skysight-inc/HackerNews huggingface dataset:
This change is partly because of web developers' push for a "richer" and more full-featured -- that is, closer to native code parity -- web platform. There's a spectrum in terms of how conscious web developers and web standards developers may have been of the privacy risks (and many people in W3C committees have worked hard to remove fingerprinting risks from their specs before deployment), but there's been a steady tension between privacy and new functionality for web developers in the web platform.

Of course, things don't have to have been designed as tracking mechanisms in order to end up as tracking mechanisms. One of my favorite (?) examples is HSTS, which can be used as a cookie because you can tell a browser to load 00001.example.com, 00100.example.com, and 01000.example.com securely (while not mentioning 10000.example.com or 00010.example.com). Then if you tell a browser to load one-pixel images from the HTTP versions 00001, 00010, 00100, 01000, and 10000.example.com, you can see which subdomains it adds the HTTPS on and which it doesn't. (This risk is mentioned in section 14.9 of RFC 6797.)

An important historical example that stuck around for a long time was the CSS history bug (Javascript in a web page could query to see if a link's style had changed to match the style of a visited link).

An example that shows completely unintended tracking consequences were sneaking into web protocols a long time ago was Martin Pool's "meantime", described back in 2000. (He has a broken link that suggests that someone may have expressed concern about this back in 1995.)

http://sourcefrog.net/projects/meantime

And there are a lot of unintended browser fingerprinting effects from various UA properties that sites can ask about using Javascript:

https://panopticlick.eff.org/

It's apparently possible to break many of these tracking methods, as the Tor Browser systematically tries to do, but you have to give up a lot of local history and a bit of web platform functionality.

https://www.torproject.org/projects/torbrowser/design/#Imple...

Given what I've heard about web developer pushback against fixing the CSS history query bug, I'm scared to imagine the response to trying to mainstream some of the Tor Browser's fixes in popular browsers!
Listen, I really know where you're coming from. I have like 20 really absurd domain names that I don't want to explain to anybody. The genius ideas just never seem quite as good once the adderall wears off. :(
Your vehicles were very likely worth more than $15,000 when new. You've just never had a new vehicle.

Also, engine replacements on new gasoline vehicles run around $10k.
Programming with Aristotle
> Steam lets you trade and sell digital goods that you bought from steam

Do they? Only if you haven't claimed the game, I believe. You cannot sell (or trade) games that you have in your library.
Ask HN: First salaried position – process/tactics?
After a long series of hourly and contract positions, I'm about to get offered a full-time, salaried position as a Quality Assurance Engineer for a large tech company (it was a contract-to-hire process).

I'm pretty inexperienced in this whole thing - none of my previous jobs have had much room for negotiation, I've never gotten benefits, and I'll be making significantly more than ever before. I know very roughly what I should be making, based on what I'm making as a contractor now and the average salary for the position.

Is there anything major I should be looking out for with the offer? Do I have any leverage as a relatively inexperienced employee in a relatively low-level position?

Thanks in advance!
> A semi-rural department with three fire engines, ambulance, brush trucks, serving an area of 7,000 people and approximately ~1,000 calls a year does so with expenditure of ~$1M for those 7,000 residents.

What's the breakdown of your calls? Car accidents? Health problems?
An interesting article, but certainly not a new theory. Dr. Kay Jamison is one of the foremost authorities on manic-depressive illness - and also suffers from it.

She wrote a memoir, An Unquiet Mind (http://www.amazon.com/An-Unquiet-Mind-Memoir-Madness/dp/0679...), and a non-fiction work of research, “Touched with Fire: Manic-Depressive Illness and the Artistic Temperament” (http://www.amazon.com/Touched-Fire-Manic-Depressive-Artistic...).
Laser hair removal new jersey
If ultrashort expiry time really mattered to you and ntpd not reliably working, you could always make a request of S3 and use the response's version of the date (which presumably is the version of time that really matters, as far as S3 is concerned).
Yep. The general technique of scraping memory for private keys and certificates a pretty well-known and established. Particularly in forensics and malware circles.

