skysight-inc/HackerNews huggingface dataset:
Designing Tomorrow's Air Traffic Control Systems
£400 + VAT, UK.

PHP Developer and not even a top notch one, i'm solid, but no rockstar, i am however full stack and I have other generic business skills. I also have an excellent portfolio with some very large names on them as well as almost 10 years experience doing this.

You dont need to be an amazing developer to be successful, i'd actually say theres actually more value in getting complimentary skills rather than the last 10% developer skill which is what takes the longest to achieve anyway.
This is exactly the type of FUD story that cable news networks love to run.
The Rating Game: How Reviews Impact Those Who Create
Minisat is definitely on my read list; I'll probably need to read it 2/3 times to fully appreciate it's content. Thanks for the "superoptimizer" pointer, I'll explore that.
I'm wondering if the time spent on the plane, or in the car, gave her some "think time". Away from the demands of both company and family.
Docker and Microsoft partner to bring container applications across platforms
Even with only six months of experience, €15 is really low for a freelance rate in the Netherlands. Remember that you usually need to reserve about half of your rate for taxes, rent, investments, etcetera, so you're actually getting paid less for freelance jobs than with your regular job.

Freelance rates i've seen in the Netherlands usually range somewhere from €50 on the lower end to €120 on the higher end.
Would it be better if password managers were built into devices in the first place, laptops, phones, etc.?
Like a bank is going to offer trade finance on this?!? Seriously. That should be clue enough.
My current daily rate is $1,200 USD/day. I work in the United States.

I work as a Ruby Developer. I have 16 years experience in software development and 9 years Ruby experience.
How does a microprocessor work – from binary to gates to photolithography
Using SMS for this may work better than email. Email passwordless tends to get bogged down in little problems. Like the email is slow or goes to the spam folder. Or on mobile, clicking a link in an email may not take you into the web browser you actually want to use the app in. SMS at least should improve on these two problems.
Why should I as a developer use your service over, say, Toptal, where I can get paid for the same service? What's your USP? Where is your advantage?
FOXACID Operations Manual
Google just consistently take the easy way out. It's the automation thing where they still act like a tiny company that can't afford to solve a problem that will need actual people to resolve it, and so make business decisions based on "which of these options can we automate?" over almost everything else.
Also announced by Microsoft:

http://news.microsoft.com/2014/10/15/DockerPR/

"Microsoft Corp. and Docker Inc., the company behind the fast-growing Docker open platform for distributed applications, on Wednesday announced a strategic partnership to provide Docker with support for new container technologies that will be delivered in a future release of Windows Server."

I strongly suspected that Windows Server vNext would have some sort of 'container' support after the wild success of Docker.
google "translate robo"
Would be awesome to have Microsoft Office as Docker container.
What I want is to be able to transform relations in a certain order for ease of reasoning (and introspection of intermediate values), but then have the optimizer transform it into whatever equivalent plan it can determine that gives the same results. Of course, there may be places where the steps taken will over-constrain the optimizer, but that's probably an acceptable risk (and as long as we're wishing for things here, that should preferably be detected).
Passwordless would allow you to do that quite easily. Only risk are the shorter tokens (can be balanced by shorter validity, though). There is a short description of how to do it in the documentation
Show HN: Taskfort – A hostable kanban solution at www.taskfort.com
Taskfort is open for beta right now..

A couple of key points, once you purchase the license you will have full access to the source-code, it also supports real-time editing of the same kanban board courtesy of socket.io.
"Hacker" meaning a good programmer, not hacker as in someone who maliciously gains access to systems.

http://www.paulgraham.com/gba.html

http://en.wikipedia.org/wiki/Hacker_%28term%29#Hacker_defini...
With name-based virtual hosts (those that rely on the server selecting the appropriate resource based on the Host header), typical clients depend on the IP address returned by DNS for that host. If they visit that IP, ask for the host, and the server isn't configured to deliver that host's resources, it's good practice to give the client an error. Since the web server has to listen on that IP without knowing which host will be requested before the connection is made, it's convenient to have a fallback and handle errors there. I deny all access to the default host, which generates a 403 Forbidden error (with a custom message), but there are definitely other ways to deal with this situation.

