skysight-inc/HackerNews huggingface dataset:
Show HN: A cake pricing calculator in React.js
That's a terrible comparison. Amazon is a retailer, Twitter is not. Amazon provides a massive amount of helpful information to buyers. Twitter provides almost none. For starters.
python and javascript, most days.
Apologies if this is obvious elsewhere, but where can I make my resume a multi-page document? I'm a two-pager myself, but increasing the font size just seems to knock text off the document altogether.
I would love to see some sales figures for the Fire Phone. I have yet to see one in the wild here in NYC.
How Ansible and Docker Fit: Using Ansible to Bootstrap and Coordinate Docker
Indeed, I mentioned this in my original post (child of the article) - such features are only taught to users so advanced that they are (more than likely) also programmers (or certainly should be). I think this is a shame.
Cool site but please please change that fixed navbar to be fixed via css and not whatever you are doing (javascript?). It's very painful when you scroll (chrome on windows 7)
iPhone 6 – Apple’s Strategic Opportunity
> No, that you shouldn't be soliciting customers who are in the same line of work as where you are developing.

Except your entire stance is that you should be 100% willing to sign an NDA before you even know what they're working on.
They can do whatever they please. I can wish that they would do something else. They obviously won’t. It’s not in their own self-interest.

Saying they should remain this cynical monopoly that does shitty things just seems nonsensical to me. No, they should not. They can. They do. I think they shouldn’t.

I mean, none of this will actually happen. Twitter will continue to have a monopoly and I see no realistic way to change that. I don’t think there will ever be Twitter as a protocol. I’m just saying there should be. It did work out for email. And, yeah, email is imperfect in so, so, so many ways, but at least it isn’t under control by a single company.
That's a bit of an issue I've got with Tschichold. As there's a lot of "taste" involved in this, it's hard to separate rational judgement from just getting old and more conservative.

And one should note that even old Jan was there way before digital typography on the web, heck, even way before DTP.

Don't get me wrong, I really liked his typography for laymen booklet ("Erfreuliche Drucksachen durch gute Typografie", a title that really can't get both more quaint and Germanic). But he's really supremely conservative in there, warning everybody about the dangers of color, sans-serifs and lauding the beauty and composition of medieval woodblocks. So, yeah, cum grano salis as they say…
> First thing do you know arabic? Second have you read the Quran translation if you don't know arabic? Third, have you gone through all the verses personally in the Quran that "define" "God"?

Why do you ask me those questions? Why do the answers to them matter? Do you really think anyone believes that the details of Arabic change the interpretation so much that the general meaning of the text changes? Why would I have to go through all the verses personally? It seems one verse of a reasonable translation describing a general contradiction with scientific knowledge would be enough. I mean, if this truly was the literal word of an all-knowing being, a single verse disagreeing with real-world knowledge would bring into question the claimed origin of such a text?

> If you haven't done these, how can you come to that conclusion. Doesn't that go against the scientific method which you seem to quote so much. Just an obvious comical observation.

I find it rather comical that you are using such shoddy reasoning to attack a position I don't have. I only mentioned scientific knowledge once, I did not mention the quite distinct "scientific method" at all.

> The Quran has a precise description of people like you - though subjective, very eerily objective. It still makes much more sense than you. Rough english translation in the literal sense and also metaphorically "Deaf, dumb, blind.."

Well, good thing it's not really a good source for wisdom then :)
As an intermediary feature, perhaps a show/hide toggle on each bit of content would allow you to customize the resume without removing the information from Creddle. Then after exporting the resume, you could modify what content is hidden for the next employer.
I see. Good, that is precisely what 'when' should be used for :)
Advertising is way more lucrative. See $FB. HNers need to come to grips with the fact that advertising is by far the best way to monetize attention. And it's quite possible that will never change.
It is, you're right. It's a hobbyhorse of mine, though, because SHA1 (and MD5) appear in TLS ciphersuites as MAC components, and those uses are not known to be vulnerable at all.
Storing/reading from S3 would be great. I'm also interested in the answer for this.
I never said moving away from SHA-1 was irrelevant. I was simply stating that they were overestimating how common the FLAME attack could be pulled off.

