skysight-inc/HackerNews huggingface dataset:
This is purely guessing, but checking regular images (right size, format, ...) will be the "day-to-day" business of looking after a website. And more often than not the administrator will therefore "Open image in new tab..." and become aware of an incorrect image path.

The Captchas, on the other hand, might have been using an existing software. Remember: These captcha images will have to be autogenerated by a script which, as a convenience to the user, might have used some kind of mechanism to determine "fully qualified" URLs. And this had slipped below the radar, as it's a feature used much less often, and hence likely to receive much less scrutiny.

I think it's pretty likely that these kinds of information leaks can happen when you deal with a larger codebase or system. Hence following the advice of some other HN users, who recommend a strictly firewalled system for this kind of use-case, looks like a prudent thing to do.
Cut prices on a finite and polluting resource. No, not really less frighting.

Also a reminder that the term "visionary" is very relative to your horizon.
that's a cool thread, and a cool website to discover. Thank you.
It depends. OCaml is great for compilers, but having the compiler of a language in that same language lowers the barrier of entry for contributors and could lead to more innovation down the road.
Actually, Apache already supports deployments with more than one certificate for the same host: http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcertifi...
My last Year Moto G model had around 13.2 GB available space
Millions of people are just visitors to NY, and tourists (like me) visit irregularly enough to not keep that card between visits. They will not expect the vending machine to give you an amount that does not divide evenly in rides, because that is not how these machines typically behave.

I think it's fair to call that a dark pattern, especially for a public service, it is simply a hidden tax for tourists.
Kickstarting a contentful ruby application
Any reason not to by an original Moto G (I presume prices are falling)? Stuck with an old version of Android I guess?
I honestly don't notice anything wrong with a 720p screen at that size. Sure it may not be retina, but I don't care as long as my battery lasts all day (it does and into the next day).

Being able to pass out at a strange house and not have to worry about my cellphone in the morning is freeing.
> A warrant entitles you to search a specific place for a specific thing.

Not all warrants are the same, but I've seen them do a lot of damage (broken-down doors, torn up mattresses, general mayhem) in the course of executing a warrant. This seems in spirit with that.
It would be interesting to see what could be done with large scale combinational logic (ie. boolean circuits).

If you didn't have to worry about clock signals, had a simple circuit topology (for example laminar) and thermal issues were minimal because of having a small number of gates transitioning at any one time could you design a programmable logic chip that was more competitive with ASICS than current FPGAs are ?
I have never understood this (admittedly common) mindset. if writing a compiler does not play to your language's core strengths, what have you gained by insisting on bootstrapping it? you might argue that writing a compiler provides a good stress test of the language and stdlib, but so would identifying a large project that does play to its strengths, and developing it in parallel with the language.

and contrariwise, bootstrapping a compiler might even be a net negative, not just because you have passed up on the chance to use a language that is better suited to the task, but because you have complicated your build process, created potential morasses when you have bugs with both your language design and your compiler implementation and you can't fix them separately, and are implicitly prioritising those features of your design and implementation that are useful for writing compilers, even though that might not be a very large use case for it at all.

in the days where people were building up from assembly, bootstrapping compilers made a lot of sense. but now that there are existing, well established languages that have proven their value in the specialised problem domain, it makes no sense to ignore them and insist on bootstrapping for its own sake.
The Future Library: Margaret Atwood plans to print her new book in 2114
Afaik outgoing port 25 (ie smtp) is blocked in large portion of residential connections. And it is a very good thing in the current state of affairs.
After you quit, you can absolutely compete with them. The only issue around "owning the idea" is with regards to patents. Having personally gone through this, it is hard (perhaps impossible) for them to claim patent assignment on a patentable idea that hasn't already been filed with the patent office before your end date. Once you leave the company, preparing the patent application would be work which you can not be forced to do. They also can't file since they weren't the inventors.
The discussion here is already quite long so maybe I missed it, but I don't see anyone asking (or answering) the first question that came to me while reading the linked email:

Why is the cost of end-to-end crypto never taken into account?

I just can't believe that we have reached a point where it is possible to cheaply mass mail the way spammers do if you need to encrypt each email for each recipient. That alone should be disuasive enough, at least that's always what I thought. If I'm right, all the discussion about the need for client to extract features from emails and send them to a necessarily trusted centralized third party is useless. But I may be missing something, where am I wrong?
Having also worked there, I can confirm. How little most managers and executives know and understand about the systems they own can be quite shocking. Their sole focus seems to be playing office politics to get more funding assigned to their projects.
I would be most interested in how you manage failover, sentinels are probably the worst failover mechanism I've used in a long time.
I work alongside a group of engineers responsible for HDD testing, failure analysis and firmware development. One of their tools of the trade is an old radio shack telephone amplifier with a magnetic suction cup pickup. Using this unit, the engineers listen to the noise coming from the HDD electronics and motors and can identify firmware versions, drive states (like heads parking) and posible timing issues - I often hear discussions like 'this drive must have the r3 firmware mod as the cache preload kicked in slightly later' and 'sounds like this unit has a manufacturer x motor'
Looks good! Seems to have a strong treatment of algebraic codes and coding bounds.

