skysight-inc/HackerNews huggingface dataset:
Take notes folks...the above response is subtly yet beautifully crafted.

Notice how he doesn't mention "Marijuana" anywhere. In the case where that word's use would be warranted, he uses "Cannabis" instead; a terminology more commonly used in scientific discussion of the substance.

Repeated use of "Medicine" in the description reinforces the idea that they are delivering a ~medical service~ to ~patients in need~. In fact he uses "medicine" in cases where "cannabis" or "marijuana" would be warranted. Limiting references to the actual substance, and increasing references to the intent of the substance is very powerful in shaping perception.

In the last bit, the use of the full qualification "California medical cannabis patient" gives you a higher perception of legitimacy or makes it seem more "established" than to the extent that it really is.

Choosing your messaging carefully has a huge impact on how people perceive what you do and this is one great example of that in effect.

Kudos!
Google reveals SSL 3.0 'POODLE' vulnerability
http://trycanary.co/

http://www.potspace.io/

http://bakerclub.co/
I don't smoke for any reason, but great name for this.
Actually, yes.

Imagine saying "When, tomorrow?"

In most latin-based languages, you'd have only one question mark at the end, although you raise your pitch twice (on "When", and on "tomorrow"). In Armenian it would look like -- "Whe՞n, tomo՞rrow."

Exclamation mark follows the same logic, and looks like: ՜

"Hello!" = "Ողջո՜ւյն"
Q&A: Katherine Freese
I don't think a small team of people can be better than Google or Apple in building a speech to text technology. However, leveraging the tools available to help the deaf is the main idea - at least at the beginning - I think. Going forward, they will probably focus on their "Leap Motion" part of the project: from signs to text/voice and let big companies improve their text to speech algorithms that they would just use. Because that's where big improvement can be made.
There are a lot of great perspectives and threads in this discussion. If you're interested and want to develop them further, a few of us have stood up ebola-wiki.com to share data sources and information. It's a place to build on these ideas, cite your sources, and refine them. I'd welcome feedback. Also, if you are a mediawiki admin please contact me. We could use more help and advice as this scales.
At least in NYC, you can walk into any pharmacy at any hour of the day and get it for free in under 5 minutes. I know because I walked into the Duane Reade next to my building at 10pm on a Saturday and got it. It takes longer to buy a 6 pack of beer, then you at least have to take out ID.
"You're on OkCupid for dates, right? So we're trying to help"

I hope you realize that this is almost word-for-word what any telemarketer or spammer will say about what they do. They're just trying to help you!

I've never used it, but I'm guessing that people don't sign up for OkCupid because they want messages from Premium Matchmakers. You're spamming them. It doesn't matter how much you think you're helping.
It's easiest to just go straight to the source for this info: http://www.cdc.gov/flu/professionals/vaccination/vaccine_saf...

The two key points:

1. "The most frequent reactions reported after vaccination in children and adults are pain and other injection-site reactions. Up to 64% of people vaccinated with IIV experience pain at the injection site, which usually resolves in <2 days without treatment."

2. "Fever, malaise, myalgia, and other systemic symptoms that can occur after vaccination with IIV most often affect persons who have had no previous exposure to the influenza virus antigens in the vaccine (e.g., young children). In adults the rate of having these events is similar after IIV and after a placebo injection."

So other than your arm aching for <2 days where injected, the 'symptoms' are no more common than a placebo injection.
> However my point was that it is not exclusively Dating Ring doing this. It is important to consider the overall signal to noise ratio when you factor in the messages from Dating Ring and any other company out there trying to use OKCupid's platform to promote themselves.

Such situations are exactly the kind where Kant's categorical imperative applies. If something is clearly wrong when everyone does it, it should not be OK for a particular company to do.
It seems a little unfair to ding Golang for not providing evidence of something Golang was designed to avoid. "Where's all the boilerplate? Where are all the 10 layers of XML mapping? What would an AbstractStrategyFactory even look like?"
The "symptoms" are a nocebo effect, or just that people usually get the shot around the same time that they got the flu anyway. The idea that you somehow get a weak version of the flu is a misconception.
Boy would I love to see someone take this and create a reactive web library akin to what Meteor and DerbyJS are trying to achieve.
6 exists for the iOS App Store. It's a shame it doesn't (yet?) for the Mac App Store.

