skysight-inc/HackerNews huggingface dataset:
It would be pretty easy to make the system work with private keys and signed headers or even client certificates. You could stop people from sharing by putting a high enough limit on how much you could access or even just from how many ips (ie only two distinct ips in any given 60 minute window) it could be access from. Normal users would never hit those limits, of course, but pretty quickly you would hit those if you shared your access tokens.
Continuous Integration and Delivery – Illustrated
Please don't use or implement this "work in progress", it is terrible.

For starters, the fundamental idea is backwards. People don't evade port enumeration to hide from attackers, they evade it to hide from auditors. Thinking that makes you safer is equivalent to assuming the world goes away when you close your eyes. The defenders need to find every hole, the attackers need to find one. If you want a secure (and functional!) network, you want to make network service discovery easier, not harder.

They even admit it themselves:

Thus, it is increasingly important to minimize the visible footprint
of services on Internet hosts, thereby reducing the attack surface.

They think reducing the visible footprint results in a reduction of the attack surface, that is, they think concealment is cover.

Secondly, the non-technical portions are extremely misleading, for example:

[A]dversaries may be able to observe all traffic of an Internet host
and perform man-in-the-middle attacks on traffic originating from
specific clients.

This is a quote from a proposal that does not work at all to conceal traffic from passive listeners, let alone man-in-the middle attackers. You still know exactly what services are running if you can listen in, you don't need to port scan! Furthermore, if you can see selective response to a sufficient (smallish) number of these ISN tokens, you can start trying to guess the secret. No advice on appropriate shared secret selection or necessary secret length to mitigate this is given -- they claim the secret is 1024 bits, but give a test vector much shorter than that.

PS: I'm pretty sure this breaks if you use DNAT
And it all becomes Kafkaesque and you can't get the bureaucracy to respond because '... it might reveal our methods and tactics in combating global terrorism.'
As someone who builds better forms, it's scary to think that I enable bureaucracy and information tracking to expand by making it less of a headache to fill out a form. But I come to grips with it, thinking, "well, if we're going to be tracked and managed, we may as well have nice interfaces and relevant information."
The site used to have a front page that clearly explained what it was all about. I assume that it will be restored along with the rest of the functionality on Saturday.
Also: Terrorist are not too concerned about mouseclicks ....
Yes, it is clear. The only groups which possess ICBMs are the governments of the USA, Russia, China, India, and possibly North Korea. None of these groups would be doing any planning on a whiteboard located in some random English apartment. Thus, the only clue you need to know that this is not a real plan is the fact that it involves ICBMs and it's on a whiteboard in a random English apartment.
Mathematicians still fight college building committees and IT people to get blackboards in newly-built classrooms. (Why IT people? Dust + classroom computer system/projector/etc.)
Prospective law students, some things to look forward to at many firms:
- Wannabe litigators, most of your cases will settle. You'll spend agonizing hours preparing and rarely see a courtroom battle. Your time will spent posturing for your client and opposing counsel, pandering to your client's aspirational fantasies of outcome, and dealing with internal office politics. When you do make it to Court inept Judges and unsympathetic clients will weigh on you.
- Transactional attorneys, your eyes will bleed from the thousands of pages of boilerplate text you're going be reading every day, and the copy & paste keys on your keyboard will be worn beyond recognition. The dissonance between helping clients manage risk (ghost chasing) and not screwing up their deals will be maddening.
- The pressure to bring in business can be crushing. You signed on to practice law, only to find out it soon becomes a sales, marketing and customer service gig.
Exactly. This is a problem of epistemology. There is a less fancy name for it: Theory of Knowledge.

For starters, bear these two sentences in mind whenever you find yourself asking whether something is true or false:

1. Knowledge is justified true belief.
2. "How do you know?"

Number 1 tells you upfront that knowledge is belief. But it's not just any kind of belief. It is belief that you can justify to be true. Note how we don't say "knowledge is truth" (because knowledge only holds for as long as it cannot be demonstrated to be false). There are, of course, different kinds of knowledge, which have different levels of justification. E.g. pure mathematics is a kind of knowledge with the highest level of justification because conjectures can be proven or disproven and there is no dispute (unless you make a mistake in your proof, but then peer review will catch your mistake, unless the peers have been drinking...)