For those interested in reading, you'll probably want some background in linear algebra. All the necessary definitions are included in the text, but it doesn't go deep enough to make the reader 'comfortable' with linear algebra. Some background in abstract algebra will help too, but isn't as necessary.
Thank you very very much for correcting me, I learned something new today. Also, thank you for the focusing screen link, I may even consider buying one for my Canon DSLR.
One thing nice about E2E crypto in messaging is that it implies strong identities, which most importantly allow building whitelists with high level of confidence. And of course if we can make those identities costly to acquire/burn, either by proof-of-work or even just with a CA model, that alone should cut spam significantly.
Because the US possesses the world's largest total capital market, and the US stock market is at an all-time high.

In short, because they can raise maximum money from the IPO.
why oh why do I keep falling for wired linkbait. I didn't learn this from a mathmatician, the pizza just sluffed in my had the right way one time and it stayed.
Ebola: How bad can it get?
By the way, this is more or less what Dr. Ellie Arroway (Jodie Foster's character) was doing in Contact. People often assume that it was an error, because "radio telescopes don't produce sound", but anything produces sound if you process it right.
> Enterprise sales will get just a notch tougher real quick.

For Oracle, or in general?

In an ideal world, if Oregon prevail, and if the message was delivered to every vendor whose salespeople blatantly (and knowingly) lie in order to win business, then Enterprise Sales would get considerably easier for those salespeople who prefer to sell based on substantiated fact.

Purchasing would also get easier for organisations trying to sort the wheat from the chaff in RFP responses.

Sadly I think this is unlikely to ever happen, regardless of the outcome. The message is unlikely to spread, and even if it were to, some (many?) enterprise software and hardware vendors have a sales culture that will not easily be changed. Oracle amongst them.
Just how far away is the Pleiades?
> IMO Docker + etcd is a far more sane configuration than endless Ruby Chef scripts, or worse, Amazon OpsWorks.

For what use case? Doesn't using Docker for everything take you into 'golden master image' dead-ends, as outlined by the Opscode guys in comments to a Docker blog post last year [1].

What Lamont and Joshua had to say in that thread resonated, but I haven't really looked into DevOps approaches with Docker.

I'm also not sure what you mean by 'endless Ruby Chef scripts'?

[1] http://blog.relateiq.com/why-docker-why-not-chef/#comment-43...
Micro Service Composition
Concur, but 90s/00s aesthetics is rebounding back in the fashion cycle. The new design taste can be palpable to the prime demo, teens.
Follow me on Facebook and learn affiliate marketing
1 inch too big for me.
The data is misleading because it's much easier to identify the good venture funds and they perform much better than pretty much any other investment class (ie, Sequoia, Andreesen, Accel, Benchmark, Founders, etc.). Also, venture, unlike pretty much every other investment category actually can influence its portfolio and in a variety of ways.
> Tor should run in a VM or container

Tails: https://tails.boum.org/
Hmm...

http://www.ehackingnews.com/2013/08/almost-half-of-tor-sites...

http://www.wired.com/2013/09/freedom-hosting-fbi/

Somehow "fiddling with inputs" and "noticing an IP", while innocently phrased, sounds unlikely. It's just so hard to know whether this is parallel construction. The FBI's history with false testimony (i.e. COINTELPRO) is more than damning.

The 'not in the US, not subject to US law' is a common trick, and also a way both that the NSA skirts laws about monitoring US citizens (Snowden's leaked documents repeated showed how partners with the NSA regularly traded bulk information on US communications for their own), how the CIA and FBI are able to stop Americans and journalists abroad and how intelligence agencies can propagandize its own citizens while retaining plausible deniability.

The CIA is authorized to, and in fact in the past decade and a half heavily decided to, plant stories to international media wire drops that US journalists subscribe and use as a source of information. The CIA also works with partners overseas and private enterprises to engineer foreign stories that the US media will also follow and use for reports (Lincohn Group, Zarqawi PsyOp, etc). Inevitably some of the material released to the Voice of America and other international propaganda outlets make it back to the US Media.

Furthermore information is now able to be targeted in very sophisticated ways (i.e. MINERVA, USAID Cuba Twitter program) for the spread of ideas and support (or dissidence) via 'social contagions', all without ever having to directly propagandize any citizens. These sorts of programs are the ultimate and extreme irony of the Soft Power philosophy.

