skysight-inc/HackerNews huggingface dataset:
One of the reasons behind this is location, where there are a class of apps which could conceivably rely on you not being able to lie about it. (The existing mock location facilities explicitly notify apps they are mock for this reason).

However, the use of this feature for it in practice is . . . non-existent.

Google also famously went crazy when Motorola almost used Skyhook as network location provider for the Droid, on the basis that such information feeding back into their systems might be inaccurate and thus pollute their data collection activities. (They use Android devices as modern proxies for the WiFi slurping the streetmap cars used to do). As such Google have absolutely no incentive to resolve this problem as they are reliant on you not lying to them about where you are.

What's fun is J2ME got this right. Apps couldn't just assume they had permission for certain tasks, and users would be asked when the app wanted to do something. If the user refused you'd get an exception, but you were expected to handle it gracefully. It really wasn't that big of a problem, except for the user experience of the prompts some manufacturers chose to implement being fairly horrible.
I live in a city with a very comprehensive bus service, cheap, reliable, all that good stuff.

Over time it became obvious that people who worked for the bus-company would just jump on the buses, chat briefly to the driver, and not pay. They'd get off after 1-15 stops and have ridden for free.

I figured there were sufficiently many bus-drivers and buses that they can't all have been personally familiar to each other, and reasoned that the "uniform" must have been what swayed it.

I created a replica-bus-driver-uniform and had a weekend where I rode around for free, unchallenged.

Not terribly useful, and perhaps not possible these days now that the staff also wear ID-cards a lot of the time, but I was a little pleased with myself regardless.
so, you are now breaking the law + paying for a service that dont meet your needs + limiting your content selection.

why not go to breaking the law + not supporting services that dont meet your needs so one that can meet your needs eventually finds a market + unlimited selection?

going back to torrent is the only solution. remember that torrenting is what enabled netflix to even exist because before that movie distributors had deals so bad for online redistributors as to explicitly forbid them.
I can Google the answer to those problems, 100 times, and it will still be faster than spending time learning any of those.
I found some really interesting software I'd not heard of through this thread so I thought I'd post this for anyone else interested:

http://picoe.ca/products/pablodraw/

More of a paint than a draw, but pretty damn cool and xplatform.

Also Monodraw looks absolutely awesome. I'll be paying for it when you release it
To be fair, Desktops don't have as much of detailed look into our lives. SMSs are very intimate, location data can pinpoint you at almost any moment, and ( for me ) i know my address book on my phone is 10x the size of the address book I had on my computer before my phone started syncing contacts across. I think it's a great direction, but one that is now more necessary than ever.
Nomie. The world's easiest life tracker
I've been reading the Book of the New Sun for the last couple of weeks, and I can second this recommendation. It straddles a very interesting line between science fiction and fantasy, and it definitely feels like a piece of literature more than most works of either genre. As I recently explained it to a friend of mine, it's "Dune caliber" (though not at all similar in terms of setting). A great read.
A long time ago I worked on a Symbian OS called UIQ and we tried to tackle the permission problem differently - by not needing them!

I still like the approach I came up with and think it a good fit for all OS today. Here's an old blog post by me: http://williamedwardscoder.tumblr.com/post/13316924653/bette...
you can exclude domains/paths in most modern proxied clients
I'd imagine the patents are owned by the institutions the research is being conducted at and a Big Pharma will company will buy or license those patents after trials.

Startups are too small for shouldering the financial load of developing/testing/insurance/lab facilities/high end staff. Plus, Big Pharma has established distribution channels that would get a Type 1 like me my cure faster, which one may consider ethical territory.
Great read. Thanks.
You are shifting from the topic to police families. On top of that, you are tired of apologists for police but have no problem sticking up for the other side.
Huh? I think you missed something.

This is nothing to do with BBS's or code abstractions. On the former, there is no OSI stack; it's terminals down serial connections. On the latter, it's datagrams or sockets. It's about the guarantees that the link layer makes or doesn't. Parity doesn't pass up the layers because the guarantees are made further up (TCP).

