skysight-inc/HackerNews huggingface dataset:
Katniss Everdeen – The Hunger Games: Catching Fire – Edit – 2014
It's not running anywhere right now, sorry about that. That is because the app is not really ready for public production use. As mentioned in the README, I've kinda stopped working on it some time ago. I think it could still be interesting/useful to people who want to run in even in this state by themselves. The codebase also hopefully has some interesting bits, so I've at least opened it up for now. Another thing is that the backend talks directly to the Musicbrainz API, which is throttled (their DB is open though, so one could make a web service on top of it).
SpringOne2GX Conference Kicks Off in Dallas W Focus on Microservices and Big Data
This seems awesome. I keep a copy of my resume online, and I've been doing some applying lately. I inevitably am asked for a resume in a specific format (pdf/doc), once it even specified that it had to be < 200kb in size (which my pdfLaTeX middleware didn't handle). The formats also look clean and professional, and in fact one of them appears to be the one that I use. Definitely signing up for this later today
I wrote a tool like that for Github almost a year ago, finally got around to packaging it. It copies issues, issue events, watched/starred/private/public repos, wikis, etc. All configured via arguments. It's written in python with no external dependencies, so should work fine in most versions:

- https://pypi.python.org/pypi/github-backup

I built it as our company github org is getting quite big, and I wanted to backup my own repositories (at the time I had something like ~300 repos, which I've since slimmed down). Worked well enough for me.
This is great...I am already a subscriber for most of their product they just found a new way for me to give them more money.

I would love to see them implementing a C# (Mono/.Net) IDE for Linux and Mac. Monodevelop/Xamarin Studio is ok, but I love the power and flexibility of intellij idea.
I don't disagree with this post, but neither do I see the point of it. Anyone who is deploying containers on EC2 is already using the two technologies side-by-side, not that it means anything earth shattering. Maybe I'm in the minority here but I continue to not get the constant comparisons between containers and VMs. They're not the same thing, and they don't solve the same problems.

I spin up a VM from Amazon and it lets me share an underlying hardware platform in controlled ways so that I pay only for what I need and can't affect the other people sharing it. That's the problem VMs solve.

But now that the VM is running I still have to configure it for my applications. It's just a virtual server, with a potentially large gap between that state and the state I want it in. That's the problem containers solve.
Windows XP SP 2 (SP 3 is fine) and early Android, I believe, are the clients that don't support certs later than SHA-1.
http://press.princeton.edu/titles/8350.html Princeton Companion to Mathematics
It seems to me like the time horizon for an attack on git based on SHA-1 collisions would be much, much longer than other similar collision attacks (like signing binary executables), because of the sequential nature of version control. Presumably the utility of such an attack would be to maliciously insert code into an earlier version of the code to hide its origins, in which case for each commit on the file, they'd need to calculate a collision that contains their changes plus whatever legitimate changes have been made to that file.

I'm not familiar enough with the inner workings of git to know, but I imagine it would be a pain to juggle updating new commits from people working from a local copy of the repo - potentially your malfeasance would be detected quickly if you tried to calculate a diff between the old file and the new file from the local copy (which would presumably not be updated, given that the checksums match).

That said, if people are in the habit of signing their tags/commits using SHA-1, then that would be just as vulnerable as any other signing problem.
Also I was just wondering if it has a mobile component, guess I hadn't thought of that....I could play music on my computer no problem, it's on my phone that is ideal :)
> which enables a whole lot of radical use cases which the 99% case does not (such as no driver or no attentive driver)

I'm excited for this. Car ownership and operation could be an interesting historical note 200 years from now. Family scheduling would become much more flexible and children incapable of operating a vehicle will be empowered to travel long distances.
Previous discussion: https://news.ycombinator.com/item?id=7985305 with comments by the creator, jashkenas.
Some older ones may have been in academic positions. I suspect they'd mostly have been with IBM or the big corporate computer companies (Burroughs, Sperry-Rand, Honeywell, etc.).