I find it unfortunate that the Constitution grants rights restricting search and seizure (and others) but that our representation does not recognize these rights, broadly 'de facto' recognize, as rights worth enforcing outside a strictly domestic interpretation. Are these "rights" or "Rights" if our representation allows and even encourages others to infringe on them?
A quick review showed a lack of : Reflections on Trusting Trust
Ken Thompson ( http://cm.bell-labs.com/who/ken/trust.html )

Any list without it, is a list without it.
How is buying 'organic' going to help living conditions?
Outside of maybe Fortran and Cobol I can't think of anything that was A)alive enough to be killed B)killed by ossification.
But insider deals are a key part of venture.
TransIP offers VPS with SSD at comparable prices to DO, and more disk space. It's also not an US company, if that makes any difference. No affiliation, just a happy customer.

Regarding blacklists, I run my outbound email through Mandrill. I know it cuts down on the privacy aspect, but I send very few emails anyway compared to what I receive.
Tags deprecated in HTML5
A dying mobile web desperately seeking attention. Going after small guys. Try doing this to Kanye!

It is during times like this that creators, makers are driven to defenses like patents.
As linked, AH's first fund had an IRR in the 30% range for 3 years which blows away pretty much every other asset class. I'm sure Accel, Founders, Sequoia, Benchmark, etc are doing even better.

You can't look at venture averages because the best firms are easy to identify and perform much better than average.
Many people become resellers in order to buy product for themselves and friends at a discounted price. This trend is rampant in the car-modification and hotrod cultures of the United States.

Perhaps without a shop they are suspicious of your intentions.
Must see if you are Google User
Docker: the ultimate deployment tool, or just another tech fad?
I run personal email server with postfix + dovecot and was thinking about replacing SA with something custom written in php. I would love to see what you have written.
I don't think the geography is the best parameter. Think of it this way: if something was contrarian in all other aspects, would you prefer it in the Valley or outside? Can you say that about other parameters?
> What happens if (for instance) a 4 node cluster splits into 2 node clusters (I.E. a network fault between two data centers)- does each cluster choose a leader?

No majority is possible here.

> how are is "majority" calculated?

The definition of majority is greater than half the set (that is the meaning of the word). If you have four members, 3 is the lowest such number that is greater than 4 / 2.
The essence of your legal theory is that "There is no provision in the constitution for the federal government to regulate money exchange."

I guess it can be argued that the Section 8 clauses 5 and 6 do not grant the Federal Government the power to regulate the exchange of money.

Nevertheless, the currently accepted interpretation of the Commerce Clause pretty much settles the question [1].

[1] http://en.wikipedia.org/wiki/Commerce_Clause#The_Rehnquist_C...
And from reading some books discussing Andreessen & his past ventures I wouldn't have thought he'd have considered Snowden anything other than a +ve force in the information world.

Perhaps Andreessen has interests in companies that were hoping to help governments spy on their charges?
I'm new in that market. Is it generally so that the phones are locked to a particular version of Android and don't get updates?
>a narrow necked container?

You mean, like .. a pencil you can turn upside down, attach a lens to, and it'll make a steamy cup of tea for you?

Sign me up!

I bet they can solve the salt problem with some kind of pulp-based filter wrapping around the graphite-corn solar layer which, when it too dries out, allows salt crystals to fall .. or at least, there's gotta be a third cheap material to add to the mix which would assist salt extraction by osmosis, or whatever ..
Can someone explain botguard? I'm not sure I get it.
This is a neat experiment but how important to the concept is it that these named areas are circular? I'm thinking that it'd be illogical to lose naming of streets because that's exactly how our physical world is laid out - but you can't accurately do that with circles.
> Personally, I don't use mobile devices - neither phones nor laptops - for compute-heavy operations. Everything from compilation to video transcoding takes way longer than on a decent desktop. Phones are not close to threatening that yet, not by a long shot.

One option is to run compute-heavy stuff on a networked server, which you SSH into from a lightweight phone/tablet/Chromebook. I can definitely see myself working like that, if I could get a phone or tablet with a docking station.
> A Raft cluster must have an odd number of nodes.

Why must a Raft cluster have an odd number of nodes?

> > how are is "majority" calculated?

> ceil(nodes/2).

A majority is defined as having greater than half the votes. I.e., you need nodes / 2 + ((nodes + 1) % 2) votes, or more simply votes > nodes / 2. Even in an even-sized cluster that can only hold true for one node, and not cause splits.
Even at a reduced rate, end to end crypto means spammers will have a much higher success rate since they don't have to fight a centralized spam system with global knowledge. This more than makes up for the extra time to encrypt a message.
IBC2014 Premiere for High Frame Rate 8k Television from NHK
What's crazy about that? He drove perfectly fine for a taxi.
literally every investment would be a Ponzi scheme.