You can still run token ring, serial, thick ether, thin ether, paper aeroplanes thrown between buildings. It doesn't matter above the data link layer.

Yes there are really fucking smart people here, as you put it but it appears there is a normal distribution of people as well.
"Hand crafted HTTP request parser" - hard to see how this really faster (and less bug prone) than generating one with Ragel.
That's a fair question, to which I think AnthonyMouse suggests a good answer, but my primary point was that the cash shouldn't be spent outright before due process has concluded or the time limit hit.
It states at the end: "The X-37 is powered by a single Rocketdyne AR2-3 rocket engine, manufactured by Pratt & Whitney. Each engine can produce a maximum of 29.341kN thrust and uses solar power and lithium-ion batteries instead of the traditional fuel cell system."

But earlier states: "Fuelled with military fuel JP-8 and hydrogen peroxide, the Rocketdyne engine of the X-37 is designed to run for nine months. The engine installed in the aircraft currently uses hypergolic nitrogen tetroxide or hydrazine."

Odd, no?
OptKit now has Live Chat and Reporting functionality
The website doesn't work for me (win8.1, ff32):

1. The screenshots are not displayed fully, but clipped at the window edge.

2. The robot displays improperly, maybe because of missing font?
Google Now has been doing this as well. Nothing really new here...
XPrivacy seems to do what you want
If you want to go further, you need to get rid of the OS:

40 million req/sec with Lua

http://highscalability.com/blog/2014/2/13/snabb-switch-skip-...
Because when OSX n+1 is released, it's immediately impossible to get any work done on OSX n?

No - but the same logic applies to application software, right? If SuperApp m+1 requires OSX n+1, surely you can continue to get work done with what you have now - SuperApp m running on OSX n?

There's no reason for developers to handicap SuperApp m+1 by avoiding all OSX n+1 APIs...
Show HN: Startup quiz
> More people should understand that hospitals are messy.

Thats why its nice to live in a place that requires HAI (Healthcare Acquired Infections) to be reported. In the state I live in (US/AZ), this is only voluntary for the hospitals. As a patient, it makes it almost impossible to make an educated decision on what facilities to avoid.
This is the primary argument for Apple's AppStore and App submission guidelines, and the evaluation (much of it automated) that Apple does upon submission.

This is also why iOS prompts the user before disclosing information to the App, such as location, contacts, photos, etc.

People hate the review process, but there's a reason for it.
It seems like nroff+eqn ought to be able to do the job, but the GNU implementation I have handy doesn't seem up to the task. Sympy, on the other hand, does the job beautifully, especially if you're using unicode: http://docs.sympy.org/dev/tutorial/printing.html

Neither is LaTeX syntax, though.
My point is, you can find similar stories about any organization, from religious operations to charities to almost anything and people will stand up to it as if such things were rampant throughout every member and each and every one of them is a dastardly person.

These stories are what I call the 'shrill of the internet' and you are supposed to focus on it cause, well, someone's screaming about it on the internet so it must be important and rampant and we're all going to die.

In the meantime, you get into trouble and who are the first people you call for help?
Netflix is more convenient. I want to reward convenience by paying for it. Torrenting for ever without paying isn't changing much, except towards the worst.

Also, I'm not breaking the law.
What Less Than $60 Can Do for Your Startup: On Startup Directories
I got a lot out of this. I’ve never worked in a platform that evolves as rapidly as Angular, and have found myself blinded by “last year’s advice” a few times. Quite a bit of modern thinking here.
The problem with faking the data is that users are likely to pick that option, forget that they did and then when the app fails in some way they will give it a 1* review.

I would rather have fields where the app developer can justify why they need each permission.
I am fairly ignorant of Ragel, but to my understanding Ragel is better for assuring correctness rather than performance. I don't think Ragel makes any claims regarding performance.

I could see a specially written parser outperforming it, just like hand written assembly can still sometimes outperform a compiler.