I don't point it out to engage in the "who was first" thing. But to point out that this is very much an applied attack in the real world. Real attackers (includes "forensics analysts", incase you don't consider them "attackers" too) have been using this technique in malware as well as countermeasures/investigations for quite a while, now.

See:
http://www.trapkit.de/research/sslkeyfinder/

https://github.com/emonti/yara-ruby/blob/master/samples/sslk...

http://volatility-labs.blogspot.com/2013/05/movp-ii-21-rsa-p...

EDIT: actually a much earlier discussion is from '98 by none other than Shamir

https://www.cs.jhu.edu/~astubble/600.412/s-c-papers/keys2.pd... [PDF]
A great conversation regarding handling multiple side projects https://news.ycombinator.com/item?id=7637409
> The bad solution is to add, factory patterns, dependency injectors and other useless layers just to try and keep your design both well encapsulated and testable.

Not doing this will cause much self-righteous snickering from some.
That won't help here. You cannot "undo" a workstation reset, or any other action that results in a state propagation.
Using Sysbench to Benchmark MySQL
Taxis do it a lot. There are plenty of Prius taxis out there, and they seem to do pretty well too.
Going to be tough for that competitor to survive if they don't pivot from a 'Stripe-clone'. Hope they're well funded and well backed.

You need to do a huge volume of transactions to be able to live off 2.6% + 30c, close to two million a month to support a startup with 5 fully loaded employees including the founders.

Working with a lot of Ecommerce sites I know a well established one (attached to 3 bricks and mortar stores) does on average $16k a month. Say on average an Online store is doing 10k/month you're looking at 200 clients to keep the payment processor afloat. Doable but you'd want them to have some runway otherwise people are gonna go with Stripe to know they've got a payment gateway that's not gonna disappear
The tech utopia nobody wants
Yes, there are significant restrictions and you can't take a game out of your library and gift it, for example. I believe there may be other restrictions on, for example, having people trade when one person is in a low price region and gifting to someone higher, but I'm not very familiar with the details.
Although interesting, this isn't particularity surprising (at least not to me). Mood disorders have a high correlation with atypical brain morphology. This is due to the fact that abnormal brains often result in abnormal temperament. Although correlation doesn't always imply causation, in this particular case it probably does. Most individuals affected by these conditions likely express phenotypes on the edges of the bell curve (not necessarily just regarding intelligence).
I'm a big fan of Teensy boards. They're like arduino, but smarter about things. The default libraries include assorted niceties (lie handling capsense) and the hardware, while arduino-compatible, has a few extras (like proper USB MIDI).

I've been experimenting with a Teensy 3 and an RN XV WiFly board. The cost is a bit higher than perhaps the all-in-one assemblies but they seem to come with strings attached.

If I'm going over WiFi I try to use OSC (or CoAP); basically the UDP path.

Next to explore is BLE. Then I have to look into 6lowpan.

One of my concerns with the items on your list is that they approach the Internet of Things as if it were little different than the Internet of Regular Computers. That is, HTTP or WebSockets over TCP, passing bulky messages, often requiring a central service to route every message. I'm skeptical this is the way to set up large numbers of small, low-power devices spread out over some distance coordinating with each other.

OTOH defining just what counts as IoT is tricky, especially with companies tagging everything as IoT because it sounds cool and hip.

I'm sorry I can't say much more about most things on your list. I've looked at them but as soon as I think it's tied to some 3rd-party service, or a special protocol, or HTTP-based, I lose interest.

(BTW if I'm wrong about any of them I'd love to know. But it seems they offer short-term gains in exchange for a certain product coupling.)

Teensy: https://www.pjrc.com/teensy/teensy31.html
RN XV WiFly: https://www.sparkfun.com/products/10822
Can't see the images on slideshow pages because I block analytics providers. Step backwards, New Yorker, and this is coming from a non-American who semi-frequently buys your print issues. I used to love your little monocle man!
I'm curious if the comments above exist in the source code, or have been added here for the benefit of readers on HN?
I take that statement to mean C# as C. Functional languages are terrible for garbage collection. Static methods are great since they are static, loaded once and probably in-lineable by the compiler/JIT.
Fiber optic light pipes in the retina do much more than simple image transfer
The rule that's always served me well is, "Don't publish anything on the Internet that you wouldn't want on a billboard."