Flame like Stuxnet are state of the art. Highly funded state of the art. A lot of security researchers look at these things and simply say, "Are you shitting me?!"

Call me optimistic but I highly doubt we'll be uncovering a new stuxnet every single year.
Signed up - this is really neat! If I was running linkedIn premium, I'd be looking to write you a check.
I'm not sure if they do this or not, I don't think they do, but your post made me consider something else.

When I, in the US, want to send a letter to Europe, or China, or wherever, do they print and mail it in the US or in those countries?

For certain types of mail, they could take the entire hassle (time + money) of international postage and just send the letter electronically to the destination country, where it would be printed and mailed locally.
I'd think the content of the blob is less constrained, because you can put whatever padding fluff you need at the end of the commit message to adjust the sha1 of the commit. To cause harm, you'd include the trojanized code in a different file which your colliding commit blob references. (So, you'd need to include multiple blobs, but only the commit-message one needs to collide with an existing one)

A collision in commit hashes would mean you could no longer trust a signed tag, for example.

Look up the old stripe-ctf "gitcoin" challenge and you'll see it really is quite easy to meddle with commit hashes :)
Even the Microsoft Kin didn't drop in price this quickly. That was an unmitigated disaster, which sold less than 10,000 units.
The answer is simple -- Linux can achieve this through configuration, not by splitting it in two. There's no reason for major surgery when simple configuration choices can achieve the same thing.
http://tuhdo.github.io/emacs-tutor.html
Have you used flyers or doorhangers for your business?
Have you used flyers or doorhangers for your business? did they work? what kind of business was it? how about valpak or something like that?
Exploding Offers Suck
This seems like a good idea but wont it be able to find someone out by looking on linked in for a unique skill set?

I've seen a number of job sites make it so you can exclude folks from certain companies from seeing your profile...
Just out of curiosity, why did you fork it immediately? Did you find issues you wanted to fix, code you wanted to change, something else?
there is if we can agree on a base tech (node.js for example), an app store model, and the environment is sandboxed. this would let people produce apps that would work everywhere - from raspberry pis to pcs to macs.

also sadly, some sort of drm should probably exist.
Ask HN: Aren't self-signed certificates preferable to unencrypted connections?
I've had all kinds of issues in the past (as a sysadmin) testing systems with self-signed certificates (before we have real certificates issued). For example, testing a new mail server, a client website, etc. Most systems will show an alert, and many just refuse to work entirely (e.g. SMTP relaying) without a significant amount of configuration change (which then has to be undone later).

But isn't that better than nothing? Even if my blog has a self-signed certificate and you can't say for sure that 'this blog is run by so-and-so', isn't that better than a wholly unencrypted connection? SSL seems to be used for two purposes, namely encrypted connections and validating the remote server, but surely encrypted connections alone are a sufficient benefit? And yet, if all I want to do is have a secure channel, I have to (theoretically) pay a certificate issuer yearly to prove that I am who I am, as if encryption requires I prove my identity.

It would make a great deal more sense to me to treat self-signed certificates the same way we treat HTTP sites: give no notification to the user whatsoever, unless they go looking for it. Browsers could also have a 'strict mode' enforcing the current behaviour (require authentication) for environments or users which prefer it.

