skysight-inc/HackerNews huggingface dataset:
You just have to suck it up and don't let it bother you as the majority of people are not really laughing at you. You may say something embarrassing like 'je suis chaud', which actually means you're horny and not feeling hot. That will get a chuckle out of people but the next time you will know to use avoir instead.

Another favourite of teachers is 'je suis fini'.
Not a bad strategy. Until the website owners take the path of least resistance between:

A. Reconfiguring their stack to use SSL.

B. Putting a Javascript-powered banner helpfully informing all Firefox users that their browser has a security flaw ("that's why that red icon is there") and they should follow the included hyperlinks to install the latest versions of Internet Explorer or Chrome and then delete Firefox from their systems.
It's legal here in Melbourne as long as the prostitution takes place within a registered brothel. This allows the police to do spot checks and confirm that things are above board, including health checks. Streetwalking is still illegal. It's still not perfect, for example, a trafficking ring was broken up a few years ago by the police, but it seems to have struck a happy balance.
Because no sensitive content is being transferred. Why put the extra hassle of getting and installing a non-self-signed certificate for a blog where the user doesn't even submit data? There's no reason for that connection to be secure.
There is one peculiar breed of feminist which one or two of my friends adhere to: prostitution isn't shameful. It's a normal profession, and that's fine. A prostitute is just a normal professional providing a service, like any other. People who patronise prostitutes, however... those people are disgusting scum.
Browsers completely stop the page from loading and show a full-page error for a certificate error. There's a huge difference between that and a small icon in the location bar. Plus, if the red icon that is suggested in that bug report is too loud, a less loud indicator could be used instead.

There's a lot more to designing a UI for this than just changing the icon. For example, when you type "foo.com" into the address bar, browsers generally default to "http://foo.com" instead of "https://foo.com." And, consequently, browsers tend to show "http://foo.com" as "foo.com" to suggest that you don't need to type the "http://" part. All of that needs to change to become a lot smarter in order for this type of idea to succeed. However, it doesn't seem completely unreasonable to consider making all those changes. In fact, I think these changes should be a high priority for browsers makers.

tl;dr: I suggest people brainstorm ways to improve upon the idea to make it workable, instead of trying to shoot it down.
This (a hiring funnel premised on teaching people stuff) works amazingly well. It is almost unfair how well it works.
I used to work in the lab adjacent to ken nealson... Another lab in the department was using this principle for waste water treatment. Stick electrodes in the water, draw current off of an enforced potential, and see what survives under this selective pressure. Turns out its a stable population that is fairly resistant to biotic and abiotic inputs... Just let the biology figure it out. The output water is really clean, too.
ag. I use this tool between 50 and 100 times a day.

https://github.com/ggreer/the_silver_searcher
What's important isn't a success or failure (in Lessig's "trial" election cycle or in 2016). I think his point is: people care enough about campaign finance reform to help raise $5m in a month.

If candidates knew this was something their constituents cared about, they might actually run on it.

Who cares if Lessig fails. We're finally talking about campaign finance.
I think Amazon's always done a pretty good job of rolling out new services, but this is a train wreck. About 3 minutes after I signed up for the free trial, I cancelled it. 99% of the books are the same type of low-quality, spammy nonsense that I was already getting free through Prime.

