skysight-inc/HackerNews huggingface dataset:
I've very recently started adding all of it to a github repo. Very early version, but can be found at https://github.com/rushiagr/myutils/blob/master/aliasrc
Tumblr.
Time travelling debugger in Clojurescript
A cheaper, safer replacement for the EG&G air-gap flash is exactly the final goal of my project, but it will take a few months. Expect a Kickstarter. The BOM doesn't include the laser. I'm using the laser sight on the air pistol, and I tested it with a cheap eBay laser pointer.
Meanwhile in America
Fascinating. Thank you very much!
You are correct. Good spot. I added the power supply after making up the rest of the stuff in Fritzing, and screwed the the polarity. I'll add a note!
The thing about poker is most of the guys who have been very successful at it are fairly intelligent and would have been successful at a lot of different things. In 2004-2010 it was a little different as a really good player could expect to make 200-300k a year fairly easily.

As poker gets tougher, win rates decrease and a really strong player's expected yearly winnings might be reduced to 100k a year without any real applicable real-world connections or skills. 5 years from now, with the game losing popularity, that expectation might be 50k.

Whereas, if the player had entered the real world, their expected career earnings would increase over time. It'd be hard for me to recommend poker as a career to anyone with the state of today's games. 4 or 5 years ago, it would have been tough for me to convince someone otherwise - especially with the freedom it afforded.
https://news.ycombinator.com/item?id=8056882
Very awesome - wish that Norse gave more explanation about specific attacks (and the differences between the types). If anyone can explain in more detail that would be a great help (hope someone will take time to chime in)...
Coinbase isn't running a fractional reserve. Barring fraud, everyone would get their BTC back even if it fails.
Bootcut Bandit Hits Startup Offices In San Francisco
Expanding Your World Beyond The Code You Write
A clean shirt on a clean body probably isn't gettin too dirty to wear after one or two wears.

Not washing clothes until they need to be washed is probably environmentally beneficial - saving all that water and energy.
If Bitcoin becomes big and stable, there's no reason large companies couldn't open BTC accounts at Chase or Wells Fargo and accept them directly. Amazon doesn't convert your CAD into USD immediately when you shop on Amazon.ca.

At least with Bitcoin, anyone can compete as a payment processor because there's no central authority with onerous licensing requirements like Visa/Mastercard.
OpenWRT Linux computer for hobby and education
It's really easy to buy BTC in cash on LocalBitcoins in any major city and maintain pretty good anonymity. Also cheaper than the conventional alternative for anonymous online payments, Visa gift cards.
I mean, I just use Guzzle to be honest, but my point is that Curl is super useful in day-to-day usage and handles certain things far better than the streams API. I mean heck, the streams API using SSL context defaults to not verifying the damned certificate! Curl on the other hand, won't even connect until you tell it what to explicitly trust.

Granted, IIRC they are fixing that SSL issue in 5.6, but there are a number of other things, and frankly you haven't given a good enough reason to get rid of `curl_exec`. Others, like system calls I can completely agree with! But frankly, if PHP can make a call out to the web somehow, which you need it to if you're using APIs, then there will always be a vector for getting external exploits on to the server provided you've got remote execution already.
Vulnerable norwegian webshops
DORK: "Webshopen er levert av MultiCase" -site:multicase.no site:no

saweb@multicase / Zqxwce123 or a1s2d3f4
I think you're right; I also think that is a common attitude of those of us who were gaming at the time of hysteria (as the author was). Maybe this article is for the author, a reclaiming of how awesome gaming was for some of us, and discarding the the rubbish notions of that time.

Or maybe that's just me projecting my feelings about the article ;-)
Ok, I see some similarities to other projects here. Let's introduce one additional layer of abstraction that we call "resources-coin". Disk space is not the only limited resource that can be shared using an economic system; CPU cycles (not for hashing, but doing actual work), network bandwidth, storage space (like this project) are all things that have some value that one can be rewarded for. I bet there are many more ways.

