skysight-inc/HackerNews huggingface dataset:
I love this, I recently wrote about it too. It allows for a much easier time for new developers coming on to your project, and I think it makes everyone else have an easier time too.

http://www.wizard.codes/code-review-cleaning-up-the-environm...
Well you could extrapolate.........................................................................

It's all shit anyway, garbage.
You're litigating a different issue than the grandparent comment is. In the video I watched, Sarkeesian was very clear about the motives she perceived in including this kind of violence in games. She believes that it is in fact an attempt to create atmosphere and realism. She goes on to interrogate whether that attempt is effective given its knock-on effects and subtext.

The grandparent commenter, on the other hand, tries to claim that Sarkeesian's videos might be dishonest. I don't buy it, based on the critiques I could find.

Did you watch the videos? What do you think?
Great point, didn't think of it like that.
And that's why you're effectively a nobody and most of the Apple execs are considered leaders in the field.

Pretty sure focusing on strengthening their music talent (given how important it is to the iEcosystem) is far more important than worrying about cloud identity.
At some point in the not-too-distant future, anything other than full 100% verified HTTPS should have a red "danger" icon.
I agree with your 3 points but I would add one more that isn't positive:

4) designed to the limits of failure, low design quality/resilience
Gruber's often an insufferable Apple mouthpiece who thinks way too highly of himself, and has been for the last ten years that I've paid attention. That doesn't keep me from reading everything in the RSS feed, though. Hell, I've even spent considerable sums of money to advertise on his podcast. But this exchange doesn't surprise me.

What does surprise me is how Marco was happy to be one of Gruber's flying monkeys on Twitter. Maybe Marco has an interest in the fight that is unknown to me, dunno.

Anyway, I don't care one way or the other. If forced to care, I'd even side with Gruber on the principles. But don't be shocked that some parties handled this in a less than graceful manner.
Is it just me, or is Yosemite a “happier” OS?
> His formal language seems to me to be hopelessly trapped in the 90s.

Can you elaborate on this?
Yes. We humans base our judgement and evaluation of people on appearances. Sex is one of the first classifications we apply. Absolutely crucial in forming an impression.
you do have a point
That would depend on whether Google is ever actually expected to PAY $500 million and whether they earned more than $500 million by breaking the law to begin with. If they made $501 million off of it, all the government has done is guarantee that is the new standard for business conduct. And usually companies that get hit with $500 million fines get that reduced to $100k or so on appeal.
Chaat 20
How to get Started with R and Statistics
Ask HN: What managed service do you recommend to file my US expat taxes?
I live in Bolivia and want to file my US taxes. I work as a freelance software developer.

What services do other HN expats use to file their taxes? I don't mind paying someone to handle things right for me.

Thanks!
I wrote some ACH handling software a few years ago. While reading through the 200+ page spec I came to the conclusion that it was originally designed to use fax machines as the delivery channel. Or maybe telegraphy.
I used to know someone making a pretty good living doing COBOL for banks. Some people really do enjoy that sort of thing. Also a bonus of less (or even positive) age discrimination, since he was an older guy.
I wouldn't be surprised if this sort of thing were a test. If you're not willing to screw over the earlier investors, you are clearly not ready to manage a large company. Large companies run on 'if I don't do it a competitor will and then we'll lose', not on being good people. Especially considering that white collar crime is very rarely punished, and then only with a slap on the wrist, such crime is expected in such circles.
The last thing I want when I'm taking a nude picture is for my camera to recognize anything.

I see you're taking a picture of your junk, would you like me to photoshop it bigger?
K Street Black Rock: Burning Man’s Billionaires Row
Something lightweight enough to be feasible on a cell phone is likely enough to be trivially computable in bulk by a decent bit of hardware. Think about all those obsolete bitcoin miners out there.
4 CREATIVE ANTI-PIRACY MEASURES ADOPTED BY GAME DEVELOPERS
I'm against the CSS. Don't let this awesome simple thing get the air of a new "bootstrapped" startup.
Marriage Math
I can't seem to find absolute confirmation on this, so I'll ask here: Does the Moto G also have the always listening features or is that just available on the Moto X?
Huh. More intelligent that most media descriptions. It lacks a description of 4chan or Project Chanology.