I agree that it's more likely to have bugs, though.
Apple does review apps for harm, calling bad APIs and the like.
If you do, you are the only person I know who does. I've never even heard of such a thing.

I do not fear the police. I have no need to.

Whatever happend to you that you feel you need to do that? Or is it only because of something you read on the internet?
I dont install app which requests excessive permission. My Lenovo phone has application firewall, everything is blocked, except two white listed apps. My /etc/hosts has 3000 lines...

It is not that hard...
Can Celiac Disease Affect the Brain?
Story on CNN reports the nurse treated the man during his second visit, when they knew he was infected.
Couple of follow ups on this one:

SCTP is message oriented rather than stream oriented so this isn't really useful. The chunk size is also two bytes meaning that all your messages have to be less than 64k or you have to implement packet reassembly and stuff. Oh look, back at TCP again.

We must do nothing.

I suspect this entire SPDY/HTTP/2 reengineering effort is a 1000% complexity and risk increase for a 2-5% gain in performance. That is not a trade-off as an engineer I could accept.

90% of the inefficiency of web applications is down to the application stack, not the protocols. Sending hundreds of KiB of uncompressed text down rather than compressed abstract or native virtual machine instructions for example is a bigger win.
Tell HN: SSL error on HN- not accessible on Firefox
while accessing HN firefox reporting certificates valid only for ssl2000.cloudflare.com, cloudflare.com, *.cloudflare.com.
Chrome allow to add exception.
Never said that. Quit making stuff up.
Could you explain how? I thought "use strict" only added more runtime checking, but does not change the semantics. Wouldn't IE9 just interpret the line as a bogus expression and move on?
1. That's part of the design, should be apparent at most sizes but if your browser width is around the 2000px mark, it will look more like a bug.

2. Sorry about that, the issue seems related to the font metrics which results in the robot looking misaligned. We'll fix that it in the next few days. Here's how it should look correctly - http://imgur.com/pst21UO
A modern web browser will not block page loading when making a request for an image, though. I don't think blocking ads will necessarily improve perceptible page load time, though obviously it will reduce network traffic.

This does not apply for ad code that's implemented as <script src="..."></script>, which will indeed block page loading.
You are lumping everything in one category and calling it the same. This is the (can't think of a better word) falsehood of the internet.
If you constrain a problem enough it eventually becomes impossible. There is no royal road to learning hard things, you just have to put in the time.
In my opinion, 10.6 was the closest thing Apple's had to a Windows XP. I mostly skipped 10.7 and 10.8, but now use 10.9 on everything that can run it, and keep 10.6 on the machines that can't.
His belief that nuclear wars would be won by the side that disarmed the other side means that:

1. There is no limit on the number of nuclear weapons that should be built, each side should always strive for more weapons than the other side. Thus, increasing the scale of nuclear wars.

>Nuclear war is so fast that destroying a city does not provide any military benefits to the attacker nor any military costs to a defender.

2. Since the other side will not waste weapons on cities (by his calculus of attacking to disarm), mutually assured destruction will not work and therefore nuclear wars are inevitable and largely bloodless (low human cost).

3. Any time one side has more weapons it should immediately use those weapons to disarm the other side. That is, strike when you gain an advantage even if you have no good cause, since the other side would do the same.

Unfortunately present experience suggests that while cities might not be on the initial target list, once one side started to loss heavily they would likely target the other sides cities to spoil the victors post-war advantage.
Yes. Where are the downvotes? I'll chalk this up to Sunday afternoon.
> "as CM and google got more in bed that feature vanished for a while."

Is there any evidence for that? My impression (from following blogs, G+, Gerrit, etc) was that CM simply couldn't keep up with adapting their features to new Android versions for a while, and the only reason the CM11 branch is reasonably stable is because KitKat has been out a full year.
Yes! We need More brains to focus on solving real problems: clean water, education, internet access, transparency, and less "Uber for X", candycrush, Rovios, facevook, etcetera.
If you think the executive branch has no legitimate purpose in keeping secrets, you should study history.
I've done this. In a word: don't.