I was hoping for something along the lines of Safari Books, only with a much wider range of categories. As hard as it might be to imagine, the selection of books here is far far worse than Netflix's selection of movies. That's pretty fucking sad.
The number of people this clever or more doing good in the world is enormous, but their exploits largely go unnoticed and unheralded. Because things going well can often be difficult to differentiate from a non-event. Think about all of the sophisticated technology behind something as common as smartphone. Or, just think about the clever folks working on, say, the linux kernel. Other than Linus most of those people are not famous and a great many people who use linux every day don't even realize they are doing so or know anyone involved with the project, even Linus (such as android phone users, anyone who uses a website or service hosted on linux, people who use devices running linux in the firmware, etc.)
From what I read in the paper, it sounds like you _don't_ get paid for providing the data. You get paid for proving you have it when mining a block. Distributing your storage across multiples nodes would simply make it easier to "mine", but wouldn't get coins passively. That is, if I'm understanding the protocol correctly.
FWIW, ~33% of all pages are loaded over HTTPS already in Firefox, according to the metrics collected by the browser. And, over 50% of all HTTP requests (including subresources like images and scripts embedded on a page) are over HTTPS, again according to the usage data collected by the browser.
What I like about the reaction so far is that folks get what I'm going for, even with such a vague short description. I bet multiple engineering teams all starting from just the stuff published so far would come out not too far from each other. I think the Sibyl attack is blunted by the idea that this system is designed to bootstrap from face to face interactions.
I have used password managers for more than 4 years now.

Here is how I work -

1. When life used to be simple, (read without smartphone and tabs) I just used desktop based Roboform (NOT cloud based) These days most of the companies promote cloud syncing of passwords, I am completely averse to storing passwords on cloud even if it means bit of discomfort.

2. Now for iPhone and iPad, I downloaded Dashlane, activated their syncing feature for few hours and synced my passwords on both the devices.
Poker applications output your hand history to text files, which can then be imported into poker tracking applications for analysis. You can also buy hand histories online in bulks of millions.
You got it. Coins value is totally subjective. So even junk coins might be interesting in aggregate.
I'm aware of the fairy maybe you'd enjoy http://sacred-economics.com/sacred-economics-introduction/
The Mac OS text-to-speech tool is awesome for proofreading.

Another use for it is to be read blog posts to while doing the dishes and making coffee.
Anyone who plays online poker seriously uses a hand tracker. When you play online, each hand is saved as a .txt file. People have written software for it, its usually 40$-100$. Its usually a postgres database that allows for easy access to every hand, filterable by position, profit/loss, opponent, etc.

The two most popularly used are:
http://www.holdemmanager.com/
https://www.pokertracker.com/

There is a lot more to winning than just owning a HUD, it takes a lot of skill to manipulate statistics properly to observe weaknesses in your opponents.
The vim equivalent:

https://github.com/Lokaltog/vim-easymotion
When I was playing, there were programs that recorded hand histories. You could have the program display certain stats in a HUD at each table you were playing on.
The things I mentioned aren't just genetic - culture is also very heritable. So selection will work on that level, too.

The argument about homosexuality is similar to asking why amazon hunters keep getting killed by jaguars - you could "disprove" evolution by asking "why hasn't evolution just selected the ones resistant to jaguars?" But it's because getting as close to danger as possible is an effective strategy. That's one of the more reasonable genetic explanations for for why homosexuality still exists, too.
The way I understand it, Get'ing the data also publishes it to existing miners, so they can start storing it if it's a piece with a high reward value. The TTL is decreased by the Get operation, though. By understanding how valuable your data is you can choose a time to Put it again (while reward/TTL > market rate) with a new reward attached. Obviously that reward/TTL should be higher than the last one to buy you a bunch of safe Gets again.
While the dropper was written in PHP, it's important to keep in mind that Perl, Python or other language could just as easily have been used. If you're using a shared host that otherwise doesn't allow many configuration changes, you're very limited in what you can do to protect yourself.

If you use PHP, you can add the following to php.ini to mitigate risks like these (mitigate != bulletproof) :

; Mayhem dropper uses "system" so let's kill that and other dangerous functions
disable_functions = system,eval,curl_exec,curl_multi_exec,exec,passthru,shell_exec,show_source

If this breaks your software, your software is badly written.

Allowing write permissions in the script directory is always a dangerous thing. It's best to put the application files outside root and enable execute permissions only on the script directory. If uploading files is allowed, it should be to read/write enabled directories only. Execute permissions should be turned off.