The major problem I see here is that sites where you do want to guarantee certificates (e.g. Facebook.com, google.com, bank of america, etc) would be difficult to guarantee that you were connecting to the correct site, since MITM attacks against your SSL connection would be treated like HTTP connections and the browser would let them proceed as if nothing was wrong. I'm not sure if there are tangible ways around that, but it feels worth looking into.
I'd been planning on releasing it together with a Dockerfile so that people could easily run it locally in an isolated container. It turned out to be a bit more complex than I had anticipated so Docker support will come later. But I think that could be a viable model for locally-installable web apps in the future.
I hate that too. I wouldn't remove the free and put the current functionality behind a paywall, but I'd still want to leave open the possibility of new functionality as paid add-ons if I go that route (like premium themes as previously suggested). What kind of language might be able to support that without being deceitful or vague?
TIOBE Index for September 2014
We don't want to sign your NDA until it's time for you to sign our NDA.

This "ideas are cheap" concept is getting really old. You need a good idea AND execution. But execution alone is just as worthless as a bad idea. Execution amplifies the value of an idea, and amplifiers are just as common as ideas.

What if my "secret sauce" is a whole new concept and being first in a new area would be a significant advantage? Hint: I have just such an idea.
Not so much for making sure the species survives.

What do you see as the long term (100,000 year) future of the Human race?

The species you are describing (us) evolved to be successful in the specific environment of the earth.

We know enough about our solar system from terrestrial based observation to determine that there is no other habitable planet for humans within our solar system.

Moving us somewhere else without significantly changing our biology or having the unlimited resources to terraform and build synthetic atmospheres would be an exercise in futility given the insane costs.

On the other hand if we are able to live long enough to build Fusion ("free" energy), build superhuman AGI to help us optimize our decisions and activities, and become blended with technology such that our biological limitations are removed, space exploration is trivial.
Haswell and OS X 10.10 Yosemite support are the exciting features!
Did you mean "How Experiments End" by Peter Galison? It looks perfect for helping answer this question.
That's the problem with the main Music Lockers: they keep integrating music stores into them. All I want is to upload my music and play it remotely.
Definitely relevant for any non-US citizens reading HN.
You filed a patent on anonymous candidate profiles? Really?
I have to second this. In what way is this smarter job search? Selecting a keyphrase from a drop down and a region does not make a job search engine smarter.
"Hey, low-status/power/etc person. We have an arbitrary hoop here. You must jump through it." They're usually contracts of adhesion ("Negotiate the terms of the NDA? They were established by legal 5 years ago and everyone uses the same ones. Get with the program.") and usually filed-and-forgotten.

And to add to the fun and joviality all around, quite often the people who ask you to sign agreements like these (or their spiritual counterparts: overly aggressive indemnity clauses) don't actually know (haven't bothered to read the nuts and bolts of) what they're asking you to sign. Which has a lot to do with how they suddenly get so anxious when you ask questions about (let along make specific objections to) particular bullet points that you're being asked to sign on the dotted line for.
I can't imagine it would be that difficult with multiple people.

Even if they pulled from one or the other, so long as someone merges the changes from the missing repo, everyone will be good to go.

This is a pretty unique approach to multiple git servers.
> It seems like the author is an Englishman.

A UK citizen, probably, but I'd not assume that a guy named "McDowell" from Belfast is English.
Exactly. I just worry that 219 minutes will get bandied about as "what Ars got for the battery life."
I understand your confusion, but this is a common usage case for the nominative first person of "me" in formal speech. This is one of a gajillion special case word choice situations. This particular sentence structure (Direct object, past perfect verb, subject) suggests "myself". However, the writer should have put in the other person's name before "myself", as is common practice, leading to confusion.

Consider: "the SR Server was located by another member of the CY-2 and myself".

I'm not claiming that "me" wouldn't parse, but that using the current rules properly would not cause confusion in the first place. Someone is trying to sound intelligent, while putting their name first so as to emphasize their contribution.
Thanks for bringing this to the playa, Samuel. Hope to see it again next year!
So long as it is no being publicly shared, Dropbox shouldn't have an issue.
Is this a change for YC? YC previously required getting an answer the day you're accepted because "you have all the information". So this is an update to allow people time to decide, right?

I always found the justification of having all the information a bit self centered. Founders have all the information... about YC, but not about other options.