This includes sites that are supposed to be private, like online email providers, and especially social networks. I'm friendly with enough brilliant hackers to know better than that.
Netflix finally brings most-wanted feature to Apple TV
I don't work in an office as all of my client work is 100% remote and usually short- to medium-term. I mostly program full time in Objective-C and work on a wide range of problems like image processing, audio, networked applications and more recently parsing, NLP and (non-game-related) AI.

1. Wake up around 8, start working around 9.

2. Respond to emails for ~30 minutes.

3. Program for 7.5 hours, usually having lunch while working.

4. Have dinner, spend time with family.

5. Possibly program for another 1-3 hours. The late night stuff might be a side project (or more likely) the most complex part of the current project I'm working on.

6. Rinse, repeat. Take weekends off and try to take a mental holiday to the largest extent possible (drink some craft beer, smoke some pot, play video games, go shopping, take the family somewhere, etc).

I get paid (relatively) large sums of money to solve (relatively) hard problems. The key to being successful in that is getting large blocks of uninterrupted time to work, and when the complexity of the problem warrants it, being able to get in a lot of extra time researching and trying out different things.

There is also some time getting on Skype with clients but I try to keep a steady stream of github activity / emails flowing their way so we don't have to kill too much time talking about the work we're doing. It's not that I don't like to talk to people -- once I get started it's hard to shut me up -- but I think meetings quickly become counterproductive.

I either work from home or from a local coffee shop. I have a (somewhat) high end headphone rig that gives me the privacy that I need. I drink coffee like water. I exercise a bit and try to eat as well / healthy as possible.

Dealing with burnout is a very real thing and I don't think it matters how disciplined you are. I come from a corporate / entrepreneurial background which granted me a "work before mental health" work ethic. I take what I do very (maybe too) seriously. Still, I find it entirely possible to push myself too hard then find it nearly impossible to re-engage. It's never the end of the world because I recover quickly (a couple days max) but it is something I have to be aware of. I often make breakthroughs burning the midnight oil but that comes at a cost.

Put another way, sometimes you feel like you could work through the night. Most of the time you shouldn't. You need to find a balance between getting things done short term and getting things done long term. There's definitely an art to it.

The life of a programmer will vary considerably based on what type of job they have of course but for me it's like the life of a writer or a composer (though I don't wow people at cocktail parties). I spend most of my time in mental solitude. I love what I do and it's lucrative enough that people generally don't think I'm insane for being as obsessed as I am.
We love our internet :)
You're better off not storing your passphrase in the keychain and just typing it in that one first time, though. But it's still marginally better than an unencrypted private key for automation if you need a 100% unattended setup.
Setting the pricing that way makes sense. With my apps, I have just done the conversion from USD to local currency and rounded them to (psudo) psychological price points. Little to no regard was given to the local value of the currencies.

I might just have to play around with my pricing a little bit, although I don't know if I have enough traffic to justify all of the conversions. Could be a fun project to test out.

Thanks for the idea.
As it stands Tor is deliberately routing the majority of the traffic through a minority of the available exit nodes, they explain that they do that for performance reasons. Given that they are financed almost exclusively by the US government and some of the developers have very friendly relations with law enforcement to this day, it is at least plausible that there are other reasons at work. In some of the leaked NSA memos they even state that while they have not been able to fully compromise the tor network so far, at least the majority of their targets are using it. All of this is a clear indication to me, that TOR should be abandoned sooner rather than later.
It really also does depend on the language, or rather compiler. Specifically, tests are far more useful when static analysis doesn't exist.
> Cities should not be in the telecommunications business.

Why not? If they can do it cheaper and better, they should.