7 is meant to be handled by the developer or possibly by Apple, not by the consumer. If you have to manage versions manually, Apple has failed you.

8 can be accomplished by publishing the app as one of those "free + unlock" apps, but allowing the user to enter their predated proof-of-purchase to trigger the same effects purchasing the IAP unlock would. Apple disallows selling "things that are also IAPs" outside of the store—but as long as you stop selling the app through the non-MAS mechanism when you start selling it through the MAS, you're not violating the rules, because you're only validating previously-existing codes in the app, not issuing new ones. (So there's no way to purchase anything now equivalent to an IAP from you.)
Taking the decision of who is appealing away from women (and men, as if the 80% ever had any selection power) by using matchmakers seems like a promising fix to me. Although women still have the power to reject the date, they at least might be relinquished of the power to all go after the same guy (much to the chagrin of the guy who wants to fool around with all those women). Too bad I currently have so many other issues in my life more critical than wasting time in the dating scene, or I would try this one out.
Not sure if this is what they're using but there is VoxelJS[1] - it has a very healthy plugin ecosystem so you can get a functioning game up and running quite quickly.

http://voxeljs.com/
Doctors who issue recommendations have sites or phone systems that can be used to verify a patient 24/7. VaporRoom and other delivery services use these and then check the paper copy + id upon delivery.
Hacker has gone mainstream
I don't follow -- how is it an independent discovery if it was posted after complete details had already been released by Google?
ENVied, or how I stopped worrying about Ruby's ENV
For those running IIS, use IIS Crypto by Nartac Software for a decent GUI on configuring your protocol and cipher options.
I've read there was monkey to human to monkey contact, and it's acknowledged there's the possibility that was a route.
I have never understood why daily games are legal. The outcomes can be determined by random events like injuries or the weather. How is this not gambling?
A developer could do the parsing of the data better, but who's to say his spreadsheets (with I'm assuming graphs, color codes, etc) aren't providing the data visualization that makes the actual decision making clearer.

I don't know about putting him out of business, but I bet I could put myself in business with him.
Look, I don't say it was A-OK that Duncan checked "no" in the form. (Which, by the way, asks the question in several different forms, to try to capture cases where people were exposed to something, but don't know what to.) But I do wonder why people are so quick to demonize. He was not a highly educated person, he didn't know the woman he was helping and only saw her briefly, and was (or would have been, had he known) terrified of the consequences of checking "yes" on that box, both in terms of what the authorities would do down the line (quite possibly stick him in a decrepit hospital full of people dying of ebola) and what that would mean coming to grips with.

I'm also surprised that people so uncritically accept that his coming here was so terrible in any case. I would bet money that his dying in Dallas means he has infected far fewer people than if he had stayed in Liberia. It certainly serves our purposes to convince people that people with ebola should stay put but I've never heard it explained why, objectively, that is actually the case.
check out C. J. Date's Tutorial D: https://en.wikipedia.org/wiki/D_(data_language_specification...
While I agree with the point you're making, sort of, a large number of people do legitimately use marijuana for medicinal purposes, not just to get high.
Still, snarkiness aside, it's worth asking every once in a while if the problem you're solving is something that actually merits an app at all (or, for that matter, a computer).

That said, there does seem to be promise here, as there's a reason we video conference (or talk in person) rather than text-message for everything.
“Startup” Shirt
Just have the app detect that there's a new version available (via a call to your server) and prompt the user to download the new apk.

I run betas of the BeyondPod app, and it does exactly this perfectly well.
I want to run my own business for several reasons
* The challenge of building a business from ground up.
* Working for something that is my own.
* The idea that I can be financially free if I'm successful (but this is secondary)

I don't think I'm getting any of those from my jobs so far.

With regards to ideas that I've had that I'm passionate about definitely. Your second question is more of a problem in that I'm not quite sure how to gauge and maybe this is something that I should work on. I do have savings for a couple of months.