The dropper tries to kill critical processes as mentioned so chrooting services individually is a good idea.

Or you could just use OpenBSD ;-)
> Because no sensitive content is being transferred.

You're answering "why" instead of answering "why not" again. "Why should you lock your door if you don't have anything expensive?"

Plaintext HTTP should not exist, then we wouldn't be having this discussion. I wouldn't have to come up with elaborate scenarios where having HTTPS from the get go would have saved lives, and you wouldn't have to come up with crazy "but that'll never happen" retort to them.

Unfortunately, plaintext HTTP exists, so here we are, with me telling you that the pro-gay rights piece you wrote on your static blog contains keywords that make it be viewed as extremism/terrorism by Russia's automated monitoring systems and anyone reading it gets immediately added to a watchlist. Unfortunately, a few of your readers are from russia and six months later those readers join a political protest against the killing of kittens or something. Their government notices that and makes sure to "take action". And to think HTTPS could have avoided that.
SPDY is completely orthogonal to the CA issue.
Regarding (B): A few years ago Mozilla did some user research that showed that a significant percentage of people do perceive the passive[1] negative security indicators as indicating a problem with Firefox instead of the web page. Thus, such a change does have to be done carefully. But, I think it is worth trying to find a way to do it that users can understand.

[1] Passive indicators are things like the red/broken lock icon. Active indicators the the things that stop the page load, like the "Stop! This is probably a phishing page!" error page. IIRC, users overwhelmingly appreciated the active indicators but tend to misunderstand the passive ones.
Ask HN: Is there an rss feed for “Ask HN”?
According to https://howsecureismypassword.net/, it would take A billion quinquagintillion years for a normal PC.

Not sure how reliable its calculations are.
The thing you're ignoring is that the easier and cheaper ways involve two people; and the trend among educated individuals in the US is that those people aren't tending to agree to have more children.

Cloning or alternative strategies leave it up to just one person - so no agreement or negotiation is necessary.
GW-BASIC in 89 or so. I don't think you could sleep. And I didn't have much of a concept of frame either. I just thought frames were arbitrary decisions in time to look at the exact state of the world and show it. Like, that you had a bunch of equations that told you where objects would be at any given time, and when they'd do something interesting (like collide). So naturally my little loop felt stupid and I figured once I went to high school or university they'd tell me what I was missing (hah!).

Had I known that everyone else was just making up approximations, and that a lot of things don't even have analytical solutions would have been nice to know.
That B strategy might have worked a few years back for grandmas that got Firefox installed by their geeky grandson, but Firefox is popular now. And people (geek or no geek) don't like being told the stuff they use is not good.

Here's an experiment you can do at home: Try telling an emacs user Vim is better.
Quirky does this for physical products. I'm not sure if that's what you were looking for but it's a pretty cool company with an interesting business model.

I'd personally love to see something like that for apps, but do see inherent problems with the model.
Shooting Hoax Texas-must see new evidence, you won't believe this
Yeah, the LED in the opto isn't even connected correctly. I doubt it would ever light up. I left a post on the website explaining how it should have been setup.
>Because no sensitive content is being transferred.

Define "sensitive".

If there is a network attack[0] then the metadata of who is viewing which pages on your blog is revealed. With TLS, only the client/server address pair is leaked.

[0] http://tools.ietf.org/html/rfc7258
The growth can be seen even if you remove outlier months (especially the bubble months Mar-May 2013.)

Even if you assume BitPay is lying by reporting peak days, it would still likely imply growth: higher peaks likely correlate with higher average volume.

When I say it does not matter whether today they are at 500k or 1M or 2M, I mean it does not matter because they were at 160k in March 2013, so any number above that demonstrates a growth.

CheapAir.com and Overstock recently said they see consistent sales: http://www.coindesk.com/cheapair-tops-1-5-million-in-total-b... Also Amagi Metals has always reported very consistent and growing Bitcoin sales. These are a few that come to mind right now.
Seems that subdomain is down.
I think we can keep it going for a while, as you say, by continuously absorbing defectors from more fertile populations. But I think if you admit to any genetic component to this at all, there will definitely be genetic flow, with the more fertile populations eventually taking over.