Any other position is religious idiocy.
How do you distinguish between eg EV SSL versus non-EV?
Keep in mind that these regulations have advantages as well as disadvantages. Municipalities can easily prevent broadband providers from installing networks. So if they compete with broadband providers, they can easily abuse their position.

This can lead to worse internet availability.

E.g. these are municipalities, right, so porn filters and other forms of censorship for example are pretty much guaranteed if you let them install their own networks.
According to his next post:

What I didn’t say is that it was the last day of my summer internship. The next summer they invited me back again. Everyone understood it was a mistake, but by officially firing me, someone had been punished … :)
WIN+SHIFT+ArrowKey
Chuck Palahniuk reconvenes his 'Fight Club' in new Dark Horse comic book series
They actually seem to be doing great in the aftermarket. There's a wait list to purchase new, which is surely helping.
Isn't that kind of a whole different kettle of fish?
Don't send your kid to the Ivy League
A King’s Landing: Claim Your Landing Page Optimization Throne
How in this scenario is the MS stack the "least pragmatic" route?

prag·mat·ic
adjective \prag-ˈma-tik\

: dealing with the problems that exist in a specific situation in a reasonable and logical way instead of depending on ideas and theories
I don't see that as a bad thing. Mostly it seems to be a reflection of how low the barrier to entry is on github. It's easy to get up and running there, so naturally lots of people do, even if it's just a hobby project they work on once a year during Christmas break....
Maybe I can enhance the script. What do you mean with "semantically aware" comments? Could you provide an example? Thanks
Six Important considerations for enterprise mobile software providers in 2014
All the above projects are interesting, but are essentially hobby/devkits. Are you planning to use them to prototype or do you have an end product in mind?

For prototype any of the above is fine but for an end product keep production/supply chain costs as your primary concern. Your end product will look nothing like any of the boards that you shortlist.

Source: Worked at a Semiconductor company for years.
True, but when was the last time you heard about a car that needed a whole new engine every 7k miles?

It's an interesting question actually, are Tesla motors only really serviceable as a unit? That could be bad news. A new gasoline engine might be $10k, but 99% of the time you just replace a belt or a pulley or a seal, or take off the top and do some machining for a few thousand.
I managed to run (sudo) mv /* /tmp one day.

I was trying to move everything out of a folder to tmp (mv ./* /tmp), which was fine. Then I cd to /, and, wanting to rerun the command I'd run right before the mv, pressed up twice and enter quickly...

Well, it failed once it finished moving /bin/mv to tmp. Of course cp, and a lot of other helpful commands come before mv alphabetically.

It wasn't too bad, just needed a boot from a live disc to move everything back, but I still get nervous whenever / and * are in the same command.
Apple Jacks Up the Competition
He means scaling over the dimension of complexity - not web-scale, over performance/efficiency/throughput etc. Perhaps it would be clearer to include "complexity" in the title, but to be fair, complexity always has been and always will be the problematic scaling dimension of programming.

There's a pedagogical difficulty in showing a very complex problem: the article is already quite long, and just the showing of a complex problem is, well, complex. It reminds me of the difficulty of teaching a one-semester course in Software Engineering: you need a large project before software engineering principles start to be needed; but developing a large project is more than semester's work in itself...

I'm not sure there is an answer to this, for equational reasoning. It seems some tradeoff/sacrifice is needed; something must be given up. Maybe: only summarise the project and sketch out the proof (like those of professional mathematicians) - the tradeoff is that this is no longer elementary from first principles, and would be inaccessible to newcomers. Maybe a "201" blog post, that has as prerequisites some of your "101" blog posts?

There's certainly a need to have an actual complex project to prove. Could be one of your own; building one specifically for this (so the complexity is not overwhelming; and minimize interactions); or choose some existing complex project off the shelf. Probably needs to be an objectively convincingly complex one (so not one that is intrinsically tied to addressing problems within Haskell itself). For example, not an IO monad, but some application that is complex no matter what language it's written in.

Ironically, perhaps some of the "web-scale" examples would be most complelling...

EDIT just saw some of your comments, and it looks like you're doing pretty much this already. :)
It's the historical interface which websites now rely on, changing it would be like writing a libc with strcmp operating on Pascal strings.