I've worked at several startups and been to hackathons, lectures, pitches etc.
Pornin's comments on SE predate the publication.
(Educated) guess: the monochrome image was simply the first wavelength band that came down. The later color image could be composed after the other bands were received.
> 5. this service does NOT discourage people from signing up for OKC, Match, POF, etc...in my view it encourages participation in those services (whether implicitly or explicitly).

As far as I understand it from the copy on Dating Ring's web page, their service is meant to replace all those dating sites. It's a fire-and-forget product that frees you from the need of maintaining an on-line profile and visiting a dating site - discouraging people from singing up for OKC is exactly what it is meant to do.
While I am firmly on the side that believes that Ebola is very serious and we need to do everything we can to stop it [1], it is possible the R0 could drop below 1 via changes in behaviour of the people in west Africa. Since we really have a poor idea of what factors are driving the spread of Ebola, it is possible that these factors could change spontaneously. For example, people might get so scared of Ebola in the affected countries that people just stop caring for the sick and throw them out on the street to die. This might be enough to get the R0 below 1 and the disease will burns itself out.

The problem is hoping for a spontaneous change in behaviour that gets the R0 below 1 is like have a small fire that has started in the corner of your living room. Sure the fire might go out on its own, but is wise to sit there doing nothing just because it might go out?

[1] http://www.tillett.info/2014/10/08/ebola-what-needs-to-be-do...
So serious question here.
Since Checkr is providing API access what prevents Someone having API access to run background check on my information ?
Lots of risk actually if you ask me. Socially engineering my information and using it against me by some stupid people puts Checkr at inherent risk.

I see multi-million dollar lawsuit coming in future against Checkr.
Asthma: Please look into Magnesium, Iodine, and if you're over weight do what you can about that too. These things did wonders for my asthma. YMMV of course.
Malaria is mosquito-borne; effectively a condition of geography. One moves to a non-malaria zone and is no longer susceptible; or one can invest in some mosquito netting and dramatically cut their risk. Caring for the infected or burying the dead does not increase the risk.

Ebola is person-to-person and by all accounts highly infectious, particularly targeting caregivers. It's a recipe for a much more severe social breakdown.

It's also clear the number of malaria cases is bounded, at a level that is in some sense "livable". It is not clear at what level Ebola will top out at; it may not be compatible with maintaining a functioning society in particularly hard-hit areas.
Feel free to vote up the suggestion on User Voice[1] so we see that more people want this feature and prioritize it correctly. I felt it prudent to leave out the suggested name, as much as I like it ;)

[1] https://wpdev.uservoice.com/forums/257854-internet-explorer-...
Poorly, I apparently missed the first term of X^0
$100 = expected cost of matches
$20 = cost on this side per match
X = probability of rejection (which leads

expected cost = cost of first match times probablity it is needed plus cost of second match times probability it is needed... plus cost of nth match times probability it is needed.

100 = 20x^0 + 20x + 20x^2...20x^n
5 = x^0 + x^1 ... x^n

The actual number is more like 72% :/
Cleaned for readability, eh? - http://i.imgur.com/faqQrQi.png
Oh my bad. What is the explanation of this part?

"given sure confidence that there is a vulnerability in a particular diff, skilled security researchers can find it very quickly."

Was there previously an announcement that a vulnerability existed, without details of what the vulnerability was?
Exactly. Playing fair and showing friendliness can go a long way. Isn't that what YC teaches, by the way?
I think when people claim that Go is a replacement for Java, what they really mean is "Go has similar performance characteristics as the JVM and also doesn't require manual memory management".

Anyone who has ever worked in enterprise software can tell you, Go is (currently) exceptionally poorly suited for that style of development. I don't think that is an accident though. I think there is at least the implication that enterprise software development models and architectures are flawed at the core. Go seems to be designed from the start to prevent you from developing that way.

I may be reading more into the Go culture than I should, and I certainly don't think that there is proof that enterprise software can't be successful, but Go clearly steers you into building small, self contained servers that do one thing well and can go without change for a long time.
> The advantage of an API token is that it protects people who re-use passwords.