The difference with traditional bitcoin is that, we're not talking about an absolutely limited resource here. While bitcoin will stop growing at a certain point, no matter what happens, storage space on earth will always grow. So will the overall bandwidth, overall computational power etc.

And that is why these things are not going to work on the long term. You cannot build a currency based on reward.
Funnily enough, living in an English speaking house for a few months in an environment where everyone made fun of my accent has hammered the accent away to such an extent that people can no longer tell where the hell my accent is from. They notice an accent, but can't place it.

Even fellow Slovenians can no longer place my accent despite technically having the same accent.
Definitely. I used to play RPGs as a teenager, but now when I see 20 or 30-somethings playing RPGs (or announcing it on FB), I think "OMG nerd".

When I want to relax I read or play casual games, but other than that I'm just too busy with, y'know, life.
The Dell merchant account on Coinbase has to be US-based but there's no reason they can't accept BTC from anyone world-wide.
Cracking the Search Category Problem
It's difficult to become powerful and not turn paranoid.
I know a computer science PhD in his early to mid 30s who wished that, if he could go back to uni would instead study industrial design, but alas he states that programming pays more and is more stable.

I mean, sure you could some other craft or industry that you don't love or god forbid dislike (banking, nursing, building homes) so that it can pay the bills and enable you to buy a house. You don't need to get into programming to do that. BUT programming enables you to live a certain lifestyle because of its unique attributes that is part and parcel of the job. The end game here is - do we live to work OR do we work to live?
Game of numbers with your clients
First pictures from inside the 'crater at the end of the world'
The risk is low, but if the issuing bank finds out that your CC details were stored online they'd refuse to cover you if you were hit by fraud.
Russia caught editing Wikipedia entry about MH17 (Wired UK)
Military Satellites Likely Saw Missile Strike on Malaysian Airlines Flight
YCombinator doesn't endorse Algolia's HN API in any public way, to my knowledge. This makes it just regular third-party API—reliable, convenient, better than scraping, but hardly ‘official’. (Yes, I'm being pedantic.)
Which problem seems easier to solve? Preventing people from having children (but still relying entirely on coal powered energy, and requiring progressively more of it as various parts of the world develop and demand more energy for various reasons), or implementing the technological solutions - which we have today to allow us to acquire unlimited amounts of energy from non-CO2 and other types of pollution emitting sources?

Bearing in mind that, again, the largest energy consumers in the world - western nations - are all well into having low or negative population growth within their own borders.
Totally tangential but,

Marco points out in latest ATP how he randomizes the lists of podcasts every time the list is shown. Neat!
In addition to tracking the hands players play themselves there is a black market for buying hand histories gathered by other players.

This is not allowed by the sites and there have been some notable scandals of nose bleed-players sharing hand histories to explicitly target another player.

http://www.pokernews.com/news/2009/12/the-4-million-controve...
I think its because linux got there first and designed these interfaces

To quote Ted Tso (author of the above patch and the original writer of /dev/random in the first place)

The two other interfaces are two character devices /dev/random and
* /dev/urandom. /dev/random is suitable for use when very high
* quality randomness is desired (for example, for key generation or
* one-time pads), as it will only return a maximum of the number of
* bits of randomness (as estimated by the random number generator)
* contained in the entropy pool.
*
* The /dev/urandom device does not have this limit, and will return
* as many bytes as are requested. As more and more random bytes are
* requested without giving time for the entropy pool to recharge,
* this will result in random numbers that are merely cryptographically
* strong. For many applications, however, this is acceptable.
I think this kind of belongs to the MysticalProgramming corner (http://c2.com/cgi/wiki?MysticalProgramming).
So, the OS is to blame here? Not the application programmers?
Is it possible to help on this?
Free download: 100 repeating vector patterns from freepik.com
The basic rules they recently published for D&D 5 read a lot like the 3.x rules, to the point that I was referring back to the 3.5 Player's Handbook to see the differences in some areas.
Pretty good!

I've found that when you need to construct a perpendicular to a given straight line from a given point not on the line, you can build an equilateral triangle with one side on the given straight line and one of the ends of that side in an arbitrary (actually, given) point on the line, and then make a line through the third (not on the given line) corner of this triangle and the given point not on the given line.

