skysight-inc/HackerNews huggingface dataset:
Having tried using JavaScript and TypeScript, I settled with Scala.js, too.

Stuff just worked better on all accounts: Language, tooling, fast compilation, good error messages, not having to touch JavaScript-related mess, etc.
My guess is that they feel that the layers of indirection and abstraction often needed to make TDD work result in an object creation pattern that results in heavy GC load during normal operation. The references to "using static methods" is probably related to this.

ps. That's my guess, but I'd encourage you to post your question to the meta site for SO.
That would depend entirely of "handle other people's money" actually mean. There's a huge difference between the different players in this space. Just because they're in the same ecosystem doesn't mean the same regulations should apply.

I am personally intrigued by point 4, "any untouched asset after five years is abandoned property". So, if I deposit money in my account, it's not mine after five years? Where does it work like that?
No it wouldn't. How is it possibly helpful to the security establishment if I use tor for what is essentially an innocuous purpose?
True, unless they can do something innovative, then even $0.005/session is optimistic.
Anyone keeping SSH keys in an ssh-agent process for weeks on end is doing it wrong. You can use the -t option to ssh-agent to specify a maximum lifetime for identities added to the agent. I would set it to less than a day.
No. The Libyan government does not have the authority to surreptitiously control BIT.LY. That's not how the Internet trust model works. Even in the badly broken implementation we have today, there are things BIT.LY can do to override Libya; for instance, they can have their certificate pinned to a specific trusted CA.

The general belief that TLD managers "already" control sites is probably behind a lot of otherwise- inexplicable DNSSEC boosterism. Because if you really believe that, then sure, giving still more control to the operators of those TLDs is just a cosmetic change.

But, thankfully: no. No, no, no. The operators of .COM don't get to monitor Google mail. The government of the British Indian Ocean Territories doesn't get to patch Redis.

The schemes we have now to fence Internet trust off from TLDs are imperfect. The right response to that is to make them better. DNSSEC advocates act like this is a pipe dream, but there are surprisingly simple things we can do right now to massively improve the situation, like adopting TACK or HPKP to turn everyone's (or at least everyone running Chrome and Firefox's) browsers into a surveillance system for attempts to compromise Internet trust.

"But we can do this in a DNSSEC world, too", the DNSSEC advocates say. That's not quite right; they mean to say, "but we still have to do this in a DNSSEC world". Two problems. First, if we're going to rely on HPKP/TACK and CT as a bridge to a decentralized reasonable trust system, why waste the time and effort on DNSSEC in the first place? Answer: there is no compelling reason to do that. Secondly: DNSSEC actually makes it harder to do those things; among the reasons, when TLD operators misbehave, there is no recourse at all for rectifying the situation. How long do you think it takes the Chrome team to flip the switch to remove a rogue CA? Now, how long will it take them to remove .COM?
There's often more than one piece of software to do something and that's OK. I've hacked up simple MITM proxies myself more than once in the last 15 years.

Charles is not new, it's been around more than 10 years.

I think that generally saying 'what does X do that Y doesn't' comes across as fairly negative, and unless there's some obvious reason why Y should be the default adds little.

I'd never heard of burp, but I had heard of Charles. Is there some obvious reason why burp should be the default?
I like Charles and have been using it for this exact purpose for a while now. I'm still wondering what's the best approach from a developer perspective to get around that and keep a private API private. Even if you build a different key for each request on Android you can work your way through obfuscated code and rebuild the logic. If the app requires the user to login running your own OAuth server can be a solution but are there any easier solutions?
I'm not sure I agree. Pragmatic choices based on using what you know and not just choosing a toolset because everyone else is using it.
Cities generally have to be at least partially in the telecom business, or there'd be five independent sets of telephone poles on every street.
Yup. I'm one of those that has to recompile text secure whenever there is an update. I'm hoping once F-Droid implements auto reinstall of updated apps, then moxie will permit builds on F-Droid.