In any case, a Javascript String is not actually designed to be UTF-16, it is essentially just an `uint16_t[]`. Even textual strings just store UTF-16 code units, not full UTF-16 data. Relevant snippets from the standard:

The String type is the set of all finite ordered sequences of zero or more 16-bit unsigned integer values
("elements").

When a String contains actual textual data, each element is considered to be a single UTF-16 code unit. [...] All operations on
Strings (except as otherwise stated) treat them as sequences of undifferentiated 16-bit unsigned integers;
they do not ensure the resulting String is in normalised form, nor do they ensure language-sensitive results.

See also:

- Section 8.4 http://www.ecma-international.org/publications/files/ECMA-ST...

- http://mathiasbynens.be/notes/javascript-encoding
Some types of porn are illegal. So what's the problem with censorship?
Routing even 1Gbps with NAT, etc. is actually a little difficult. But you can drop a 10GigE card into your desktop and get 10Gbps for at least one machine that way.

(They seem to cost in the $500 range these days. I'd pay $500 for a 10Gbps link to the Internet. What would I do? I have no idea.)
I can't tell if that's sarcasm or not, but after having acquired a lot of that stuff, I can tell you it's highly overrated (maybe not the vacations)
Octoblu launches to make Skynet Internet of things tools professional grade
> did it offer a `mutable` opt-in, though?

Nope.

> would intuitively expect it to be the POLS behavior.

If you give me (the implementation) a modifiable range, and I invisibly add constness before giving you back an element, that's surprising. C++ doesn't add constness by default anywhere (with the novel exception of lambda function call operators). If you give me a modifiable range, the least surprising thing to do is to give you a modifiable element, because that's what all of ptr[idx], * ptr, and * iter would do.

> how realistic (from the impl. POV) would be to have value-semantic range-based `for` with _mandated_ copy elision whenever possible?

If you say "for (auto elem : range) { elem = stuff; }" the write to the elem-copy will be dropped on the floor. Copy elision can't solve that.

> it doesn't say that `it` _itself_ has to be immutable (right?)

Correct.

> How do you think about InputIterators?

The concept is single-pass, read-only, but a given iterator may be stronger. for_each() is kind of special (it's the only algorithm that takes InputIterators, yet allows stronger iterators to be used with modifying functors), but other algorithms are vaguely similar. For example, transform(InIt first, InIt last, OutIt result, UnOp op) permits transform(first, last, first, op) for an in-place transformation - here, first/last's type clearly has to be InIt and OutIt simultaneously, i.e. a mutable FwdIt iterator or stronger.
I think your parent is saying "It is a victory that Edmunds is conducting a road test just like with any other car".
But I don't see a wait list for expired Teslas.
That may indeed be a problem. Could use an out-of-browser gui, or possibly configure your browser to trust your own CA as a CA capable of EV somehow, and stick your own EV id in the generated certificate. I dont think this is configurable in most common browsers at the moment, though.
Aw! You changed how this comment is formatted so that now it has text in those tedious "boxes" designed for code samples where I have to scroll horizontally to read the longer lines of text (and there are some extremely long lines of text, e.g., the one that starts "6:00 PM: Probably done with essay").

Please reconsider whether you really want to use those "boxes"!
The warning dialogs do not display if you add the authority certificate used by the proxy to your trust store, and the proxy properly re-signs everything.
Few Compelling Facts About Samsung Galaxy Tab S
Step 4 seems a bit glib... :)

It would follow straightforwardly if we knew that the largest rectangle in a circle is a square.

The easiest way I can think of right now to see this is by Lagrange optimization (which we could also apply just as well directly to the 3d problem): the area of a rectangle of width and height <x, y> has a gradient of <y, x>, which can only be normal to the circle (which has normal vector <x, y>) when x = y.

Another way is to think of <x, y> as proportional to <cos(t), sin(t)>; the area is then cos(t) * sin(t), which is proportional to sin(2t), and thus clearly maximized when x = y.