can also search for products and do a price comparison directly on Ziggedy or creating your wish list (called boards). Our search result isn't the best right now, but we're working hard to improve it. Bonus: if someone buy an item from one of your lists, and have no interest in helping any charity of their own, we will donate instead to your (the poster's) charity!

I'm one of the developers at Ziggedy. We've love to see what you guys think about our site!
And then there was the "banana tree" gag in Monkey Island, which was a direct swipe at Sierra's habit of killing you off at every turn...
Ask HN: Dev Bootcamps in Asia?
I would really like to attend a dev bootcamp but don't want to move back to the US to attend (living/freelancing from Thailand for 1.5+ years). Does anyone have recommendations on dev bootcamps preferably in SE Asia?
Ask HN: Please help me teach CS to a HS student from a very different background
Hey Everyone,
I am teaching CS to a student from an interventionist high school in one of the poorest urban neighborhoods, who has foster parents which nag him at home and who is in a constant battle to ward off bad influences (drugs, alcohol etc) in his neighborhood. He is definitely motivated and talented, and is in ok academic standing. I am trying to get teach him basic concepts of CS/web programming through the summer, and hopefully continue on through the school year. In order to teach him CS, his teachers and I devised a plan of getting him an internship at my company. The reason for that is to have him work mostly during school hours at the school building so that he does not have any distractions since we are not located in the same city. We communicate through hangouts, chats, messages etc throughout the day, so location hasn't been an issue as of yet.

I would really like recommendations from the community about which curriculum and coursework they have used in teaching high school students CS. In particular, I am really interested in learning what specific curriculum paths some of you have used in the past and what online resources you have used to achieve that. My thoughts on an 8-week curriculum are the following:<p>1. HTML/CSS for 1.5 weeks
2. Javascript 2-3 weeks
3. Setup environment 2 days
4. Make a webpage 1 week
5. Jquery 1 week
6. Intro to Python 1 week
The reason this is important to get right, is that the teachers and I really want to show other students in the school how programming can enable them to create something and change their lives. There are thousands of resources on the internet but most of these students never choose to learn CS and do not have any inclination to. We are hoping to change that bit by bit. Hopefully it works.
A distributed secure key-value system a la Namecoin.
For the sake of moving things forward: every time we have this discussion, someone always points out that functional languages would make it easier to get correct behaviour from a crypto library, and someone always replies that garbage collection opens you up to side-channel (timing, in this case) attacks.
See also the continuously updated benchmarks at cloudlook.com
The blogpost does mention that implementing more cipher suites is a work in progress.

Edit: the server uses a random protocol version for testing purposes, so that might explain the odd renegotiations that you observed: https://github.com/mirleft/ocaml-tls/issues/159
Given a dump of all stock market trades over a month, I wonder if it's possible to algorithmically group those trades into cohorts to identify the source of the trades. In other words, Medallion fund presumably manages a large amount of money; therefore, when they move that money into different investments (on a daily basis?) then we should see large trades (or many small trades that add up to a large amount).

I wonder what the daily trade volume of the NYSE is? It seems like if someone is moving around a billion dollars via thousands of trades, it should be possible to detect and categorize those seemingly-disparate trades as "these trades originated from the same owner".

If it's possible to trace the flow of money in that way, then it may be possible to generate a list of probable Medallion trades: search for a cohort that achieved >40% return on billions in volume.

Another way of figuring out Medallion's methods is to examine its interaction with academia. Presumably they search for candidates from fields related to their trade engine. If we can generate a list of research papers which resulted in its authors being hired by Medallion, then those research papers may reveal some of the techniques used by their trade engine.
http://freerice.com/content-group/brazil-vs-germany-live-str...
DANE TLSA is probably the best current option.
That is my point, that this is really just moving some goal posts. So, we know that many programs didn't make it across the line with null as an option. Will they really do much better without it? I'm not convinced it is a sure thing.

So, for example, a place where null comes up. When you create a file. Programs that didn't check just threw up on an exception now. It is just as likely that without that option, the code would have just checked for a value, or thrown an error. So... what changed?
> There's a lack of alignment between a person's explicitly declared preferences and the things which actually make them happy. This is so ridiculously true when it comes to dating on and offline. <

I completely agree with you. That was my original point. Nick's answer just didn't make any sense to me. How can you agree that people don't know what they want, yet say that that this is why he created this app, when the explicit stated intention is "dating sites for people who know what they want".

This is more like a "dating site for people who think they know what they want".
What does a good pr person do when hired by a company that journalists wouldn't ordinarily want to hear from? Do they simply refuse to do business with said company or do they try to spin the company into something more interesting than it is?

I think I'm confused as to how the interests of a pr person (to promote the companies that pay them) and a journalist (to write interesting, newsworthy stories) align.
So? What's your argument?
The article is looking at returning a list, while your option returns a dict, but that's an easy fix. And even for an Option-like approach, the article tries way too hard: Option can be viewed as a constrained cardinality list, and regular lists work just fine to implement them.

from itertools import chain

def getOpt(d, k):
return [d[key]] if key in d else []

def values_in(keys, d):
return list(chain(*[ getOpt(d,key)
for key in keys ]))

Or Ruby:

def values_in(keys, d)
keys.flat_map {|k| d.has_key?(k) ? [d[k]] : []}
end
It builds not just on algebraic topology, but algebraic geometry, differential manifolds, and category theory (which underlies all three of these). If you don't have at least passing familiarity with the core content of these fields, you're probably not going to find an explanation worth spending any time on.