Probably should be interviewing Gabriella Coleman[1] for a translator of Anonymous to the world.

> And one of the parts of the story, what I’m reporting on is a few years ago, there were briefings on Capitol Hill about this idea about this threat of Anonymous. Keith Alexander at the time was saying — suggesting that Anonymous had the capability to attack power grids.

Given the right ip address, a telnet session, and a plastic-covered keyboard, I expect a deranged orangutan could take down power stations by throwing poo at the keyboard. Some of those SCADA systems are not designed to be error-tolerant on the control plane in any sense.

[1] http://steinhardt.nyu.edu/faculty_bios/view/Gabriella_Colema...
As I understood it any certificate in the chain (except the root) is considered. Validity is usually longer for intermediate certificates [such as the Starcom intermediary, quoted above].
This is an incredible write-up. Can someone who knows the author plead with him to write up the long history of the Spam Wars that he mentions in this document? I could read this stuff all day.
Why not a simple sequence of messages, like a chat room, instead of threads? It would be friendlier.
I'd have to agree sadly. "Use android you can do way more stuff with it and install custom ROMS". Too bad they all look like shit, especially the vendor specific UIs.

Google really needs to start working on the Android UI and forcing vendors to use it, windows phone/iOS blow android out of the water when it comes to design.
Just to clarify: the other replies are correct. The logic is that if the leaf certificate has an expiry after Dec 31st, 2015 then the whole chain must be SHA-256. If the leaf expires before that, then other certificates in the chain don't matter.

If you have a one year certificate (and I always recommend getting one year certificates so that these issues don't affect you and so that renewal becomes an annual chore, not an irregular panic) then you don't have to worry.

StartSSL simply need to cut new intermediates, signed with SHA-256, and provide them to customers once the leaf certificates that they issue start to stretch into 2016.
That's what I'm actually hoping will happen to services - that they will actually become function calls.

For instance, why can't I install a local print shop as a system printer? I do some graphics work, then I click File->Print..., pick the "Printing Company XYZ", alter preconfigured defaults if needed, OK, and the next day a courier brings me my print job, all payments and address information transfer being handled in the background.

Let me order pizza by RPC (we could streamline ordering in our local Hackerspace by voting on toppings on IRC and using a bot to make the order ;)). Let me do shopping by a POST request.

The end result would be that the use of aby service that doesn't require your physical presence could be streamlined, a lot of time wasted on boring paper/legwork could be optimized away, and the system would work smoothly in the background as long as you top up your credit card regularly.
And in the process render it unusable for people with JS blocked.
Gmail deliverability and rendering is the new IE6.
Can someone with some familiarity with Scala community explain why someone who seems to be the largest contributor to Scala felt the need to create a fork? It seems completely justified due to his credentials, but he doesn't give any specific reasons why he created this fork.
I think that this is somewhat due to different definitions of parsing what "economic espionage" means.

As you say, it's old news that NSA and CIA have tried to figure out bargaining strength. CIA was doing that even before SIGINT became the easiest way to find that information out. And this Economist story http://www.economist.com/node/1842124 from 2003 flat-out states that NSA detected Airbus bribing Saudi officials in the 90s, causing the Clinton Administration to intervene.

The U.S. government has never made statements that they're not trying to negotiate trade deals and treaties that are in the interests of U.S. companies, and they find data of companies like Airbus/EADS and Petrobras useful in figuring out their (the USG's) own negotiating strategy, or in detecting our allies and partners "circumventing" trade rules to assist their own domestic industry, must like your LA Times article relates to.

But that's not the same as exfiltrating such data directly from Airbus to Boeing, which is the kind of thing NSA claims they're not (and have not been) doing.