Point of correctness: F-Droid does not require root privileges to install, just that user allows "untrusted" sources in android settings. Most F-Droid apps don't require root privileges. Google play on the other hand is full of malware.
The Basics Of ES6 Generators
The 6 Ways to Not Burn a New Supplier
The honest answer is that I don't know, because I don't know how much money the reddit tipbot handles or how long the money stays vulnerable to a potential bug in the software. This is criteria I suggest:

> for any piece of software from which it's possible to drain large sums of money

To which I might add "directly" or "quickly" or "covertly", but I think you get the intent. My edit to the parent comment also applies, since none of these is a binary value and risk management should match the assumed risk.

edit: I would say that the fact that it's only a few bucks per user is not relevant, especially if that limit isn't hard-coded.
Yep, Charles is a great proxy. Fiddler for Windows is a great free option as well.

Warning: the author of this blog very nonchalantly instructs readers to install the Charles certificate. If readers don't know what this does, it can be quite dangerous. Next time your device connects to a Wifi network that you don't control, you could very well be going through somebody else's proxy and have all of your https traffic sniffed!

Better to sign your own certificate and use that instead! Or, at least uninstall the Charles cert from your device after you've had your fun sniffing traffic on your own network.
Show HN: Website shows the absurdity of new startups
See also the Wikipedia article: http://en.wikipedia.org/wiki/Rai_stones
Hadn't heard about this but found this link. Great story:

http://www.dailykos.com/story/2012/08/25/1124164/-Neil-Armst...
The short answer is "no" - you're always playing a cat and mouse game, so you're wiser not to put things behind an API that you're really not happy for people to play with.

I suspect this is why we've traditionally seen banks (in the UK, at least) use web-pages-embedded-in-apps rather than true native apps.
Cratejoy (YC S13) is hiring a UX Engineer
Many high-profile open source projects have far more bug reports than they know what to do with. Declaring issue bankruptcy and asking people to re-test with a new version is annoying from a customer service point of view, but looked at another way, it's a scalable way for the community to help. Cut and paste (or better yet, summarize the conversation) isn't so hard if it's still a real issue.
>This is due to Republicans in Congress blocking an increase on the gas tax, currently at ~18 cents/gallon of gas since 1993.

Your demagoguery does not hold up to the fact that Democrats recently held a majority in both houses of congress.
Fair point on the Charles certificate. Not something to keep installed! I'll add that now.
It's not really mentioned in this article but EPB owns the fiber and EPB Fiber Optics which delivers the broadband service pays a fee to them to use the infrastructure. What would be interesting is if EPB opened the infrastructure up for other providers to use and compete for customers.
Leaving Toxic Open Source Communities
> (they shipped 1.0 with an arbitrary snapshot)

They will have no choice but to change the Typescript module system,or it will stop being compatible for Ecmascript. Right now afaik Typescript doesnt support generators either.

It's a great language but the way they handled module in Typescript was a mistake.
> Would comcast slap someone down for sharing their network connection via the mesh?

Isn't Comcast currently loudly trumpeting the fact that they are -- as a condition of approval of a merger -- bound by the terms of the FCCs 2010 Open Internet Order (even though that Order was later struck down as generally-applicable regulation) which prohibits protects the right of consumers to send any lawful traffic without blocking or discrimination?
Some charitable rich guy will give away a cheap nano-factory, and then that guy uses the nano-factory to make more nano-factories, gives those away, etc.

Education is basically already free, and free education is on the way to being as good as paid education. Information reproduction costs are near zero.

You are stuck in the pre-free-labor mindset.
It's not immediately apparent and not used by the app. You'll have to go looking for it. It also might have been removed, this was over a year ago.
A couple of reasons:

1: A coop generally can't have outside ownership.

2: Before Comcast can buy them, someone would need to sell it. It's not clear why they'd want to sell to Comcast.

3: If they did sell, they then (by definition) have the value of a community-wide network in their pockets. They could use that to build another community-wide network to compete with Comcast (then Comcast could buy that, but...)