Being "reasonable" and "planning" are just extremely maladaptive in the current world. For example, reproduction in this population is completely dwarfing reproduction of highly educated, self-controlled, non-criminal groups: http://www.amazon.com/Promises-Can-Keep-Motherhood-Marriage/...
Valve's DotA2 Tournament Finals will be on ESPN
I don't normally vote articles up but this looks really cool.

It would be good if they had more info about their testing methodology and also something like a haproxy implementation.

Also I don't see any mention of failure if the arbiter falls over.
By combining a filecoin client with a bitcoin client, you could also run a decentralized filecoin-bitcoin exchange market.
Ah, I see the confusion. The power supply should be connected such that the positive terminal is on the left. If you look at the breadboard, you can see that this is, in fact, what's built. My description of the circuit's operation above is accurate when the power supply is properly connected.
Detailed imaging of Mount Rainier shows subduction zone in glorious detail
This is a very well reasoned point. Thank you for writing this.
Lasers work well for Projectors in terms of brightness, and Size. There are some downsides though since you don't get the same viewing angle that you do with standard projection.

The reflection off of the screen tends to bounce back almost as straight as it hit, where as a standard beam of light radiates more on the reflection.

My home theater which is about the same as a Movie theater with regard to the seat placement that is fine. You can't get to a spot in the room where you'd be at a 45 degree angle. But in many people's homes, or for outdoor projection in commercial settings it can be an issue.

Laser is also nice because you don't have to deal with focus. The Focus is fixed.

Where you do have issues with Lasers is color. Lasers are harder to get to match the Gamut, and harder still to manipulate to represent all the colors in 10 bit color, (10 bits x 4)

Lasers don't tend to burn out which is nice.

Laser projectors do have to be optimized for the size of the screen more than projection. With traditional projection the size of the pixel scales up. With Lasers the dot doesn't really get larger. This is fine if the projected dot is the right size, or some ratio of the right size.

Say a laser projects a dot, a pixel sort of, that is 1mm in size at a distance of 15 feet. at 1080p you would have no space between the dots if the projection was roughly 2 meters across.

Now you want to project something to the size of 4 meters across. With traditional projection you change the focal length or move the projector back and the dots get bigger.
With a laser you have to put 4 dots (2x2) to do this.

If you want a dot that is only 1.4 times the size you have to use 4 dots and over lap them.

The better Laser Projectors due this. They use up to 9 dots (3x3) and to where each Dot may only be 4 bits, using 9 dots you can fake more colors (3 red, 3 green 3 blue). Cheaper projectors use a technique similar to sub pixels and may use a Line rather than a dot (more like a Dash) for Red, and will have 7 dots 1 Red that is 3x the size, 3 Green, 3 blue.

In any case you have to have enough control over the laser to do the adjustments or you end up with gaps in the dots which are noticeable far more than the space between pixels that show up in DLP and LCD projectors.
Imperative thinking and the making of sandwiches
Maybe this is the kind of space-life metabolism we should be looking for?

Cue: Larry Niven's Outsiders, who live on the difference in electric potential between light and shadown.
What about renting booths at 5k/10k runs? Those attract large numbers of people interested in fitness. You could give away schwag with your logo/link on it. The booths that always seem most crowded are those that have food/refreshments so I'd work that in too.
Moonwalk One
You're vastly oversimplifying my argument, and reducing complex human interactions to economic platitudes.

Sex is not like every other human interaction. If you forced someone to answer phones for eight hours, it is unlikely they would be traumatized in the same way as if you raped them for eight hours. Its different.