The important thing is that a host's protected resources are served only when SSL/TLS is properly negotiated. Serving one host's content as the default when another host was requested violates this.

In practice, nearly all of these requests come from bots, crawlers and penetration testers. So another advantage is that the log entries can be used to block further requests at the firewall, freeing resources and even possibly protecting the server from undisclosed vulnerabilities (test this approach carefully to make sure it's appropriate for your site and doesn't subject you to a DoS).
Russian 'Sandworm' Hack Has Been Spying on Foreign Governments for Years
Clickable link: https://www.taskfort.com
How about a review of the top password managers.

I've been using Keeper but the last software update spooked me (couldn't access db). Thinking about migrating to LastPass. Ideally want to store more than just passwords. For example, images of personal and business documents.
Is there any advantage of this over using Oauth to 'Sign-in with Google/FB' other than being platform agnostic? similar workflow except tokens are being exchanged between server-server vs sever-email.
Nice, do you mind sharing which region you work in?

I'm in the midlands and lucky to get £350 and have been pretty lucky to work with some huge brand names to make my portfolio shine, but clearly this isn't enough!

Even with years of ZF experience I still seem to struggle to find good interesting contracts in the region.
1 seems completely orthogonal to the issue of authentication, and I'm not sure what you mean by 2; basically every site on the internet is built on the premise that your email is secure, and again I don't see how password managers are relevant here.
Rdio just charges more on iOS. "Rdio costs the price you see if you subscribe via Apple’s in-app subscription service. This price difference is due to Apple’s policy of taking a 30% cut of subscriptions that occur through their service."

I didn't think Apple allowed this, but they are doing it.
Malicious worm seeks vulnerable home data stores
Account recovery emails should probably use one time tokens, meaning that after you click on the link once, the link becomes invalidated. This would largely solve the issue with point b.
they keep doing it.
How do I know I'm worth what I'm charging?
How Losing Fast Will Boost Your Sales
The very website they link to [1] via its HN thread [2] states correctly that:

"No, email is not a secure medium. It was never designed to be one. It’s susceptible to Man In The Middle (MITM) attacks and a slew of other issues. Users might also have their email accounts abused or hacked into (how many people do you know who have left their GMail logged in on a public computer?). And what about if their email provider gets hacked or their backups stolen?"

Mozilla should know that email is not an adequate medium for one-time password delivery.

They are replacing strong authentication (2 factors) with its second factor alone.

[1] http://plaintextoffenders.com/faq/devs
[2] https://news.ycombinator.com/item?id=7943365
"Let's get some scary-mathy-lookin stuff up there on Ebola"

That was funny. Yup, math is scary to a lot of people. Sad statement.
We do already vote on local elections, for our local government. So I guess the same rules will apply.

Every spanish person is registered to vote on the region he is living at. If a "consultation" was to be done, it could use that same registry.
Hi! I'm one of the developers of the Sentry. Someone suggested I do a little intro bit here, so here goes.

The Sentry stemmed from over a decade of doing traffic analysis (from a security perspective) for local small and mid-sized businesses. We had a great conglomeration of tools (ntop, cacti, snort, some custom connection indexers, etc), but it was almost impossible to use effectively if you weren't the guy who made it.

We wanted our clients to be able to monitor their own network, so we set about making the Sentry. The primary feature of the Sentry is usability. Traffic analysis is typically hard. There's no reason it needs to be.