Number 2 is just an easier formulation of number 1. You use this question recursively until you start to feel you are being absurd or silly. E.g. Tommy told me he saw a police shoot Michael Brown. How do I know this is true? Because Tommy is trustworthy. How do I know Tommy is trustworthy? Because Tommy is my friend and would never lie to me. How do I know Tommy would never lie to me? Because I have known him for X years and everything he has said in the past have turned out to be largely true. Etc. ad nauseum.

If you happen to know anybody doing or having done the IB diploma, you can ask them about ToK (Theory of Knowledge), because ToK is a required subject in the IB diploma. They may put on a smug smile for a few seconds and start talking. (I did IB diploma myself.) In fact you'll give them good practice to get better at ToK.
Didn't tent.io try this?
:( Why not?
IANAL, but The Tetris Company seems to have had legal successes in the area of copyrighting mechanics.
Ask HN: Ideas for small web apps that are good for learning?
Hi Everyone,

I'm in a dev bootcamp a the moment and obviously at the end they want us to take on a project to build in ~2 weeks to demonstrate what was learned.

I want to take the opportunity to take on a project that will A) be a good looking demonstration of what I learned and B) be a good learning opportunity (building something that I may work on the future).

Any thoughts or ideas? I did some searches but I cant find too much that would be doable within 2 weeks or so. I think a single page web app would be ideal.

For information I'm learning RoR at the moment
Possibly not, although it's far from clear: http://en.wikipedia.org/wiki/Dead_Hand_(nuclear_war)
A Blockchain-based DNS and HTTP server
Instead of complaining about Facebook and their ads, use it as a competitive advantage in your life. And by use it, I mean don't use it.

Just as gambling is a tax on the ignorant, Facebook is a tax on the bored and undisciplined.

If you can use Facebook even half as much as the average person, you'll have a huge productivity and happiness advantage.
It's because even ITER produces radioactive waste, and the greens are only interested in clean energy. In their view, with hydro, geothermal, wind and solar we have all the clean energy sources we need, if people cut back their energy consumption. That is, ofcourse, a big if.
If you want to talk about private companies already conducting appalling and creepy levels of tracking, look no further than downtown Palo Alto - Palantir has got you covered.
There's a book, Design for Hackers: http://www.amazon.co.uk/Design-Hackers-Reverse-Engineering-B...

The author also produced a free 12 week email course: http://designforhackers.com/
Dust from beyond our solar system fell to Earth from space probe
The extreme example of "everyone in the chain" buying into an extreme form of this thinking came in the form of the "1% doctrine" articulated by then-Vice President Dick Cheney: "If there's a 1% chance that Pakistani scientists are helping al-Qaeda build or develop a nuclear weapon, we have to treat it as a certainty in terms of our response. It's not about our analysis ... It's about our response."
Betteridge's Law of Headlines

"Any headline which ends in a question mark can be answered by the word no."

https://en.wikipedia.org/wiki/Betteridge's_law_of_headlines
Creating a Flexible Development Team
Tumblr iOS Architecture
I don't think it does right now, but it should be pretty easy to add this kind of support.
>> an attenuation more than adequate to prevent the cell phone from working, is not nearly enough to assure a person's safety

> On the contrary, if the shielding is ineffective to stop even the cell phone from working, can it be concluded that it definitely won't stop the 2.4GHz radiation. Hence there's a radiation leak.

"On the contrary"? You ended up agreeing with me.

> To answer my own comment, quoting from the source : "Traps and seals that work well at 2.45 GHz might not work so well at lower frequencies.

The converse is also true. Depending on shield design, a shielding scheme meant for one frequency may not work at all well on another.

My original claim was that the cell phone test is no assurance of microwave oven safety, for multiple reasons.
So were not actually evicted.
I highly doubt it. Why would they? It doesn't change who wins an NBA game.
Interesting that wars of aggression have almost never been profitable; this fills a hole in my understanding. I've always understood that this fact only became obvious after WWII, and almost 10 years of terribly destructive fighting in Europe and elsewhere.
Markdown to Responsive HTML Email
How Secure is Your Security Badge?
Learning to design well is like learning to code well: You do it a lot until you improve. Examine "good" designs, thoroughly. Keep notes of sites or apps you find attractive, and try to find out why. Emulate those things.