This may not always work - if the third corner of the triangle happen to be the same point as the given point. This suggests to me you may be don't properly consider all possible relations within objects being constructed.
It's the programmers' fault that their application crashed. It's the OS's fault that the OS itself crashed due to the application's crash.
Helsinki's New Plan To Eliminate Car Ownership
Dmitry Vyukov Bug https://groups.google.com/forum/#!topic/golang-nuts/MnsJ8_F7...
It seems to in the sense that Algolia powers the HN Search at the bottom of every window, and they are co-branded on those search pages. Also, https://hn.algolia.com/api
To the best of my knowledge, our software has used the name "Orthanc" for about 2 years, so this should establish prior use. As a consequence, I think that this should not become a risk to the project... but I'm not a lawyer ;)

Thank for your interest! Do not hesitate to give feedback and to follow the community on Twitter and Facebook.
Lots of these are not good interview questions. Just dumb obscure knowledge.
I have similar feelings. Its weird that online poker ever took off really. The fun of poker isn't playing the odds, its playing people. Its the psychology, the acting, the stacks of chips, the emotions - basically the theatre of the whole event.

Nothing quite like being faced with a massive raise and then your opponent fumbles their chips or something and now you know your deuces are good.

Only in live poker do you get such sustained experience reading people and attempting to influence their behaviour - much more exhilarating than making statistically correct decisions across a terminal!
Ask HN: Any ideas what code this is?
$_='^#(/||/@!@[{@:^[-['^";@@@\\>])@.".
"{)/];)^{";$,+=(++$,);$_.=">&$,";`$_`;

Saw it in a colleague's email signature. Seemed like Perl to me but I don't know Perl at all, certainly not at this level. So any ideas?
Ask HN: How would you structure data about a country?
It was suggested to me a while ago that there should be a free online API for getting data about nations, and possibly subnational (states, provinces) regions as well. I've been working on doing an example of what work of data the api would return for Australia at:

https://github.com/thomasfoster96/g8e/blob/gh-pages/api/nations/australia.json

If you were doing this, how would you structure the data? Have I made any glaring errors? Anything I should do differently?

In case I'm asked:

1. I'll probably have an optional API wrapper to make things easier when I've finished compiling enough of the data.

2. I do know Github isn't good for an API, but git + Github pages makes this relatively easy.

3. I'll do a Show HN when it's relatively complete. Help is appreciated.
https://hn.algolia.com/?q=euclid#!/story/forever/0/euclid%20...
> There is no way to prove that a piece of data went from one person to another.

Actually, you can prove that a piece of data went from one person to another, but others in the network must also have a copy. I was thinking a few months back about applying a similar idea to Bit-Torrent / P2P sharing. It was possible to prove that the file was sent given that all nodes had a copy of the file; so the idea is more feasible for file sharing than it is personal file storage.
The Middle East Friendship Chart
Hi merky!

I was very glad to read your review. This is good to see that our approach is useful to others and that the innovative aspect of Orthanc is acknowledged. Thanks and do not hesitate to get in touch with us (e.g. on Facebook or Twitter)!
Even Schiller had something similar. http://commons.wikimedia.org/wiki/File:Friedrich_Schiller_by...
https://hn.algolia.com/?q=How+a+password+changed+my+life#!/s...
I thought encryption on amateur radio frequencies was not allowed?
Netflix tests private viewing mode to hide your B-movie binges
Beautiful extension
Look like a regular expression.
Is there a program that will play the game for me, or an api that will allow me to make raw mouse moves?
Get a dressing gown/robe if you want to be warm at night but don't want to sleep with heavy clothing, and want to be decent if someone knocks at the door.