The digital nomad freelancer lifestyle is fine, but one of the things you need to pull it off is a steady base of consulting clients already available, preferably with long term project needs, who are ok with your remote schedule.

If you go the ad-hoc elance route you'll be competing with 10/hr workers who speak English as well as you in countries with much lower CoL who do this for a living while you're scrambling to deal with flight tickets, airbnb fees and wifi drama in foreign countries. Never mind the problems of getting compensated in a timely fashion.

The second time I took an extended working vacation, I had four clients with semi-steady requirements and actually had to turn down work so I could spend as much time on the beach as possible. Way less stressful than hustling for elance/odesk jobs on a daily basis.

TLDR; first you get the clients, then you start the travel. ditch elance and use craigslist / your personal network, the lead quality will be much higher.
Where's the research that says that the connection overhead is destroying humanity?

Back when we I had a 14.4k SLIP dialup and RTT of 200ms+ connection overhead and TCP channel overhead was a major drag on throughput but it's not like that now. I'd be surprised if there was a tangible difference to the end user.
Borden himself advocated for a one-world government, which is the opposite of the Republican, Bircher, and McCarthyist positions.
Qt has gotten much better over the past few years, but Qt apps on OS X still stick out like a sore thumb to anyone who is familiar with what Cocoa provides for free that Qt has to emulate.
On current iputils ping (seems to be default on most linux distros) you should be using flood ping for this:

# ping -f x.x.x.x

As superuser or su -c / sudo of course. You'll get a nice real time bar chart of packet loss. I use it all the time for (edit: local) network testing.
It Is Not a Problem Until You Think It Is
Got same impression. I believe there should be some hosted to get started. Plus use cases and examples easily available on the website.
Samsung Schadenfreude and the Fall of the Church of Market Share
I don't pay, I already have a VPS, so the marginal cost is free. I only run one, I don't watch that many movies and US Netflix is enough for me.
What are the risks, what's the error rate, and what are the consequences?

To start, what defines a sensitive position?

For example, Pete Seeger was a member of the Communist party in the US. He's a singer. He was castigated for his association with Communists, subpoenaed to testify before the House Un-American Activities Committee, and found guilty of contempt of Congress before an appeals court overturned it.

Is singing a sensitive position? What about screenwriting or directing movies?

We know that "Israel's espionage activities in America are unrivaled and unseemly" (see http://www.newsweek.com/israel-wont-stop-spying-us-249757 ) . That makes Israeli citizens a risk, no? What about Israeli sympathizers in sensitive positions? At what point do we declare that any Americans with a pro-Israeli viewpoint are a security risk and should be barred from sensitive positions? (Including singing?)

You mentioned overthrowing the government. Should all people with such ideas be removed from any sensitive position? We know that various US citizens to this day 'demand the dissolution of the Federal government', as for example http://crooksandliars.com/karoli/adam-kokesh-and-pete-santil... , as just one example of people who call for a peaceful overthrow.

My answer to all of those is "no". Having a strongly held belief which happens to be aligned with a foreign power's stated goals does not immediately make one a security risk.

Consider that in South Africa during Apartheid, and after abandoning the Native Republic policy in 1948, the South African Communist Party was one of the few that called for the end of Apartheid and equality of the races. The Suppression of Communism Act in 1950 formally banned the party and all those who supported communists. In practice then, that power was used to prosecute anyone against apartheid, since after all their aims were aligned with the presumed aims of communism.

Mandela was a member of the SACP and served on its Central Committee. As he wrote, "There will always be those who say that the Communists were using us. But who is to say that we were not using them?"
I miss that there are so few home games that are multi-player, without having to buy a console, TV, and another copy of the game for each player.

Even though early 80s games were crude, at least you could in many games sit side by side with a friend and go at each other in the game. Much more social than network based multiplayer.
And completely misses the point.

What matters to most people isn't that Keurig takes 60 seconds (or whatever) to make a cup of coffee, it's that it takes 60 seconds, including about 5 seconds of interaction to make a cup of coffee.