We would love to have any feedback you guys are willing to offer. Hackernews is famed for it's frank discussion. Bring it on.
Scientific Keyboard for iOS 8 (Free)
I started my own business after becoming stay-at-home dad. I know many parents with their own company, startup is good way to escape corporate cubicle, and spend more time with kids. Not sure why being parent as something worth mentioning here.
I do not know Haskell enough either. But I didn't really mean 'using type system everywhere'. About your question, from what I've seen you can always go symbolic : define an abstract thing as twofourteenexceptten that represent that idea and use it. Or just use a filter everywhere to ensure that function requiring a 2and14but10 won't be called on something with other numbers. In that case you're not losing anything you'd do with a dynamic language.
How do you think Spain takes advantage of Catalonia, exactly? If so, how can this independence call be effective in avoiding that? Finally, what will you win and what will you lose of you do decide to become your own nation?
No, except that SSO via such a service is more secure than the email approach. However, being platform agnostic is quite an important reason.
'Civilization: Beyond Earth' Introduction Paints Our Bleak Future
The Spanish Constitution recognizes the existence of different nationalities in Spain but doesn't specify which ones and in fact this usage of "nationalities" in the Constitution has been interpreted as a way to avoid mentioning the existence of nations within Spain. The passport only states the city and province where you were born. This means that, legally, Catalans cannot be distinguished from Spaniards. A census of residents is normally used for local and regional elections.

There is an id card (DNI for Documento Nacional de Indentidad: National Id Document) which is mandatory over a certain age that is commonly used in legal and commercial procedures (for example to open a bank account or to pay with your credit card) to identify people. There is an equivalent document for residents (NIE).

These are the documents normally used to identify yourself when voting and this was the plan for November 9th. Now that the Spanish Government has legally blocked the voting from happening the Catalan Government has presented a new method to allow Catalans to vote about independence and this method will not utilize any type of census of the Catalan residents (the reason for this is to avoid more legal attacks from the Spanish Government on that basis).

As far as I know the DNI and the NIE will still be used to identify voters. There is another document ("padró municipal" in Catalan) that proves residency in a city, which could be used to make sure that only residents vote. Most technical details haven't been revealed yet (this method was presented yesterday), so I think it's not currently possible to add more to the answer.
From many interviews with potential users and beta users we know Student Users need lots of ways to connect with help. Of course, we're in the early stages so the USP isn't nailed down but it's been built upon the results of the interviews. It's definitely free though, so if you want to get paid to help people that's cool this isn't a useful service for you to provide your expertise through.
An Introvert’s Guide to Networking
I think you're sorely mistaken about lawyer salary.
The vulnerability only shows the last byte of the cypher block, but the authors of the exploit allow you to decide where the last byte of the block will be, therefore allowing you to view pretty much any byte you want.
This looks suspiciously like OpenID with the identifiers changed from URLs to email addresses and updated to use modern pop development tools.

I really liked OpenID, even though it had a few issues. The best part was that you could put a few HTML tags at the URL you used as your identity and delegate the authentication - but not the identity - to a 3rd party. Because you controlled the identity, you could drop the 3rd party and use someone else (or implement the OpenID protocol yourself locally) just by changing some tags.

If "Passwordless" can provide this can provide the same level of autonomy, it could easily become my authenticator of choice.

It looks like it's tied to an email account? Slightly annoying, but trivially worked around if necessary.
That's the dumbest argument ever. You are comparing one of the most expensive bitcoin ATMs with the cheapest traditional ATMs. "But, but" is the core of your argument.
It's also odd because Kell only specifically accuses the Snively/Laucher talk of committing two of the "seven deadly sins", and that isn't one of the two.
They did the same thing for the video from the moon. The feed from the lander was displayed on a TV in the control room,and then that TV was being filmed by a camera pointed at it. If I remember correctly it was to do with a different format than used by the US television, and lack of equipment which could covert such material in real time.
> They are replacing strong authentication (2 factors) with its second factor alone.

Are they? They don't mention anything about replacing 2 factor here.

A typical login is compromised if you know the password or if the email is compromised. This is not increasing the attack surface.
My current daily rate is 220€ / day (after taxes), I work in Luxemburg (average of 19.5 days / month).