Sounds obvious, but I never realized how useful it is.
My intention wasn't meant to be misleading. I was under the impression that the FSF (& RMS) didn't consider even the BSD licenses to be Free Software because it was possible for proprietary software to incorporate it without giving back. If the FSF does consider the totally permissive licenses to be Free Software, I see that as a good thing. :)
Ah, the MS OS/2 2.0 fiasco, which was one of my favorite topics. I have a bad opinion against MS for it, and another favorite thing to mention about Win9x back when I was discussing this fiasco was how the dependence on DOS allowed Caldera to continue to sue MS. I once dug out PX00307 and mentioned it here: http://www.vintage-computer.com/vcforum/showthread.php?33838...
$_ = 'somestring';
`$_`; // backticks are shell or exec(), $_ is the previous string.

type echo "'^#(/||/@!@[{@:^[-['^";@@@\\>])@."."{)/];)^{";$,+=(++$,);$_.=">&$," to see what it does

;$,+=(++$,); looks like a for loop

looks like php to me - backticks work in perl, bash and php
RustyCube – A Rubik's Cube for your terminal in Rust
New Words Language Website
Yeah, you can move points around to get the setup that seems nicest to you, which is why it isn't perfect for proofs yet.
I think this is a good article, but I am often frustrated by discussions on digital privacy having such limited scope. It should be an international debate with a focus on international laws, or we are all in denial about what is at stake for the individual. This is bigger than Americans talking about American law that targets Americans.

I know many of you probably rolled your eyes at the mention of international law, but an individual's privacy on the Internet is an international problem (regardless of how effective you think international law is).

On the Internet, we are citizens of the world. We are all exploited at the horrible intersection of localized law, globalized technology and 20th century geography. Idealistically, the sooner that we realize two of those elements should be superseded, the better.
In going to the site on mobile I just get the image http://no-hipsters-allowed.t28.net/nohipsters.jpg
Soylent continue to push the "pioneering new food" line, but people like me remember Ensure back in the 80s.
How to Turn Your Bathtub Into a Giant iPad
Same for my Kindle. What's the point of this?
My favorite part: "The elements are all conducted by a master control computer, which you should be careful not to splash."
>So this argument has now been forked into Django's ORM capabilities and wether or not you should use Django for an API.

The two are inextricably linked as far as this thread is concerned.

>Rate limiter is framework independent, can be built using Redis with a few lines of code. So not applicable.

Mine is apparently 200 lines of code (library total) and tied to the framework. I guess you are more of a "reinvent the wheel" type programmer.

>Pluggable social media authentication backend is for websites not APIs

APIs do all manner of different things.

Last time I built an API it was a back end for an iphone app. It needed an authentication backend. By using a pluggable framework I could not only let the app log in/sign up using facebook tokens, I could with one added line add twitter or ~40 other back ends, saving me from... reinventing the wheel.

> for an api you can still build your portal in Django and do all authentication/whatever there and simply sign requests for the API.

Or you could just use django for the API as well the portal since it handles everything about making APIs pretty well (with the exception of high load APIs).

>for APIs you most commonly use API key/secret.

For APIs there are many common ways of doing authentication. There's no standard. Basic auth over https, token, oauth, key/secret, cryptographic signature. If you ascribe to a "one true way" you lack judgement and experience.

>I am familiar with Django, and I know that you can (not the ORM though), but do you want to drive a monster truck when all you need is a car to get around?

I already refuted your point that it was a monolithic heavyweight beast. It's composed of multiple small modules all of which exhibit loose coupling and each of which can be used independently or not at all.

>Since you can't use Django's ORM anywhere else

Utterly false. You can use it wherever you like, independently of everything else (sometimes I do that).

Feel free to argue that you don't like it or it's wrong for whatever situation but please refrain from making shit up to justify your point.

Some advice also: curb your instinct to reinvent the wheel, no matter how simple that wheel may seem.
Why should an attacker get to inject malicious content into your blog to infect your readers?

After a transition period, all plaintext protocols should be completely deprecated except for extremely special use, much like telnet was.
One last update from Winterkewl
Anyone have a pointer to this submission? My search-fu fails me.
Judging from the tone of the post (a big section complaining about GitHub users?) I'd say in this case the problem is between chair and keyboard.
Wow. Wouldn't talking on the phone for hours in the pre-skype days become extremely expensive?
> Software engineering requires mathematics. Software development does not. Engineers and developers both bang out code. But the similarities end there.