I don't use my Keurig any more, but its primary appeal was I could drop in a K-Cup, push start and walk away and then come back later to drink it.
I am not trying to extol any virtues or negatives of SCTP, just comment that for HTTP/2 to have multiplexing over a single connect without the head-of-line block problem they have to implement messages also. Seems wasteful.
It's still a dumb quote. Discounting important projects because of where their money comes from makes no sense. For example, Google's search engine is an amazing achievement. Switching to subscriptions would not make it technically any better or more useful to its users.
>We ended up having to design WebSockets to XOR packets just to fix other people's broken deployments.

I was unaware of this and became intrigued. If anyone else is curious, this is the explanation from the RFC: http://tools.ietf.org/html/rfc6455#section-10.3

Basically it's to prevent an attacker from cache poisoning an HTTP proxy (like one on a corporate network) that doesn't properly support WebSockets. WebSockets look a lot like HTTP over the wire, so without masking the wire data in some way a proxy could be tricked into believing a faked "HTTP"-looking request and response are real, and thus cache whatever an attacker supplies.

This would technically be a bug in the proxies, but it's nice to see IETF accounted for this and put in countermeasures before it inevitably became a DEFCON talk.
"I'm disappointed not to have been able to solve Tetris for width 10, but I remain firmly convinced that a player victory is inevitable there too."

Note that 'victory' is defined here as 'getting one line', not as "staying alive forever"

Regular games have the player eventually lose after getting quite a few lines. With an evil adversary, that 'losing' will always happen. See http://harddrop.com/wiki/A_deadly_piece_sequence
I doubt the parent will, for the very reasons s/he expressed. Should we not discuss things we don't like?
Backup AWS ElastiCache Redis Instance to Your Local System
While this is cool, if it can block the attacks, I think I'd rather leave it at that than have it guess at a possible fix and automatically recompile applications. That's definitely a cool experiment, but in real life I'd be way too nervous to allow software to make those calls on its own. If there was something it could subscribe to and receive human-vetted patches for a certain attack signature and then automatically recompile, that'd be pretty cool and feel a lot safer.
> Mr Duncan's trip to the US was planned weeks in advance, so he was not fleeing the country in response to his exposure.

Citation for that?
Ask: How to prepare for interview at Stripe?
I have a interview at Stripe in a few weeks. I found out that it's different than any other interview process.

http://www.quora.com/What-is-the-engineering-interview-process-like-at-Stripe

Do you know any resources to prepare for this kind of interviews? Cracking the Coding Interview doesn't help much.
App permissions are public. You can view an app's permissions by searching on Google Play Store webpage.
"Despite there being no such thing as “vision insurance” ..."

yes there is. vsp, for example.
Does anyone have a screenshot showing off the truecolor support?
First, everyone was saying that only backwards people doing backwards things in backwards places could possibly get Ebola (paraphrasing; and I am not condoning the message, just repeating it).

Now, we see that Western medical workers with education, resources, and the focus of single patients in Western hospitals are catching it. And now I feel like the message is shifting toward something like: "It's impossible for doctors to do their job without a high risk of transmitting Ebola, and even if the protocols work, it's impossible to follow them. But still: Ebola is nothing to worry about, and any significant response is counterproductive panic."

I don't know whether that's what you're saying or not. But I am done hearing about how Ebola is not really a problem[1][2]. We just don't know anywhere near enough to be confident that it won't spread.

Even if you grant that modern rich areas can control it, that still leaves an awful lot of people exposed.

[1] https://news.ycombinator.com/item?id=8161937
[2] https://news.ycombinator.com/item?id=8429867
What elected officials are you talking about?
We've got a similar idiom in Spain: "la junta de la trócola" ("trócola's joint", not really translatable, though trócola is apparently a synonym for "polea", "pulley").

It was coined for a cigar brand TV commercial back in the 90s and also alludes to a fictional part, in this case used by a car repairman to fraud a customer into paying more in said commercial.
> "Hand-crafted HTTP request parser"

Uh oh.