Also, read some actual design theory books. Theory is to design what algorithms are to code.
That's a very very good book, although what he is probably asking for is a programming language :)
All horses are of the same color.

By induction, suppose there are only n=1 horses. Obviously they are all the same color.

Suppose we had proven the statement up to n. For every n+1 horses, the first n horses must be the same color. The last n horses too, must have the same color. Clearly all of them have the same color. QED.
Here's my path (~30 years worth).

high school:

basic
6502 assembly
a little FORTRAN
a little pascal, but didn't understand it

mit:

scheme (sicp omfg)
symbolics lisp
common lisp
clu
pdp-10 assembly
connection machine
a little C
a little more FORTRAN

grad school / 90's:

a lot of C (system programming / unix kernel hacking)
Obj-C / NeXTStep (reappears later as OSX / iOS platform)
MIPS assembly (branch delay slots ftw)
x86 assembly (segment registers wtf)
ALPHA assembly
a little C++, but hated every minute of it
Visual Basic

dotcom years to present:

Java
C#
SQL (Oracle, Sybase, MSSQL, DB2, MySQL, etc)
Python (scheme without parens!)
ETL platforms (visual programming environments for data manipulation)
PHP
Obj-C / iOS (oh hi, you're back)
Groovy / Grails
a little Ruby / Rails

I'm a little weird because I did a lot of Lisp early, and then became an OS hacker. Once you can find single-line errors in assembly code, everything else is easy.

I learned a lot doing C and assembly; especially the importance of working clean, checking results, and being careful with pointers. Lisp teaches you how good the world can be; C and assembly teach you how to cope with how bad it really gets. However, I'm not sure I would recommend a new person to spend as much time on this since the world has moved to languages with garbage-collected heap storage.

I never cared for the functional languages (ML, etc), mostly because I found the functional programming zealots to be such insufferable bores.

If I were starting today, I would start with Java or Ruby, since they are modern OO languages with good deployment options. Once you know these, it's easier to "downgrade" to simpler languages like Python, PHP, and JS.

But the real takeaway is that you should learn them all.
I'd be livid if something like this happened. I think it's worth this chap getting the details of the police report, and speaking to someone on the force directly. He needs to be assured that he won't end up on any "lists".

I'm not sure whether he has any legal recourse over this. I doubt it, but he has potentially been materially disadvantaged (if indeed, it goes "up the chain" and he finds visas being denied).

At the very least, he needs to enumerate to his landlord the various ways in which this could seriously affect him, and ask for a rent reduction.
5 Early Warning Signs When Dating: Looking for Ms. Lovejoy
None of the videos work, and most of the images are broken.

Both of those things are kinda important in an article about graphics programming
It was a book with a good design, although it didn't help me learn much about design. The references were useful, but I would have liked to be a step-by-step guide (similar to Drawing on the right side of the brain, but for design) instead of a showcase of 'good' design and some side note tips.
I actually like Ruby's limited and verbose meta-programming. It's just painful enough that when I get the urge to reach for it, I think just that much harder about ways to go about what I'm trying to do without it.

And the methods themselves, while verbose and clumsy, are actually fairly transparent and intention-revealing. I understood perfectly what the article author was trying to do and why.

Ruby is expressive enough that you usually don't need it, and when you do need it, the stark stylistic difference between the normal methods and the meta-programming code feels safe and comforting. You see `define_method` or `Class.new` and your brain instantly reads it as magic and start wondering what the hell caused the programmer to start delving into the hard stuff.

You almost never see meta-programming in Ruby where it wasn't needed, and it's almost always limited to solving one or two problems.

In my own brief foray into C#, it wasn't long before I found a problem that, when brought to a more experienced coworker, he solved with reflection. I couldn't remember the details, but I knew that had I had to solve it in Ruby, I'd never need anything like that.
I don't have any Spotify playlists for you, but personally, I always listen to metal. It puts me in a productive mood and allows me to block out all other distractions.