I agree. For instance, in Haskell you cannot just sit down and hack something together like in Python or PHP. You need to think about the whole structure of the program. That's software engineering.

Interestingly (for me) I realized that it is possible to write software in Haskell in a mathematical way which I previously considered to be possible only in an imperative way. It required a shift of my thinking about software, and I am still learning that.

Software engineering is intriguing because it raises software quality to a new level.
It can be circumvented using coral: http://laurent.bachelier.name.nyud.net/2012/05/github-kinda-...
Maybe https://assembly.com/ ?
This is awesome. So it'll be a new API or an extension of the Algolia API?
Fighting Stagnation
Happens for a lot of mobile devices. As you can tell, the author is very mature.
Our Top links for the week on PaaS, DevOps, Cloud
Wikimedia: HHVM deployment update
While I've never dealt with pull requests myself, I can understand the annoyance if lots of remotes are added to a repo just because a pull request was accepted from a contributor at some time in the past. I'd have to agree with the poster that patches are a cleaner way to contribute to a project and it's a shame Github hasn't some functionality built in to just send a patch to a maintainer instead of using pull requests.
I refer you to RFC6698, DANE TLSA: https://tools.ietf.org/html/rfc6698

In actual use, it works like this:
• You implement DNSSEC (easier when it's done automatically; going forward, my proposal is that every DNS registrar must support DS records in order to renew their registrar licence - adapt or die: I'm looking especially at you, Namecheap)
• You publish a TLSA record
• This contains a hash of a certificate's public key (other options are available, like hashing the whole certificate, or even including the whole certificate, but this is the most sensible one) and a pinning mode, one of:
- 0: CA Constraint - Certificate must be trusted by browser, AND this particular CA must sign it
- 1: Service Certificate Constraint - Certificate must be trusted by browser, AND it must be this particular certificate
- 2: Trust Anchor Assertion: This particular CA must sign the certificate
- 3: Domain-Issued Certificate: It must be this particular certificate

Basically, this is a way to 'pin' certificates to DNSSEC, either additionally (0,1) or instead of (2,3) the PKIX CA system. Already implemented in Chrome as a test but taken out because no-one used it - it can come back. If clients implement it, we can replace/augment the CA system as necessary.

You're welcome.
True that, I take back my comment.
Fair Phone: Building a phone to create a fairer economy
Streams used to be the less secure option and CURL was recommended instead because it meant fopen() calls couldn't be hijacked for remote include vulnerabilities and the programmer had to at least mean to include a remote file.

I have to admit I've continued to avoid streams much of the time for this reason - even though they are useful.
iPhone and Kindle, but my Android seems to get through.
The Mill CPU Architecture – Specification (8 of 9)
>Or of course you can merge the commit from the web. Seriously, you can merge it, without even getting it on your machine (to, you know, test it, read it, etc.), from your web browser. That’s stupid, right?

I don't agree with this. It's actually quite useful. Each time a pull request is opened Travis CI runs the tests and shows green or red for passed/failed tests. So you don't even have to fetch from remote and run tests locally.
In the PDF that nitinics linked, https://apps.fcc.gov/edocs_public/attachmatch/FCC-02-139A1.p..., check out the bottom of page 13.

Because repeaters utilize two channels at once (input and
output) and extend the operating range of a single user,
their use would limit the number of users able to share
these frequencies at the same time.
...
some commenters are concerned that MURS frequencies will be
congested and that repeater use will only aggravate this
problem. We agree.

Basically, they want to maximize the number of users that are able to reasonably use this band. At the time (1998-2002), two-way radios were much more popular than they are today (cell phones have largely made them obsolete), so I can understand the concern.

For whatever reason, MURS never did became as popular as GMRS or FRS did.
Why is he using Github than? There is bitbucket (btw very nice), google code and zilion other hosting solutions.
People who are downvoting this; the reason he/she's saying

> for those of you who are too hipster

Is because on mobile, this article instantly redirects to a site that says no hipster allowed, so this comment is the only way to view the article.