Unix and Internet were pretty non-commercial at the time.
Google's decisions with respect to certificates don't really affect git much. But, if you're curious about how git handles pulling from repositories containing malicious hash collisions, Linus has talked about that in the past:

> If it has the same SHA1, it means that when we receive the object from the other end, we will not overwrite the object we already have.

> So what happens is that if we ever see a collision, the "earlier" object in any particular repository will always end up overriding. But note that "earlier" is obviously per-repository, in the sense that the git object network generates a DAG that is not fully ordered, so while different repositories will agree about what is "earlier" in the case of direct ancestry, if the object came through separate and not directly related branches, two different repos may obviously have gotten the two objects in different order.

> However, the "earlier will override" is very much what you want from a security standpoint: remember that the git model is that you should primarily trust only your own repository.

> So if you do a "git pull", the new incoming objects are by definition less trustworthy than the objects you already have, and as such it would be wrong to allow a new object to replace an old one.

...

> in this case, the collision is entirely a non-issue: you'll get a "bad" repository that is different from what the attacker intended, but since you'll never actually use his colliding object, it's literally no different from the attacker just not having found a collision at all, but just using the object you already had (ie it's 100% equivalent to the "trivial" collision of the identical file generating the same SHA1).

http://stackoverflow.com/q/9392365
Hmm I must've read the announcement too fast because I thought:
GNUzilla = web browser = Firefox/Iceweasel
Icecat = email client = Thunderbird/Icedove

So ... looking forward for thunderbird/icedove's equivalent from GNU :)
I hadn't considered this. Certainly a good idea, maybe I am trying to resell from a reseller which already has a tight margin.
I agree, good point.
Just from - terrible - experience, C. Diff is one bug which is certainly not sanitized by any sort of alcohol-based sanitizer. Spreading C. Diff throughout a hospital population (even one floor) is pretty devastating and dangerous.
is it a little too late? I hope not! It's good to see pricing being disrupted, not just technology.
Neat, I had never heard of that group and then I noticed 21 of my FB friends are on it. Thanks for sharing!
Show HN: Backup an entire GitHub user/org including issues/wikis
I share the opinion of the parent post. It seems every once in a while a "Ripperologist" (yes, there is a name for this) comes up with a new, definitive and conclusive theory about the identity of Jack the Ripper, and you must buy the book to find out. Patricia Cornwell comes to mind, she "proved" that it was Walter Sickert, and the killings were apparently caused by Sickert having some flaw in his genitals (not making this up).

The DNA stuff would NOT prove -- even if there were no contamination of evidence, no fakery and no misreading of the evidence -- that this guy was the Ripper. At best it proves he had sexual intercourse with the victim. This isn't a bad lead, but it doesn't "prove" anything about the identity of the killer.
I assume you had to build a S3 or heroku or whatever instance with a rest api built in? (can't access the "learn more" sections from work oddly)
Inspired by this thread, I just whipped up a funny idea for a sci-fi-ish book: "Tranquility Base Hotel" https://gist.github.com/hugs/198e37dd75f814723c14
Layers are useful for containing failures. What will happen when you get an undetected memory read error? A precondition of the proofs just left.
I'm not sure about issues or PRs but you can clone the Wiki like any other repo. Just add ".wiki" before the .git at the end of the clone url.

git clone git@github.com:jquery/jquery.wiki.git
Maybe I am wrong in my concept of distributor, for me there can be large distributors and smaller ones. Retailers of all sizes (small hobby shops or large hardware depots)
I think one of my favorite things about this is that it actually makes product information available in the meta tags.