A better place to start might be de Rham cohomology: http://en.wikipedia.org/wiki/De_Rham_cohomology
Location: Seattle

Remote: Yes (previous remote experience)

Willing to relocate: No

Tech: Primarily a backend guy; high availability/high throughput distributed systems, storage (YesSQL/NoSQL), Hadoop, infrastructure. Mostly work in Java but have C++ background, enjoy hobbying in JavaScript, and experience gluing stuff together with Ruby. Shipped a few mobile products as well.

Resume: 15+ years experience, currently Sr. Software Engineer working within AWS

Email: throaway0x07DE@gmail.com
Here's a very simple stylesheet for HN tweaks that I forked from another one: http://stylebot.me/styles/2800

I've been using it for just over a year, and find it extremely pleasurable to use.
That's what I mean, aren't there already "fast lanes" in the sense that Netflix doesn't have to use the "slow lane" we call the greater Internet to get its content to the Comcast network?

Peering is a "fast lane" approach, isn't it?
Good thing you stopped... as that is entirely inaccurate :D

fwiw I am a famo.us employee
Indian govt websites have a pathetic sense of security. One prominent consumer facing website with logins and company data has a certificate issued to "Mohan Babu" (equivalent to John Doe) and expired 5 years back! I guess that's somewhat better than the other Indian govt websites that have no SSL at all!
What making the Front Page did for our mobile app
I guess I missed that part ;)

Good luck!
TL;DR:

> We obtain some 50 distinct attacks faster than
brute force on the full 32-round GOST and we provide five nearly practical attacks on two major 128-bit variants of GOST
Keep your woman safe
Women safety is very important issue these days in India. Sadly, we are still in 2014 and the precog (Minority Report) has not been invented to stop the crime before it happens. But atleast we can find where it happened and act on it immediately to save our loved ones. So my brother and I came up with an idea for a mobile app named "Aura" to track your journey and keep your friends and family members up to date.

This simple app just emails or text your current location to your family members in case you did not make it.

Do try out and provide your feedback.﻿

https://play.google.com/store/apps/details?id=com.indimaza.aura
The first form we have to change is the birth certificate. When my daughter was born, we knew that she was going to have 4 names (2 given, 2 surnames). My wife is from the Philippines, and it is typical there to have 1 or more given names, and then maternal surname and paternal surname. It is common for people to have several names (e.g. the signer Sheree is actually Cherry Hazel Sweet Fae Bautista Augustin). Unfortunately the birth certificate only had first, middle, last. We didn't want to hyphenate the last name so we had to either have a 2 word first name or middle name. In the end, we went with 2 names for the first name, maternal surname as middle name, and paternal surname as last name.
Yes, that's the correct solution for asking for a name. As an example of this, as a side project I'm building an app for my wife (or other teachers) to collect assignments from her high school students and mark their work. In this case, there are separate fields to ask teachers "What name do other teachers call you?" and "What name do students call you?". Both are single, free form text fields that take any UTF-8 text of a reasonable length.

This is especially important for the school environment because the same teacher might be "Joe Schmoe" to other teachers, and "Mr. Schmoe" to students. I also know of some women who married and changed their name, but still use their maiden name with students. Other teachers are casual with their students and have them use their first name. If they teach a Judo class at the school, they might want to be called something like "Sensei Joe".

At any rate, each use case for a person's name should be asked separately, and used verbatim -- without trying to break them up at all.
The hope is that early detection will allow for prevention. Right now it's difficult to diagnose Alzheimer's until the brain is too damaged to function normally, but some treatments may be able to prevent it from getting worse at an early stage.

There's also a theory (not sure how scientifically valid) that Alzheimer's might be a form of Diabetes (http://opinionator.blogs.nytimes.com/2012/09/25/bittman-is-a...). If that's the case, then it might be possible to prevent the disease by diet alone.
Software vendors shouldn't list CAs as trusted when they prove they can't be trusted - but removing a CA from the trust store breaks things for innocent websites who just chose a crappy CA.

Every CA should be required to publish a signed, public list of every certificate they have issued that is currently valid; and no certificate should be considered valid if it isn't on a CA's public list of certificates.

That way, when a CA fucks up like this, vendors could remove their certificates from the root stores, but could grandfather in all their previous certificates so the CA's customers have a few months to get a certificate from a decent CA. We could even use the list to contact all the CA's customers and advise them of the upgrade deadline.

If this CA isn't removed from the root store, it sends a message to other CAs: You can issue bad certificates with impunity, and there will be no negative consequences.
The New HWTrek Guides Hardware Projects From Idea to Production in Asia
DES : - (Matsui, M. (1994, January). Linear cryptanalysis method for DES cipher. In Advances in Cryptology—EUROCRYPT’93 (pp. 386-397). Springer Berlin Heidelberg.)

- Biham, E., & Shamir, A. (1991). Differential cryptanalysis of DES-like cryptosystems. Journal of CRYPTOLOGY, 4(1), 3-72.

AES : - Billet, O., Gilbert, H., & Ech-Chatbi, C. (2005, January). Cryptanalysis of a white box AES implementation. In Selected Areas in Cryptography (pp. 227-240). Springer Berlin Heidelberg.

- Bogdanov, A., Khovratovich, D., & Rechberger, C. (2011). Biclique cryptanalysis of the full AES. In Advances in Cryptology–ASIACRYPT 2011 (pp. 344-371). Springer Berlin Heidelberg.
I feel I must point out that this relies on your clients to retry packets that iptables drops, so at the least they'll have a slower experience than they otherwise would. I believe that this will also break requests that are in flight when the reload happens, if they have sent partial data.