I work as a Java Developer/Architect with 7+ years of experiences, with very good skills in both backend (Java, Spring, Oracle, PostgreSQL, redis) and frontend (JS, jQuery, AngularJS, HTML5, etc..), REST/SOAP, plus some mobile stuff (Android, ionic) and all the tooling that goes with Java (maven, sbt, ...).
I feel you are being disingenuous in your disagreement - that you're deliberately trying to be combative as opposed to engaging in honest discussion.

Clearly, goals can belong in several umbrella categories at the same time. Most people would agree that "not harassing women" falls under "not being a bad person." But, at the same time, it is also a major goal of most feminists.
How much do you value your privacy?

How about I generously offer you $1 per month? Feel insulted? it's exactly Tsū's plan.

(consider fb has 1.3b users and it's q2 earning 2.9b, $1 per month is indeed a generous offer)

joke aside, the fact is, when you talk revenue sharing to users, they/we always over-evaluate ourselves, and you can never match the expectation.
Here are Glenn Greenwald's thoughts on the matter.

https://twitter.com/ggreenwald/status/522367722827841536
How to Check for SSL POODLE / SSLv3 Bug?
Ask HN: Please suggest ideas for a crowd-cause platform
We want to create and support a not-for-profit online crowd-cause platform for Internet: http://InternetCause.org and would love to hear some ideas/suggestions about what would be the best thing to focus on. We would love if people would participate in building it here together: https://github.com/InternetCause/InternetCause.

We already have few ideas as "sponsoring a child" or "volunteering on demand", but they are very generic and there are lots of other similar organizations already. We wanted to do something more and effective using the power of online crowd.

Edit: Typos.
A Data-Driven Guide to Contagious Headlines on Medium
Show HN: DSAuth – Passwordless authentication using ECDSA
DRM free online gaming platform from GOG
Who is "they"? If your home was being invaded, as France was, you'd do it too.
Password managers are a better solution to prevent people from memorizing a lot of passowrds....Copied straight from the article "there is no risk of users reusing passwords"......That is what they have to do with this conversation.

1) isn't completely orthogonal to authentication. Good security products need to help you maintain good OpSec. Pretty much all password managers have features that try to help users maintain good OpSec and cut down on the mistakes they can make.
$200 to $300 per hour for software development.

$300 to $500 per hour for hardware development.

FEA and Simulation time charged by CPU-hour so long as they can run unattended (which is generally the case).

Usual contracts are fixed price with tight specs and hourly rates kick in for changes.
The number of people whose "luck and connections" come from "skill and execution" is smaller than the number whose "luck and connections" come by accident of birth. This is true no matter where one lives, or how one wants to leverage his own skills.
OS X and iOS have this, it's called Keychain, and it even works cross-device[0] totally securely[1]. Safari recently (I can't remember when) started suggesting passwords, too. Being built into the OS makes it an order of magnitude more likely to be used than a third party application, in my opinion.

[0] http://support.apple.com/kb/ht5813

[1] i.e. Apple (claims it) can't access your passwords, despite syncing them across devices.
Would you really not play if they give you the option to rebind keys? I've jumped through many worse hoops trying to play Japanese games that I was under no delusions of being the target audience for.
> So Atwood's Law again.

Not really. There is a big difference between writing manually and transpiling into a dialect.
It really feels like a vicious cycle at times, doesn't it? Nobody uses it because it's slow, it's slow because nobody uses it.
Live by the Google Sword, Die by the Google Sword – Future of Metafilter
My guess is CURL-based bots will fail (CURL had some problems with TLS 1.2-only auth), custom-written bots may too depending on architecture and (maybe) used openssl lib vesion. For browsers support see http://en.wikipedia.org/wiki/Transport_Layer_Security#Web_br...
http://en.wikipedia.org/wiki/Transport_Layer_Security#Web_br...

You would probably break your site for a lot of your users.

> The newest stable Fx and Chrome, including mobile, will still work, right?

I think so.

> What about various web services like rss readers

They should be fine.. unsure. I presume most web services use openssl.. and thanks to heartbleed they should be using latest openssl libraries.