<meta property="twitter:item:variant1:id" value="n6NDAWFNqjkNZftJWq0BQw==" />
<meta property="twitter:item:variant1:title" value="Small" />
<meta property="twitter:item:variant1:inventory_count" value=1 />
<meta property="twitter:item:variant1:price" value=75000000 />
<meta property="twitter:item:variant1:tax_category" value="included_in_price" />
<meta property="twitter:item:variant1:last_updated" value=1409259500000 />
<meta property="twitter:item:variant1:attribute1:text" value="Small" />
The US has done its share of economic imperialism as well, just not through colonies-in-name.
It's a pretty wild idea, and I certainly would have never thought of it, but I have heard that there are some people who really want this!
Ask HN: Where to watch the Apple conf. in SF tomorrow?
Stupid question: Do you know what's the best place in SF to watch the apple event of tomorrow? Is there a giant screen somewhere?

I guess the best would have been tickets for the actual event inside the flint center for the performing arts in Cupertino, but that's too late! ^^
I will post the results once I get no more submissions.
Snowden leaving the country would provide good timing for Russia to de-escalate their Western relations. On the other hand this could be years out. I suspect Putin may rather cut off the gas while waiting for another major economic contraction and debt default cycle breaking up at least pieces of the EU.

Switzerland now has grudges against the US for destroying their bank secrecy. If Bloomberg news is to be believed, both capital and humans are leaving the country as a result.
If it were programmed to keep itself clean, and had an algorithm to do that ("scrape the dirty area against a shrub"), I see no reason why it couldn't pass the mirror test.
This is just too beautiful a visualization! This is how I hope newspapers of the future will look like.
Unsure. In the hospitals I've worked at, there are sanitizing stations mounted either directly outside of any n-set of rooms (in ER's, they're mounted outside every room). It's habit for any health personnel to sanitize on the way in, rub a bit, wash hands at sink, and sanitize on the way out. In some cases (should theoretically be all...but hey, we're lazy) we wash on the way out as well.
Writing Extensions for Firefox Is Barely Worth the Trouble
It's surprising how much energy Certificate Authorities invest into arguing about this. Instead, they should invest that energy into improving their SHA-2 support and helping their customers migrate.
Yes, I was excited when I saw JSON Resume on HN this summer. I wasn't able to fit it in with all of the other things I was working on, but I think it makes sense, especially as more people use it. JSON Resume has more in their standard than Creddle currently supports so there's work to be done too (:
Probably best known for McCLIM, the free implementation of the Common Lisp Interface Manager.
Aussie man wakes up from a coma after car crash speaking MANDARIN
There was already an open standard to do everything but the private messaging part: http://en.wikipedia.org/wiki/OStatus
In my case, I am hoping to develop an inexistent market in some cases (such as 3d printing). In my country we don't have so many hobbyists for example, but certainly I believe there could be many applications. The market is rather small and I doubt that these companies could develop the markets from abroad. Just a thought though....
With Dropbox upping their quotas I was literally thinking about this two days ago!

I look forward to checking this out. Going to take me quite a while to finish uploading my music though.
Green card is not a work permit, it is a residency status. People focus on the work part, but with choosing the green card, one is choosing between the US and the rest of the world for a very long time.

First of all, it requires you to reside in the US, permanently (hence the official name). You don't move home for longer periods (e.g. years), as getting back in the US is not automatic. I understand that the US sees entering in the US as privilege, but these people usually help the US economy, and not burden it, so there is that.

Second, it really limits your options. Suppose you decide to go outside of the US in just a few years after the green card, giving it up, and suddenly, for the rest of your life, whenever you enter in the US, you need to tell you life's story to the immigration officer and why you have applied for immigration status and what happened with it.

And if you have connections, properties or investments in Europe, you will be always in limbo whether the European bank will decline business with you based on your US tax status.

Going for a green card is a no-brainer for everyone who is going for US citizenship. Everyone else, take a better look on it, before you go for it.
Lithium, the Salton Sea and a startup that’s trying to change the game
What emerges from the random field looks remarkably like the large scale structure of the known universe.
> I live in the Midwest and I don't know anyone living in ajbect poverty

Go to a city. Any notable city. Detroit, Flint, Chicago, Milwaukee, Indianapolis, Columbus. You'll see plenty of poverty, if you spend just five minutes to look for it.

http://www.nytimes.com/newsgraphics/2014/01/05/poverty-map/ click "Number Living in Poverty" and then look at the midwest. It's everywhere. Every major city, and a number of rural areas (Tippecanoe County, Isabella County, Allen County, etc)

There's poverty all over the Midwest. If you don't see it, you aren't looking very closely.
...why would you make a Facebook group about this?
>If you define "God" to be the being named as such described in the Quran

First thing do you know arabic? Second have you read the Quran translation if you don't know arabic? Third, have you gone through all the verses personally in the Quran that "define" "God"?