Only the ones that you only expect to turn a dime on by finding a bigger fool to buy it from you. If the investment is something that returns money to you (for example, dividends), you're not expecting to make money by selling it for more. You're expecting to make money because you own a small piece of a business that makes money for its shareholders. I have a number of investments that I expect I will never sell (or at least, am not hoping to sell for more that I paid for it); I'm very happy just being given a nice share of the profits every year.

These investments do not require anyone else to buy in, ever; hardly a Ponzi scheme.
Digicert offers SHA2 certificates. It's the default option IIRC. This only applies to end entity certificates, mind you.
Well go and try a hostile take over of amazon where you purchase 100% of the stocks for $1. Given it's worth $0, $1 is infinitely more than they are expecting.

Or admit that your point is absurd.
Finland’s Lesson for Ukraine
> The right choice was to have taken stock, which would have made you fabulously wealthy. If you were any good at the oil business at all, he would also offer you a job, which again would have eventually made you very very rich. He had an insatiable hunger for quality staff. It was never a good idea to bet against Rockefeller.

That was eerily reminiscent for me, too.
I'm really hoping that functional languages will evolve in a way that they become more readable at a glance.
Encryption is pretty darn cheap in cpu cost. And they have botnets to do it for them.
Oh, common! Where's your spirit of scientific discovery? Next thing you say you never microwaved a burning match to get the plasma sparks :)
August and Week of Sept 1 Top 10s on DevOps, PaaS, Monitoring, Docker
These classifications are amazing but the fact that the first image in the article is classified as "a dog wearing a wide-brimmed hat" and not as "a chihuahua wearing a sombrero" is telling of how far we are from true understanding of images.

Only a human possessed with the relevant cultural stereotypes (chihuahua implies Mexican, ergo, the hat must be a sombrero) could make that conclusion.

Even so, I firmly believe that at this rate of improvement, we're not far from that kind of deep understanding.
I'm interested in how you lose as a seller as I've never been able to claw back any of the fradulent sales that I've bought from.
I'm not spindritf, but I am thinking of BuyVM: http://buyvm.net/
So fiddling with a website to obtain information not intended for you is legal now? Because if that's so then awesome. Tell Weev's lawyers.
No they couldn't, because attacking a site's existing certificate in that way would require a preimage attack for SHA-1 which is much harder to achieve than a collision and unlikely to be feasable in the near future. In order to achieve a collision the attacker needs to control the contents of both certificates, which means they have to do all the computation and then somehow get a CA to issue a certificate with the exact contents they need. (This shouldn't be possible - after the MD5 attack a few years ago, CAs are expected to to take countermeasures to ensure an attacker doesn't have this level of control.)
oh, so a warrant is a free pass to do whatever you want?

apparently "no-knock" warrants that get issued like mints at a dance allow SWAT teams to flashbang a baby and no one faces criminal negligence charges.

I guess regular warrants will let law enforcement really make us grab our ankles and do whatever they want to us.

SR being a drug marketplace and AT&T "not being a drug marketplace" are irrelevent. Law enforcement is tasked with the EXACT SAME LAWS AS EVERYONE ELSE.

Apparently you like to confuse law and justice with "who's got which legislatures on their payroll and can put people down for accessing their stuff without permission"
Universal Social Rules Underlie Languages
Oh, I didn't mean it was hubristic being the compliance officer! I meant shoveling all the BTC around while knowing he didn't have even a figleaf of deniability (eg blaming an internal miscommunication with someone else who was in charge of compliance). He had to know it was enormously risky.
Real Estate Agent Fred Newton
SEEKING WORK - remote / Berlin

I'm a front-leaning, full-stack developer that has recently moved to back to Berlin after spending a few months in Asia. I am American, and know just a bit of German (but am learning).

I have experience with every aspect of creating an application, from mockups and UX design, to graphic design, to the full-stack implementation, to deployment. I've successfully built and sold a past start-up of mine, and have a great deal of insight with product development. Because of this, I'm probably of most value the earlier a project is in its life cycle.

Backend stack: Ruby on Rails, with DBs/data stores such as MySQL, Postgres, Mongo, and Redis. I've also worked a bunch with Elastic Search. I can also use Node.js or PHP for the right project, but lately I've been doubling down on being a backend mono-glot.

Frontend stack: my preference is React.js, though I've done a ton of work with Angular.js and Meteor (and some Backbone). I am well-versed in current best practices, can build responsive mobile-friendly websites, and code pixel perfect CSS and HTML5. I have a great deal of graphic design experience and can help there as well.

Portfolio: http://eatingthe.com

Github: https://github.com/superplussed

Email: jeremy@superplussed.com
ALS Wikipedia Page Views Up 18-Fold Since Ice Bucket Challenge