Sometimes I listen to Bandit Rock (http://www.bandit.se).

Disclaimer: I also listen to metal most the time when I'm not programming. :-)
> The trouble is that it encourages the kind of "critical thinking" that we often see regarding, say, GMOs and nuclear energy

Let's be fair here:

1. Companies like Montsano aren't exactly doing wonders for the 'face' of GMOs.

2. Nuclear energy could be made safe, but many of the reactor designs that people tout have not been proven, and they also don't take into account the human factor. Much of what happened in Fukushima can be chalked up to the human factor. I think that it's disingenuous to only talk about nuclear power from the technical side without considering lax oversight on the human factor.

3. I think that there is a very real fear that as the barriers to entry come down on 'garage' genetic modification, we could see someone accidentally (or purposely) create a deadly disease in their garage.
Titan Distributed Graph Database 0.5.0
The problem with C is that it fills a way smaller niche than, say, python or java. It's an amazing language, and I feel that every developer should know the basics about it, but OP is probably looking more for a practical language than C.
> The US or Russia clearly have enough resources to either dig through technically or simply threaten to murder those who don't cooperate.

A government is not going to threaten to murder folks for not turning over some financials. I think you've been reading too much Tom Clancy.
Lawmaker drafting bill to demilitarize local police
> but an attempt to remove them as a target for hacking in the first place.

This is very short sighted. As long as you have a popular site you're a target for defacement. And the convenience expense is enormous. As others have mentioned oauth or a twitter or facebook login alternative would have been a sane choice, what they've decided wasn't sane, it's embarrassing for them and frustrating for users who trusted the site.

Inconveniencing users to this degree is probably causing the hackers to laugh, this is in effect a huge win for them they can go brag about now in addition to accessing sensitive information.
90% of success in any business is marketing. That drops to 40% in a heavily regulated industry, with the other 50% being who you know.

Holmes is really smart for connecting with the right people early. Every account I've read of the woman is that she is incredibly smart and a relentlessly hard worker. Chances are she was able to impress a number of powerful people who backed her early, and she has been able to build a functional company (no small feat in itself) that is attempting to disrupt the medical testing industry.

A large part of successful disruption in heavily regulated industries is building a popular brand. Uber and Square are perfect examples of this: regulatory agencies are willing to bend over backwards to accommodate them in ways that they have never done. A large part of this is their popularity. I'm guessing that's why we're hearing so much about Theranos -- this is an industry that's largely hidden from the public eye, and she feels the best chance to disrupt the industry is if it's brought into the spotlight with Theranos at the forefront.

It could all be marketing fluff, but it's likely to be effective.
Sworm: A write-only ORM for Node.js
Licenses/contracts are quite popular in place of ASTs in student/shared/bed sit accommodation.

Even in housing association properties, you can have a 2 year "trial" period.

You only have to lightly scratch below the surface these days to find rights eroded left and right.

EDIT: I said "in place of ASTs", but ASTs aren't always appropriate.
Whenever you start something new that is supposed to have prestige, you will always run into the same problems that you have when trying to build both sides of a market. In this case I think they would benefit from artificially restricting supply in order to raise entry barriers to highest performers.

I think it is key also to stack the deck from the beginning with prestigious people already affiliated with high status institutions who others want to be associated with but who are also high status on their own - that means scavenging from the institutions which are already high status.

Seems like Minerva has been able to do that successfully already.
Oh man. That second sentence.
Good recommendations, I think.

Thank god you didn't recommend Perl or PHP.

shivers
The priori of a dude planning an ICBM attack on whiteboard in an apt is so low that unless you have very very strong evidences that it exists (and words by random people without photos certainly don't count as one), for all practical purposes, it isn't true.

And I sincerely do hope that if such a plan truly exists somewhere, the power that be have better evidences/ discovery than being informed by letting agents.
Cutspel has a lot of problems.

> "...but the “ll” in holly is kept"

I count the same number of "L" sounds on "holly" as there are in "holy", namely, one.