If you haven't done any these, how can you come to that conclusion. Doesn't that go against the scientific method which you seem to quote so much. For someone who claims to quote facts.. don't you have a fraction of shame.

The Quran has a precise description of people like you - though subjective, very eerily objective. It still makes much more sense than you. Rough english translation in the literal sense and also metaphorically "Deaf, dumb, blind.."
What I'd actually be doing is more like:

when ROBOT_VER == 32:
type TSonarAddresses = array[0..3, int]
const sonarAddresses: TSonarAddresses = [1,2,3,4]
...
elif ROBOT_VER == 33:
...

and stuff like that.
So much this. People who can't be convinced to write out a spec in a way that's meaningful and unambiguous are often more than happy to take a spreadsheet that mirrors the database, write the formulas that generate the outputs they want and give that to me. Hours and hours of back-and-forth are eliminated when I can convince people to do things this way.
>but I think they're not a cureall was my point.

I honestly don't know a single nurse / medical staff or even IT person in a hospital or university that thinks they are, though. You might not be giving people enough credit. Anecdotal, yes, but I've never seen people think of them as a "cureall" or even as a replacement of washing hands. It is always in addition or inbetween things where you can't get to a handwashing immediately (e.g., candidates shaking hands)shrug
Music in Dropbox? Who keeps music in DropBox's 2GB of free storage? (I'm assuming market who pays for DropBox storage is a lot smaller)
What did you do for solder paste? Seems like most places only sell it in large expensive quantities that have an expiration date.
This is the norm with Amazon.

They will shutdown your account, take your money, and ignore your emails/not give you any real reason why they shut it down.

Amazon is an evil company that abuses their monopoly position on a daily basis.

On top of this, when you are a seller, they get to keep your customers. You can't contact them outside of Amazon or get any personal info.
Amazon Fire Phone is now 99¢ with a 2-year contract
You're talking about buying/selling, I am talking about what happens after that has taken place. After a supplier has agreed to sell at X price and a buyer has agreed to buy at X price they're no longer in an adversarial relationship, they're now in a symbiotic one.

How is it you think product physically moves from company A to company B? Through osmosis? There are physical trucks, and a ton of technological infrastructure behind the scenes to make that happen (from orders/invoices, through to inventory metadata (e.g. expiry dates), and all of the organisation that has to happen so all the trucks don't appear at the loading dock at the same/wrong time.
Thanks! I'm pretty sure though that I'm not the first one nor the last one to have ever thought of that :D

The design is fluid but not really responsive. What I've been playing with is remote control that worked great on mobile devices. You were able to control all of your active CloudTunes sessions from any connected browser. So you could for instance play music on your computer, and control it via your smartphone (just like the iOS Remote app from Apple can control iTunes, except this worked over the internet so you didn't need to be on the same network). It was a very crude prototype though so I didn't include it in the initial release.
I feel like they're unenforceable, so why bother? Ideas are cheap; executing on great ideas is difficult. Trying to litigate while executing on a great idea while running a under-capitalized start-up is next to impossible.
I really, really don't understand this mentality. I don't understand how someone can place some political concern (the distribution status of a piece of code) over a more practical one like "the user wants to view this content and needs X plugin to do it, so let's take care of that for them".
> If I say that an airplane functions on fairy dust and you make an argument about propulsion and lift, and you claim that my assertion is wrong because ...

The only reason "science" would claim that your assertion is wrong is if your explanation doesn't agree with reality.