It's interesting that Greenwald's story mentions a strategy document that argues for going in that direction (the China strategy in reverse?) but a strategy proposal is just that--a proposal.
Another Scala fork, this time by top Scala contributor
For sure. We will definitely be doing some special things :)
Might be another untapped market for us. Good suggestion.
I'm concerned that the net effect of this will be to make the Internet less secure. In most cases, webmasters will be forced to make a Faustian choice: live with the scary warning in Chrome for modern users or give up support of browsers running on Windows XP (pre-SP3) and early versions of Android (pre-2.3), since they don't support certificates with a more secure hash than SHA1. We'll likely write a blog post soon on how much of the Internet still uses these old browsers. It's a startling amount. While it's unlikely to be the parts of the web where Google generates a large amount of ad revenue (e.g., China), so perhaps they don't care, I am concerned the net effect will be a web that is actually less secure.

At CloudFlare, we have a plan to handle this gracefully for our customers (with both modern Chrome and old OSs) ahead of the change, but it's a non-trivial engineering challenge that many organizations won't make. I worry that, faced with the choice above, many organizations will simply opt not to support HTTPS at all. And, from my vantage point, that's a bigger risk to web security today than certificates signed with a SHA1 hash.
Awesome hack/idea! I wonder if hiding things in a "public" message board like this has been written up in some cyberpunk literature yet. After all you must come from the right network to see it.
Hey this looks like an interesting idea. FWIW, your images for facebook, google, twitter, and yahoo are broken on this page:
http://knotlink.com/about
Ask HN: Product Design for glove
My friend and I have developed a wearable glove that works as a mouse. The glove is functionally sound and I would now like to focus on the aesthetic part of it.

Does anyone have any advice on how we could move ahead? I have been planning to approach design firms and attend meetups (a quick search did not bring any interesting ones in Toronto). Any one been through this experience?
Paul Phillips' 2013 rant/talk: https://www.youtube.com/watch?v=TS1lpKBMkgg
There's already an RSS feed setup but will be adding a button on the site. Thanks for the feedback.

http://famousoutfits.com/feed/
We are in the process. Thanks!
> "The leadership of scala has shown itself unfit stewards of the core technologies and the total price paid by scala programmers (actual and potential) is too high. I failed for half a decade to change that from the inside. Now I'll try from the outside."
Show HN: Discover the best hyperlapse videos
The Hobbit demonstrated that people have different opinions and react differently to change. I saw The Hobbit in both formats, and I thought that the 60 FPS presentation was vastly superior to the 24 FPS.
Amazon has no interest in selling cell phones, they want to surface their conglomerate services to consumers through cell phones. Fire COULDN'T have been this phone, it would just be an AmazonBasics style anonymous product to them.
Show HN: Tipnik – Instant customer feedback for local businesses
The type systems broke him.
> It's really difficult for me to see Newson's work as anything but very, very anachronistic. His formal language seems to me to be hopelessly trapped in the 90s.

I could not agree more. Newson is someone I really want to like because he seems like a cool guy, but I've just never been very impressed with either his work or how he talks about it.

He's most famous for this:
http://static0.bornrichimages.com/wp-content/uploads/s3/imag...

Which I find to be a cool idea, but:

a) not very functional
b) not very aesthetically pleasing in execution

A lot of that is just my taste, but I did not expect to see the top voted comment here be something I so thoroughly agreed with.
Firefox Bug 942515 - stop accepting SHA-1-based SSL certificates with notBefore >= 2014-03-01 and notAfter >= 2017-01-01, or any SHA-1-based SSL certificates after 2017-01-01

https://bugzil.la/942515
can someone please check out

http://i.somethingawful.com/cliff/ihateyou/page-267/image-01...

and report back. i'm curious but afraid.
I think it was an issue with my CDN. Mind clearing your cache and trying again?
7 Startup Mistakes to Avoid
Parse is a Backend-as-a-Service (BaaS). A BaaS is a great solution to connect your app to a backend server without having to build the backend yourself.