> Cut unstressed vowels before l,m,n,r

So is it "betr" or "bettr"? And does that mean "better" or "bettor"?

Why is "ho" "who" and not "hoe"?

Why is "preferences" "prefrnces" instead of "prefrncs"?

Does "knight" become "night" or "nit"?

Your example text doesn't follow the rules. It spells "onwards" as "onwards" when by the above rule it should be "onwrds".

Those are just a few examples I found on a cursory inspection.
I'm doing work with a drug testing company, that generates a lot of stuff you wouldn't want taken out of context. This kind of stuff: "How's the meth goin?" - "Oh great. We're getting loads this week" "And the Steroids" - " Ah, not so well. Bob's lab is running behind, they're really busy"
What do you need to know to become a UX designer?
"I'm a little weird because I did a lot of Lisp early, and then became an OS hacker."

+1 for introspection! (Or do programmers call that reflection?)
Not exactly music, but sometimes I listen to SleepResearch_Facility which is ambient/environmental noise (but more interesting than the environmental noise I get naturally)
If they had tolls and paywalls everywhere, do you think they still wouldn't track you to profile your interests for advertisers anyway? Your privacy is gone in either case. At least in this case you don't have to pay.
Reporters Without Borders Uses Perverse Censorship To Defend Freedom Of Speech
A Week Of Docker
I am still far far from being anything someone would consider a designer, but I got a lot out of http://bootstrappingdesign.com/ - it focused enough on actionable things that it was pretty much read + implement to get going.
IMHO, if students want to get connected, they should be getting involved in their local tech community (i.e. the non-academic one). There are loads of regular, tech-focused events here in London, such as our own Hacker News London meetup[1] and MiniBar[2]. If you're interested in jobs, Silicon Milkroundabout[3] and AppsJunction[4]. If you're just interested in socialising over a few beers, there's Silicon Drinkabout every Friday evening.

Those are just a few of the regular events - there's loads of others. Startup Digest[6] is a good way of finding out about them.

1: www.meetup.com/HNLondon

2: www.meetup.com/minibar

3: www.siliconmilkroundabout.com/

4: www.meetup.com/AppsJunction-Where-Startups-Meet-Developers

5: silicondrinkabout.com

6: www.startupdigest.com/digests/london
Processor Independence is coming with a revolutionary new dev kit on Kickstarter
Web Trolls Winning As Incivility Increases
This is exactly what happened in the Twitter Joke Trial:

"The airport management considered the message to be "not credible" as a threat, but contacted the police anyway."

They ended up finding something unrelated to actually protecting the public from a terrorist threat that they thought would stick after it got escalated to the point where they couldn't back down. This led to a conviction (eventually overturned on appeal).

http://en.wikipedia.org/wiki/Twitter_Joke_Trial#Background
The only thing missing from those photos was a telephone and and old school desktop modem.[1]

[1] http://pc-museum.com/046-imsai8080/wargames-02.jpg
Neal Stephenson identified this same issue, and created Project Hieroglyph as his solution. They're about to release their first anthology of optimistic, progressive sci-fi short stories this fall. http://en.wikipedia.org/wiki/Project_Hieroglyph
MEET JULIAN ASSANGE AT THE EMBASSY,and he'll check your computer for NSA'ware
This is really awesome. Great work! If you turned this into a Chrome extension that allowed to write emails in GMail, I would use it for sure!
20 Brilliant Examples of Minimal Portfolio Designs
This seems relevant:

https://www.youtube.com/watch?v=6wXkI4t7nuc

Title is "Dont Talk to Police" from 2008. Henry Smith should probably watch it.
He's just making a Visual BASIC GUI for the terrorist attack[1].

[1] https://www.youtube.com/watch?v=hkDD03yeLnU
The Quality of Code: Avoiding the Rewrite
Master iOS Design is a free resource that covers the theories and principles of design and then how they are actually applied in design. First couple of sections should be valuable to anybody interested in design:

https://www.drawar.com/ios/course/design
What I Learned In My First Year as a Product Designer
Fear of AI is widespread: http://www.thinkartificial.org/web/the-fear-of-intelligent-m...