> or the google bot

I doubt googlebot would have issues scraping you, but I dont think google would rank you well if they knew your site would be broken for significant chunk of users.
This seems like it could be useful. If I'm not getting answers from stackoverflow or my questions don't really fit within the Q&A framework of other sites then I likely have a very specific problem or concept I am trying to get a handle on.

This doesn't seem to facilitate that kind of specificity. For instance, I have a question about best practices for setting a mobile version of a desktop single page application. As specific questions they vary from, "Should I create a separate mobile site, splitting my codebase?" to, "Should I treat tablets as desktops with touch events?" or, "Can I rely on testing tools and emulators to test a mobile site or should I be testing on actual devices?"

I don't really want to search for people who claim they know css and javascript and then have to go through a vetting process to determine if they can actually help me.
I'm in Birmingham. There isn't much dev. work in the West Midlands in my experience. Most of our work comes from London and further afield. Rates depend on the nature of the work, but 2-4x what you quote is a reasonable range. (I work primarily with Scala. I don't do paid work 5 days a week as I have longer term projects to work on.)
I'm curious, how did you become so productive within 2 years? Did you start with JS/Angular from the get go?
Google Executive Chairman: Amazon Is a Lovely Place to Shop and Search
Nick Stinemates @ Docker here. I run BD/Tech Alliances. A lot of blood and sweat went in to this one! I'm here to answer any questions you may have about the announcement, the details, or anything about Docker.
Is that before or after taxes? As a contractor?
Check this jobboard it has numbers (daily when you select Job Type Contract): http://www.theitjobboard.co.uk/
But unfortunately only for jobs in the UK.
Where are you based out of? And how do you maintain a steady flow of projects? Is it mainly through your network or client referrals?
Wouldn't it? Also imagine, every time you do a build inside of something like Visual Studio, being able to test and distribute that in its own container.

The tangential benefits/integrations start to get really interesting.
Why not? They get a commission. Banks issue close similar deals (letters of credit) all the time for single-container shipments in international trade. A 20K transaction is certainly not below their notice, they have entire departments specialized in services for small business. The less trade volume you have with them, the higher their commission (in %)!
100% Test Coverage means that every code path is executed by the test suite. This is probably a good thing.

Yet it does not mean that the code is correct for any definition of "correct" other than "passes the associated test suite." One unit test makes a line of code covered. It does not make the domain of inputs covered - 100% coverage does not mean that corner cases have been handled correctly - or that they have been considered at all. Again, all it means is that every line of code was executed at least once.

There are useless tests:

def test167 [
if [ val == foo(8); return true]
then return passed
else return failed
endif ]
enddef
care to expand on what "the European lifestyle" means?
Joining 1M tables (PostgreSQL)
Writing a brainfuck interpreter in Elixir, part 1
In general email is more protected than other passwords: people understand that they need to protect their email.
It is not necessarily linked to an email account. It's up to the lookup middleware that has to be programmed by the implementer how to translate the login into an email address / phone numbers
Yes, mistaken. 3yrs experience at $1000/hr? Not to mention the rates you see are usually firm rates not net to an individual so you have to take out other costs.
very smart move from Microsoft's part.
Thank you for your advice, this is seriously helpful. Re: Business, this was only a short-term contract that started after a startup I work for was acquired. I'm not a contractor or a businessman, and I'm already back working as a permanent employee somewhere else now. That my bank is in California while I am in Massachusetts makes raising hell a bit more difficult. Why it is an "emergency" has more to do with family law matters and less so that I can't put food on my table.

Thanks again.
One of drawbacks of this mechanism compared to Persona is that a web server needs to be configured to send emails with tokens using site's own email credentials. This isn't easy to setup reliably for a small site. A malicious user can easily trick the server to send many tokens to different accounts and cause the sending email to be included on spam blacklists.
His effects were probably returned to his parents. They probably didn't bury him with is hat on.