But more fundamentally, if Comcast had a lot of money lying around for stuff like this, they could just invest it in becoming a properly good ISP that people would actually want to be customers of.
I really wish Charles generated a self-signed cert on installation, rather than using a root that you download from them.

I suspect that a lot of people in the iOS dev community (where Charles seems ubiquitous) walk around with the Charles root on their phone, ripe for an easy malicious MITM against them.

I'm also surprised more iOS and Android apps don't bundle and pin their certificates - it's still an obscurity measure since, worst comes to worst, the user can root / jailbreak the device and attach a debugger or watch the network stack, but it keeps any random user with Charles (or random malicious attacker with a stolen root cert) from reversing private APIs.
The appeal of bitcoin in this respect is that it disrupts the idea of money "being" in a certain place and thus having to "move" across borders. As a worldwide distributed ledger, it's unclear that sending someone bitcoins amounts to a value transfer across borders.

I don't see this as a loophole so much as radical redefinition of what a store of value means. It's clear that whatever future regulations look like, they can't mirror the status quo.
People don't have to share their name to their public key in the blockchain. So the anonymity is about the same as a social security number, and but confirming the identity is much stronger and doesn't need to reveal private information or their private voter's token keychain. Transparency is giving out tokens to known voters, since there is already registration at least in united states elections. What it does give is a strict list of keys that should correlate with registered population.
Browsing with NoScript, while inconvenient, offers safe-by-default browsing for cases like these. If I see a site I actually want to interact with, I'll fire up a different browser profile and look at it there. If it's a site I want to use regularly, I just add to NoScript's whitelist.
I have radicale installed on my server with a self-signed certificate. It stores data in standardized clear-text files and has good documentation on how to setup all sorts of clients.

I highly recommend it.
+1 for height based on type of grass.
http://publications.tamu.edu/TURF_LANDSCAPE/PUB_turf_Maintai...
http://publications.tamu.edu/TURF_LANDSCAPE/PUB_turf_Maintai...
I've been following their height recommendations this year and can tell a difference in density and weed occurrence.
Gig 'Em
beanholio
class of '96
#4 does not mean New York State owns it forever. It is intended to prevent companies from having an incentive to create business practices based on the hope that people will forget about or abandon funds etc. A customer can claim those funds by going here:

https://www.osc.state.ny.us/ouf/

Your comment is kind of what I'm talking about. You do not know nearly enough about this stuff to start a Bitcoin startup judging by the fact that you don't even know what unclaimed property is. Therefore I hope regulations like this prevent you and other obviously unqualified people from handling other peoples money.

EDIT: I came out a bit harsh on this and I apologize. I intended to use it as an example of you likely having the technical ability for such a project but not the financial knowledge, which in my opinion is the dangerous situation these regulations will hopefully prevent.
Tl;dr wow, just wow.

So we have three fingerprint mechanisms:
One I had not even heard of or frankly suspected, but it explains a lot about why many designers who strive for pixel perfection are constantly frustrated. The original paper is fascinating (cseweb.ucsd.edu/~hovav/dist/canvas.pdf) but one simple takeaway - testing 300 different user systems (Mechanical Turk - quite clever) a simple sentence in Arial rendered 50 different ways! So by combining different renderings (like sentences, drawing a line on a canvas element) they find that user systems - hardware, drivers etc, give off different results unique enough to tag you.

I would be interested in their results on iPhones (in fact any one interested in a quick experiment here in HN?)

And cookies - the synching cookies where fucking trackers collaborate and share / copy each other's ids, and ever cookies where they store a cookie in JavaScript/cookie and anywhere else and keep respawning.

Little fuckers

I propose two solutions:

Cookies should be limited to no more than 128bits - enough to store one randomly generated UUID. Screw the backward compatibility.

And we should be able to only allow signed hashed JavaScript to run on our machines. For example I want to only allow say bootstrap and some overlay and a config or data file. No one gets to run unsigned js on my machine?

Have I just reinvented Microsoft code signing?

But boy I am in a bad mood
Work on your project on the side AND take that developer job abroad.