That said, as a YC alum, I think you should almost certainly say yes if accepted.
So where is the fully automated solution for rotating certificates?

I've been looking for a CA who will provide an API to send the cert request, an easy way to prove the domain ownership which doesn't involve SMTP, and the signed cert handed straight back from the API, but haven't found it.

So far the most I've been able to streamline my certificate requests is to automate generating the CSR, skip setting the MX record, just bind SMTP to www.domain.com, get the validation email at 'admin@www.domain.com' and auto-forward to my actual email address... so it's mostly automated, but I still have to copy/paste the cert request string into the CA's webform, click the 'Approve' link in the forwarded DV mail, and then copy/paste the final cert from inside email back to the shell where it can finish the import.
Hey! I'm actually going down this route as well. I'd love more information and maybe chat if you have a few minutes. Any chance you could shoot me an email? I'm chintan@capp.io.
As a bonus, these tools are also consistently outdated. :/
I also like everycircuit ~$10 IIRC, very good interactive circuit sim.
I'm tired of paying 70% of the new price every single year for an update. Especially when they give Parallels customers nearly 20% off for switching. How about a little more reward for loyal customers?
Identikit: A Modeling Tool for Interacting Disk Galaxies
It might be picked up as a budget device for customers who are willing to buy dirt cheap devices that didn't sell well during its production run. I can imagine the Fire phone joining products like the Canon EOS M in that category.

(The EOS M camera was panned by reviewers when it was released, for being unusably slow. Sales were horrible, and the price dropped like a rock from $899 to $250. However, Canon also released firmware updates that fixed a lot of the speed issues, so some people are buying it now as a great budget camera).
Interesting to observe:

* Swift gains momentum as expected

* Dart is on the map again next to Scala & Haskell

* Objective-c (& Swift) & F# on the rise

* PHP, C++ & Java having a hard time

* TypeScript is missing
Core Memory – a tutoral
Article misses the main reason for entrepreneurs to not request an NDA: it creates a massive risk for the other party while granting very little upside. That's why it's rightly understood to be a rookie, uninformed move.
The root CA, USERTrust, is SHA-1 signed.

Everything else is SHA-2 however as you said.
Thanks for the link! Also, I'm investigating the issue as you are correct that your certs all look good.
Thought I would share this, its a really solid article on how Core memory works.
The fundamental error with trying to fix such marketplaces via another marketplace is that contractors are typically far better off relying on repeat business and some elementary lead prospecting, while project owners are better off relying on networking and repeat business.

Your target market is thus (more or less) restricted to people who don't yet meet that level of experience and professionalism. You get the contractors that have no existing clients and no clue how to approach companies, and you get the project owners who are out to get bargain-basement labor and firmly believe they'll be the one poster who gets lucky and finds a contractor who works on the internet yet is too inexperienced to realize what that means for their billable rates.

This is still a potential market, but you've lost the more desirable end of the pool before you even leave the gate. And even if that is the end of the pool you want to provide value to - you can provide far more value by helping them move upstream, rather than trying to stamp out another marketplace which is a bad solution from its conception.
Ok from a positioning and marketing viewpoint don't share something that says it's a smarter job search engine if there is no freeform keyword search feature and it doesn't explain what makes it smarter on the website. This is basic stuff.
Yeah maybe it would be nice idea if when you generate a galaxy it also generates small dark matter particles around the regular particles.
Integrating D3.js visualizations in a React app
No totally understandable. The biggest limitation right now is only supporting one page resumes. I want to support multi page resumes, but still leave in automatic font sizing, which can get tricky if sections span over a page break.

I have nothing against multi page resumes, I just had to limit my scope.