Not every transaction between people in unequal economic circumstances is suspect, but we're not talking about every transaction. We're talking about something much more intimate and emotional. Such transactions are far more suspicious.
But using unwarranted hype to lure kids into anything doesn't feel right.
Asian languages have neither the English R (tongue curled backward in mouth, sides curled upward relative to mouth; "retroflex approximant") nor L (tongue straight, sides curled downward; "lateral alveolar approximant"). Rather, they have an R which is a combination of these (tongue straight, sides curled upward; "alveolar approximant"). Without a native sound to map these two distinct sounds to, it's easy to confuse them.

I've definitely seen foreigners confuse TH and T in writing. TH is very often pronounced (and therefore sometimes likely misremembered) as T. TH and T a more distinct than R and L however; TH is fricative (has duration), T is plosive (instantaneous).

What's more common is for foreigners to confuse our sundry vowels. I count at least 14 distinct sounds. Many foreign languages have only 5. But since we have only 5 written vowels, we notice less when a foreigner uses the wrong vowel (and brush it off more as an accent).

English speakers confuse u and ü in German; ㄱ (k), ㅋ (kh), and ㄲ (kk) in Korean (heck I know phonetics and I can't get these right); e and é, and gender in French (quick, where do the accents go in "resume"?). Chinese speakers confuse second-person pronouns in English. Japanese confuse green and blue. There are a ton more examples of such confusion; they're all due to our minds mapping information based on our native tongues.
It leaks data on what articles the user is reading. It also leaks data on their browser configuration. On top of that, an attacker could modify the content delivered from the blog to influence user actions. Either technically (like put a link to a child porn site to get the target's computer to make such a request and cache it), or socially (like changing the message of the blog to provide a bad recipe for a cake, or misleading info on a political candidate).
The Independence Referendum Is a Test of Scotland’s Confidence
> If this breaks your software, your software is badly written.

That's a silly blanket statment. There are times a system call is nessessary. Also there's a lot more ways to get system calls than you list, namely the deadly back tick operator, as well as process control just as a start.

Update: Also curl_exec? cUrl is how you do ANYTHING http more advanced than fetching with a few headers. Everything that accesses any sort of API in a serious manner will use cUrl.
Try: https://news.ycombinator.com/rss
Create a public link to your availability from google calendar and share it with people to decrease the time it takes to schedule meetings.
Sort of like what IE used to do the first time you submitted a form?

http://bmlinks-committee.jbmia.or.jp/eng/image/EnDlg03.gif
There is actually more to it. There are aspects of programming that are no different from procedures in mathematics even if the application area of the code is not 'mathematical'. As has been said in the comments [0], the process of debugging code is really not that different from solving/proving those Euclidean geometry exercises/riders we had in school. Now, the person debugging the code may not be explicitly conscious of this, but if the person is any good, he/she is using the same procedure: assume axioms; make hypothesis; prove or disprove using observations, deduction/induction; repeat till you have reached your goal.

[0] https://news.ycombinator.com/item?id=8055845
They should at least wait for DANE + DNSSEC, which is a tangible (and free) alternative to the CA system, even though it would still be quite a bit of effort.

I'd be curious to know how this would affect local servers in the intranet. Surely we wouldn't want to have to start issuing certs for everything inside the firewall as well?

I think this is a bit too shortsighted of a bug report. Anyways, since this is not an official proposal, I think it will just be closed as invalid by Mozilla.
I read and then rescanned as best I could, does the article actually bother to explain the infection process? How the code gets on the system?

Presumably I have to get this onto my system via some flaw for it to be executed.

I mean of course you can be a pain in the ass with limited access, I didn't realize that was up for debate. That's not that interesting as I see it. Actual vulnerabilities relating to holes these things can get through to get onto your system is what we need to be worried about.

The attack it self seems pretty run of the mill for shared hosting attacks as we had seen many of at my previous job, often infecting through old unpatched Wordpress installations, old copies of phpbb and plesk admins. Honestly I curse Wordpress to this day for the trouble it would cause us.