A SaaS can take years to build to a point where you can even get in to see a real, live seed or angel investor. Live now and keep coding for your future.
Are you really arguing that a pitiful increase of 20K over a year, in a system where every single change in any holdings causes a transaction to occur, is significant for this system? I shudder to think of the reality distortion field you live in.

For sake of argument, let's say that coinbase keeps 100 small, hot wallets around. Every time coinbase rearranges funds in their wallets, they could create between 1 and infinity transactions. If, on average, they rearrange funds daily in such a way that 25 transactions occurs, they would account for 50% of your increase alone.

Given that all exchanges and processors routinely shuffle funds around, and every move is recorded as a transaction, you need exchanges (in total) to make 55 more transactions/day to make up your superduper exponential growth.

20K increase in transactions in bitcoin is no increase in transactions.
Verizon Offers Customers Rewards in Return for Ad Targeting Data
Underscore is not a perfect fit for JS, but it's close enough; if you like coding in the style Underscore promotes, Underscore.js makes Javscript programming simpler.

Underscore seems like it would not at all be a good fit for Golang. Golang really wants you to just use a for-loop.
And for what it's worth, what I've set up lately includes SPF, DKIM, and DMARC.
I don't use Elm. I'm more interested in PureScript. But, the API looks silly for a Haskell like language. There is some positive feedback for whoever cares. Like, I wouldn't take that API out in public because everyone will think, "why is there string-based programming in Elm?"
>does your Gulp wrapper load files from the disk, or are the files given to it as in-memory streams

The latter. The TS compiler (TypeScriptCompiler) internally works with string sources and outputs strings. The official sources use a wrapper around it (BatchCompiler) that converts input file names to input file contents and output JS+sourcemaps to files. My wrapper uses file contents from gulp.src for the same.

>Well, it seems that it requires quite a lot of code

Yes. The first part of my code is basically a reimplementation of BatchCompiler. But my code also does other things - for example I fiddle with the AST to generate automatic JSDocs, etc.
Seoul wants to ban Uber and build its own app
Done - thanks for the poke.
> Babylon 5, 1 guy wrote most of it

I thought that while JMS oversaw all of B5 and wrote the broad story arc, he did not write most of the episodes.
Regulations are only possible because the technology to "transfer dollars electronically", as you say, requires lots of infrastructure and trust - the entire banking system, basically. If I want to send you a dollar electronically, I can't do so without using the banks. And the banks are both intrinsically and extrinsically motivated to impose regulations, which they can do by limiting access to their transfer-money services.

But access to the technology to transfer bitcoin does not require infrastructure and trust. I can send you a bitcoin without needing a bank or any other large authority. Moreover, I can do so relatively anonymously, and from anywhere in the world. It is therefore much, much harder to impose restrictions on moving bitcoin than moving USD or other non-digital currencies, because there are no large authorities capable of enforcing those restrictions.

(That is, the government can of course pass laws saying I can't send you bitcoin, or limiting the circumstances in which I could. But the most they can do is punish me if they can catch me - they can't actually stop it. Whereas banks do have the power to actually stop me from sending you USD. [Unless I want to do so physically, which is hard to do in quantity or over any distance.])
This is hard, since there is such a large number of them. It would be very painful to maintain this list. For a while I had the keys expire in ssh-agent, but that didn't work because you can't extend the expiration before you run a set of unattended commands. That is, if it's 11.5 hours into a 12 hour expiration, and I need to run commands that will span the expiration, then I'm screwed, since 1) I can't query when the keys will expire, and 2) I can't extend it another 12 hours (from now, not from the expiration).