I hope to add multi page resumes, but I'm sorry to say that for now it just isn't built yet.
Hire one for Creddle, yeah. You have an amazing starting point, just need that little extra (ie. someone who knows The Vignelli Canon backwards).
An NDA is not going to protect you anyway. If you truly have some secret sauce, be a little careful in what you say to outsiders. They typically don't need to know the details anyway. That's part of your execution.
(Part 3)

> - No school of Islam has emerged that takes back on these opinions. The best of enlightenment you get is people claiming that people should get a second chance, but thought crime still leads to death.

There are five schools of Islam (technically speaking, there are four, until the Jafriyyah School of Shi'a Islam, as recognized by the prominent scholars and figures in the Sunni schools in modern history quite late at a date I do not recall, which is an interesting political gesture by itself). I am not sure what you are referring to, but if it is bida'a, I somehow doubt that they have a consistent view on this. They are all hundreds of years old, and specializing in one of them is an academic lifetime all to itself. I assume some, probably the Hanbalist as you guessed from earlier, would demand death. The others, probably not. But I cannot be sure and that ironically is not easy to research in a short period (I just tried, haha). But rest assured you have a point: there orthodox bigots in Islam, just like fudamnetalist Christians and hardcore Orthodox Jews.

> Because of these issues, mainstream Islamic thinking is less open to deviating opinion, critical thinking, sensitivities, or at least the open discussion of topics. These issues make it easier to justify totalitarianism or elements thereof in an Islamic context. There is no "Reformed Judaism" version of Islam that is openly and widely practiced. And that appears to be a burden for every Muslim who wants to be a critical thinker and wants to build a society on freedom and progress.

Maybe in the sense they do not have a name. But there are many progressive Islamic scholars (I use that term as someone specializing in religion, not any academic of Muslim background). Tariq Ramadan comes to mind (http://en.wikipedia.org/wiki/Tariq_Ramadan), and he is very well-known in MENA and out. There are others as well. The difference is Islam, because of perceived attack, encourages believers to emphasize unity and not discuss differences. The schools of Islamic law you mention are academic mainly, and any believer would not be concerned as it barely impacts their belief or praxis. In terms of practice, the only real dividie is between Sunni and Shi'a, and almost people when question about which one they are get cagey and will tell you they are Muslim, for the reasons they described. You are not supposed to make the difference between you and others a big issue. Only zealots, for political reasons, encourage this crap and you see the civil war it causes in Iraq and Lebanon. Many open people talk about it, but largely in Arabic, and I suppose you do not know it.

This has been a cool discussion though. I am sorry if you think I am ignoring your comments are being insulting in my dealing with you, but I am glad someone questions and asks. Without it we all accept the status quo and learn nothing.
This inspired me to do the same. If anyone wants to try, I put my implementation up on github: https://github.com/olane/locationheatmap
Safe to say, IMO. I have no idea why I would want this phone. The free-with-2-year-contract model is also hilariously outdated by now. Amazon imposing its own walled garden excluding Google's means your favorite apps are probably not there.
One option for a 95+% driver-less cars is simply having a remote driver that handles a fleet of them.
only in the early years of YC did we require an answer right away.

as much time as the founders want has been the unofficial policy for awhile, but i thought it was time to share it.
Please let us know. Here's a table showing when SHA-2 support was added to various browsers.

http://en.wikipedia.org/wiki/Transport_Layer_Security#Web_br...
There are also other (mostly unsupported) mobile devices which don't. Like old ebook readers which have browsers for some reason.
If you do use -Werror, provide an easy way for users to disable it via configure flag, environment or make variable.

I'm using clang's -Werror -Weverything, which is obviously rather brittle. Building without -Werror is done via

make NOWARN=error
Academic here: Doesn't this post state that the offer has a 45-day duration?

Are offers that "explode" only a few days in duration?
The confusion I see comes from the fact that many people use/used VMs for things that containers actually work fine for. For example, developers set up VM with tools like Vagrant and VirtualBox to isolate the dev tools and services used by a project in a development environment. Docker does replace some previous use cases for virtual machines, particularly ones that did not need the security and resource control provided by VMs.