However, if you collect a bunch of data that you say supports your theory, but your experimental technique or data analysis is not good, then it's perfectly reasonable to point out the problems and say that your result is not supported by your procedure. This is not the same as saying that your assertion is wrong.

Another important concept that you're missing is usefulness: your assertion is unlikely to be useful (this is totally different from whether it's correct). Let's say you want to ensure that planes don't fall out of the air: how would you take advantage of your assertion to do this? (My proxy for usefulness is falsifiability -- un-falsifiable theories often are useless)
Your mistake was assuming a zero sum model.
Who would the author be granting a license to? The project had no legal entity at the time of his contributions and the fact that some of the developers were later hired by Mojang doesn't imply that Mojang can arbitrarily re-license the original author's code.

Further, the actual license that the original author used was the GPL. I think it'd be very difficult to say that there was an "implied license" that was somehow not the GPL.
"You added a client in the same space? Or their competitor?"

These are exactly the reasons they want, and are sometimes justified in wanting an NDA. It depends on the domain you are working in. But you are essentially saying you don't want to work in the domains where this is standard, if you say you won't sign a NDA regardless of the NDA contents before a project discussion.

My experience is generally the closer to the 'metal' the program is going to be running the more likely there will be a NDA before any details are really provided to you. And to me these can be extremely interesting areas to work in, for instance I would expect this to be the case with most avionics related companies.
I was going to write a provocating comment on how I expected to find a repository that did not use a Markdown or restructured Text (or akin) Readme file and how ignoring advances in the open source community was a reoccuring pattern with lisp. Then I double checked clojure repository for comparison and decided that my comment was pretty nonsensical ;)
VMware Fusion 7 Released
It seems like a good general rule of thumb that firms that raise B+ rounds are either (a) capable of flipping a switch to become pro-forma profitable or (b) extraordinary, with demonstrable traction backed by something more than a story.

It's tricky to reason about profitability in startups, because most "successful" unprofitable startups choose not to be profitable, usually in order to buy further market share.

The big difference between a seed round and an A-round in practice seems to be that valuations for seed rounds are usually casual (and sometimes nonexistent, deferred to the A round), and A-rounds always come with a valuation.

Generally, a seed and (sometimes) an A round are things you could imagine getting without being in immediate striking distance of real profitability.
This is a great thread. Thanks for posting it.
You mean like Excel actually does? http://i.imgur.com/kMPKnqO.png
To out-pedant you: even assuming that the differential collision attacks we know about are incorrect [1], we absolutely know how to break SHA-1 given enough compute, that is, roughly the same resources needed to break RSA-1024. The answer is generic collision finding with parallel rho [2].

[1] https://marc-stevens.nl/research/papers/EC13-S.pdf
[2] http://people.scs.carleton.ca/~paulv/papers/JoC97.pdf
Nothing should surprise you about the obstinacy of CAs.
It's one of the links early in the story. (It's pretty link heavy, so it can be hard to miss. 6th link in).

Basically, by 2015, Google will update Chrome to show websites with HTTPS certificates using SHA-1 as "insecure." The level of insecurity shown will get more severe over time, as well as being based on when your certificate expires. Here is the full link for details:

http://googleonlinesecurity.blogspot.com/2014/09/gradually-s...
When I was working on the YouTube integration for CloudTunes (looong time ago), there wasn't an HTML5 <video> based API. Is there one nowadays?
Please explain how you open a pull door with your back.
A while back I launched a SSL scanner [1] and got tons of feedback from people at Facebook, Google, Microsoft.

The most divisive item was how to represent SHA1 deprecation. The OPs article doesn't really touch on it, but the reason that Google and everyone else haven't moved on is that there still exist a sizeable number of clients that can only accept SHA1 (and will error on anything else).

I actually suspect that large sites like Facebook, etc will maintain multiple certs at the different levels and dynamically serve the best one up that the client can support. They're already doing things like only serving HSTS to browsers that identify as Chrome, etc.

1 - https://www.expeditedssl.com/simple-ssl-scanner/scan?target_...