I feel like ssh-agent is essential to my life but it's badly designed and I have this nagging feeling it's insecure (and articles like this feed this fear).
I agree. I'm glad people don't though, as I like de-privatising "private APIs" ;)
This isn't how either satire or the "stylistic suck" motif work. Satire requires a point, and this suck isn't stylistic.
Hmm... There's a lot of Wheaton hate here!
The Aha Moments – How Entrepreneurs Realized What To Do In Life
"
Get an earthworm or bokashi composter use that for nutrients. Declorinate your water by letting it stand outside for a day or"

THis only works if your waters has been chlorinated. chloramine is much more stable and is also commonly used - it does not break down in the water over short periods of time, so letting it sit for a couple of days won't remove it.
I wrote a Dapper extension for working with SQL Server's geospatial queries and types a couple of years ago - have they added anything like that yet? Otherwise I'd be happy to add it.
Heroin, Consultants, and The Importance of Asking Why
yo dawg, i heard you like FP...
Is there going to be a PDF version? I'm not a fan of Kindle (can't copy/paste to make notes and page flipping is slow). I'm even willing to pay for a DRMed version of the PDF rather than a DRM-free kindle!
Not proposing doing anything to Bitcoin, it's an idea for controlling the supply of a new crypto-currency.

| It's deflationary property is a feature, not a flaw.

I studied this while getting my economics degree. Methinks you are missing some important behavioral dynamics related to interest rate interactions with consumption and investment.

Here's a lesson from the fed: http://www.philadelphiafed.org/education/teachers/resources/...
>574 open issues exist for TypeScript on Codeplex. https://typescript.codeplex.com/workitem/list/basic

A lot are duplicates. There are two or three issues for type unions, atleast two issues for ABCs, and so on. Also a some of the issues are for VS integration.

>Github is back up to 117.

I only glanced at the GH issues but it seems they're actually internal issues discovered by the devs themselves, not from the Codeplex tracker.
You mean to tell me Joel is partially responsible for the abomination known as Excel 2007 where I can't pull-drag the damn window from screen to screen (but all of the other Office 2007 products do!)
That isn't how it works. The 85% in this case is producing steam that is nowhere near hot enough. A steam plant only gets up to reasonable efficiency when the hot end of the steam plant is at a very high temperature and pressure, which in this case would then react with the carbon element.

Have a look at this - "The Mechanism of the Steam-Carbon Reaction" http://rspa.royalsocietypublishing.org/content/193/1034/377
> The question is: will municipal internet be more like NYC's transit system, or more like the ones everywhere else?

It's funny that you use this as a point of comparison. The NYC subway system began as three competing private companies.

Long story short: They went broke, and were acquired by the city in 1940 (and then later by the state, which now has authority over the MTA).

While they were originally constructed as private subway systems, I firmly believe that it would be impossible for NYC to function the way it does now if its public transit system were privately run.

That's not to say I'm a fan of the way the MTA is regulated. I follow this issue closely and have a lot of opinions on the matter. There are a number of ways in which the state government cripples it. But it's still significantly better than it would be if the Interborough Rapid Transit were still running the numbered lines.
ES6.1 wishlist: UTF8 strings, full stop.
no problemo! I enjoyed the post - I do this kind of thing daily for my job, which just so happens to require that I "understand" how many private APIs work ;)
Oh, good point. They'll probably take it down now that you've pointed that out...
Not really a ledger, bitcoin is only an asset, never a liability.
You can use Proxy.app (http://www.websecurify.com/desktop/proxy.html) which does that. As for the certificate pinning - it makes proxying a very difficult.
Accountability in the ballots themselves is just as important as accurately tracking the votes.
Twig syntax takes from Django/Jinja [1], not Ruby.

[1] http://fabien.potencier.org/article/34/templating-engines-in...
There is zero incentive for me to do that and whole lot of incentive to not do it. I don't fancy the chances of trumped up charges under the Computer Misuse Act if they take it the wrong way.
Dropbox itself makes this even easier now. See https://www.dropbox.com/developers/blog/94/generate-an-acces....
Wait a minute, you posted a submission to this URL an hour ago on an sockpuppet account.

https://news.ycombinator.com/item?id=8065799

EDIT: The fact that you deleted it does not hide the fact that you submitted it.
Google acquires drawElements
I took 4 hours at 20 days to get the peak, figuring it probably won't be worse than that. The average over the month isn't a number you'll see in practice. Most perf engineering work seems to go to keep things working nicely while at peak. (And making sure you have good 95th percentile times.)