Why would you want your app to connect to a backend? Without a backend, you can only store data from a user in a database on their local device; which means that data is only available on that device.

If you need to do a login system, any kind of social interaction (sharing data between users), a leaderboard, syncing data across devices, etc. - you will need a backend. Parse helps you with that by providing you APIs to do all of those things.

I'm actually building an open source BaaS. Email me if you have any more questions.
That's a strongly worded statement for a front page, but I wish I knew something more about the situation. What progress is being held back? I've not written a line of Scala myself.
Suppose Amazon were taking all of the profit they pile into capex today, and put cash in the bank. Do you think your share of a growing pile of cash is worthless?
In the actual BBS days, I don't recall that being a common point of confusion, oddly enough. I dialed up to local BBSs, and it was obvious where I was dialing because I actually entered the digits, and the modem audibly dialed them. Then sometimes I would correspond with people in other states or countries, through FidoNet echoes or mail. But it was clear that I wasn't dialing them to do so. I transmitted my message to my local BBS, and the BBS relayed my message onwards. I'm not sure at the time I entirely understood what mechanism the BBS used to do so, but I knew that I wasn't myself dialing Norway or Germany to do it, nor paying any kind of destination-based charge. I even played some multi-country multiplayer door games, all for free. So once I got an internet account, it didn't seem too magical!
Haven't accepted yet (deciding between Google and a "hot" late-stage startup). The rough breakdown is $115k salary with 15% bonus if I "meet expectations" (presumably more if I "exceed expectations") + about ~$400k in stock over four years. Add in a sign-on bonus and we reach the $240k average.
I think it would be interesting to be able to travel up the subnet nodes to bigger boards.

eg, with subnet A.B.C.D, being able to visit A.B.C.X, A.B.X.X, and A.X.X.X.

Additionally, subnets are a bit opaque. what does each one correspond to? if you wanted to extend this out even more, It would be nice to have a map showing how big, and where your current subnet is.
Banks will only become willing to pay after experiencing expensive, massive disasters like what JPMorgan is experiencing. Maybe.

Migrating and/or killing large legacy enterprise applications is monstrously expensive, so the decision makers often decide against it. Relatively speaking, there haven't been enough very large companies that have been burned by that sort of decision, so executives at these companies (and the government) are less likely to see how badly it can go.

Then there's the very real challenge of justifying a big IT spend on retiring legacy applications to the shareholders. And the high chances of large enterprise IT projects going wildly over budget.

As much as we like to point the finger at the c-suite guys who keep doubling down on technical debt until there's a disaster, it's not an easy to make the case for paying to fix the problem. At least not until there are plenty of negative case studies out there like this one.
Heh. Bitnet was an early (1980s) point-to-point network built out of leased lines between educational institutions.

http://en.wikipedia.org/wiki/BITNET
How to Identify an Engineer. This Is Genius
It's funny, but not ha-ha funny.
A child needs to learn fundamentals that they can later build upon to develop their own thoughts, ideas, and conclusions.

I strongly believe that the point of education is to provide children with the thinking ability to come to their own conclusions.

The ability to think, to solve problems, to find solutions is what will enable them to build the future.

In terms of the news specifically it spoon feeds conclusions and is largely biased. The bias part is largely agreed to. The debate is which way the bias leans.
Well, the most obvious form of that is cache.

There's a entire class of timing attacks that rely on the CPU cache - they would not exist if CPUs didn't do the optimization of storing local copies of limited sections of RAM.
Not responding directly to your point (that this might make the Internet less secure), but there is also another approach -- deploying with two certificates. You can have a RSA/SHA1 certificate for older software and an ECDSA/SHA256 certificate for modern user agents. That should keep everyone happy. I dare say that, with some effort, it might even be possible to have a RSA/SHA1 and RSA/SHA256 certificate combination for the same host.

Of course, doing that is a lot of work. But at least your company is in a position to do the work once and automate it afterwards for all your customers.
I'm glad to see people move off old browsers, in general. SHA1 is far from the biggest problem with Windows XP SP2; in fact, I'd probably say SHA1 is one of the most secure aspects of the OS. The actual weaknesses in SHA1 which have been identified are very serious, but still requiring on the order of 2^61 operations to cause a collision, and there is a fairly indirect path between hash collision and end of the world for many protocols.

The problem I have is how Google is doing this. There was a pretty clearly announced date. Google used a random browser meeting's minutes to make what is essentially a major policy change, and then assumed CAs would notify their customers.

The victims here are end users and site operators; CAs benefit because people buy new certs (and at worst, it's customers who have already bought something which breaks...). There was no real incentive for CAs to communicate with sites, and they're not really known as responsive businesses anyway.

Doing this with effect during the holiday season is kind of the definition of dick move. Pushing it out 6 mo wouldn't have appreciably hurt the SHA1 migration efforts, but would have dramatically reduced pain for end users and site admins. Providing direct notice to the world (such as this blog post), so users and site admins would actually see it, is how notice should be given; not an obscure forum or relying on CAs with no business interest.
Ask HN: Which tech company has lost its way?
I'm working with a hedge fund, buying and selling tech companies based on their technology and not on their financials because I believe that tech ALWAYS wins. Which company do you think lost it's way? has obsolete tech, or simply has the worst product?
What you're saying is in essence correct, but I don't think that their fire phone "3d gimic" (which added very much to unit cost) was necessary to achieve that outcome.

I think it was detrimental.

A phone with comparable specs to the Moto G could have achieved their real goal that you mentioned, with the effect of spreading sales opportunities to millions more people. Those millions more in phone sales would have caused many, many more added transactions to the Amazon machine, as I assume they intend with the Amazon Fire Phone.
It's worth reading Ron Chernow's biography of the Rockefellers.

Rockefeller had a strong Christian Soldier belief system, in which he was righteous and most other oilmen were sinners. (The 19th century oil business attracted a lot of hard-drinking, gambling, womanizing types.) He did good works with his money, while many of his competitors would have spent it on vice. Therefore, he was furthering God's plan for the righteous to inherit the earth by beating them in business.

It's a worldview difficult for moderns to relate to, but I think it was authentic for him.
>>> that doesn't mean management should be expected to value IT in such a way that they actually are willing to pay significant amounts for it!

I was at one large financial company similar to JPMo and every time the development team came up with a good idea, it was met with a laundry list of requirements we had to meet in order to show positive ROI over a very short time period. Not sure if they did to discourage us from trying to help processes and development, or they really believed redesigning some parts of their network architecture could be done in a month or two.

Either way, it was quite frustrating to say the least, and after a few gallant attempts to get something going, most of the younger developers just opted out and left. I saw the writing on the wall and was in the second wave of people who finally gave up and moved on.
It sounds like proof-of-work alone is insufficient. The bit* type systems sound promising but that seems to preclude mobile. Interesting. What a funny problem we have built for ourselves.

Interesting that SMS appears to have simply legislated the problem from existence (or so says the article), I suppose if anyone can connect to a telephony network for cheap the problem would persist there too.
As a side note, Amazon has the Moto G for $159.99 w/o contract. That's pretty amazing to me and I'm honestly considering it even though I was holding out for an iPhone 6. http://www.amazon.com/dp/B00GWR36F6
Consul 0.4 Released
Ask HN: Does your startup provide free lunch / dinner to employees?
If so, how do you order the food?

My friend and I (both ex-FB engineers) are doing research on lunch / dinner meal delivery services for small businesses (in SF Bay Area) and we would love to hear how you do it today. Please email me at philipmarcus22@gmail.com.

In return, we'll give you Free Credit when our service launches.
I'm on that as well, but last I checked it wasn't available anymore.
I have had gmail flag a message I sent to myself as spam.
An alternative might be to have a different mode for the camera, private and public. Kind of like incognito mode on Chrome.