As well as the other end of the spectrum, people who don't and change theirs regularly. Having access survive password changes is great (but should robably come with a "Are you doing this because you got hacked?" question on the change form to invalidate API tokens).
I see waste of $9M. There are hundereds of services running and providing background check. What's so special of Checkr.

Here comes the start-up bubble.
I like it when people try to report the account to "management".
How POODLE Happened
That would be like selling a Jaguar with a Fiat engine. Just because there are people too dumb to realize doesn't make it less wrong.

Even ignoring the point someone raised of increasing the workload of already strained resources.
In your piece, you advocate a military response. What do you want militaries to do to combat this problem? I'm terrified of this becoming a shooting war in which people suffering such horrible misery also become victims of violence intended to keep them "away."

I don't want tens of thousands in west Africa to die of ebola, but I certain don't want them to die lonely, thirsty, and ducking for cover. :-(

It seems like the most important tactic for reducing the R0 to <1 is building isolation treatment centers, yes?
Sounds like an interesting project. Where would one even get this data from? Scraping ESPN is always an option (a painful one at that) but I'm not sure they would appreciate that.

Edit: After a quick Google search I found several data providers: http://www.quora.com/Are-there-any-APIs-with-game-schedules-...
This isn't how satire works. Satire usually has a point.
Sure, but manual vendoring is just one (tedious, error-prone) means to that end. Any sane package manager with something akin to lockfiles gives you the same guarantee without all of the headaches of vendoring (and unvendoring when no longer needed!) all of your transitive dependencies.
Of course! I completely agree with you, but at the same time a large number of people also just like to get high, and there's nothing wrong with that either. In fact it's so incredibly easy to get a medical card that I'm sure a very large percentage of card holders just like to get high (again, nothing wrong with that, we should 100% legalize it imo).

Anyway, I'm just saying that when you start a service like this, it's effectively an uphill battle against public perception (for now) and I think these guys are doing public messaging the right way.

Even when you go to their website they say "cannabis based medicine" not "cannabis" or "cannabis products".

It's what they are signaling about their service and about the product through their delicate use of language that's interesting.

It's a stark contrast to real doctors who don names like "THE 420 DOCTOR" (I'm not making this up), or services that might choose names like "Speedweed".
I'm interested--send me a pm
Yeah, i get barely-formatted content. Something is definitely going wrong
It is certainly gambling, but it's explicitly legal under certain conditions per the UIGEA. And there is definitely a skill component as well.
Sure, but that's orthogonal to what's being discussed here. You don't check your compiled binary into source control, but proponents of vendoring do check their (transitive) dependencies in.
Disabling SSLv3 will indeed affect a significant amount of clients in the real world.

I've seen a few commenters here on HN that point out that pretty much everything since Windows XP (ignoring IE6) supports at least 1.0 of the TLS protocols. While that may be correct in theory, in practice it's not.

At a 1MM+ visitors/week site we still see a few percent of our users that regularly connect using SSLv3 across different versions of Windows, including more modern ones such as Windows Vista, 7 and 8(!)

Though I'm not sure why this is the case, antivirus software suites such as McAfee[1] have in the past been known to disable TLS 1.0 system wide in Windows.

[1] http://answers.microsoft.com/en-us/ie/forum/ie8-windows_othe...
> So, do you consider the Go1 compatibility guarantee to be a mistake?

No, I think a language basically has to declare that level of compatibility for a major version. The important part is to get as much real-world feedback and iteration in as possible before you bang the 1.0 gong.
This being HN, I'm sure curious as to how this works on an OS level. Anyone have any ideas?
Please tell me (pun intended) how the hell you're supposed to be civil if being civil leads to you being accused of pretending to be civil for ultelior motives? This is stupid.
Showing my age, but until I read the full headline I thought this was a JavaScript client for the Gopher protocol...

http://en.wikipedia.org/wiki/Gopher_(protocol)

Time to pour one out for protocols loved and lost...
Judging from your landing page 4 out of 8 users of your service are gingers... is this a service for people blessed with red hair?
http://leafly.com
http://weedmaps.com
The Mac ecosystem isn't walled like iOS. Its app store is just a convenience - most applications can be downloaded from their websites in the same way as the Windows EXEs you're familiar with. Apple isn't the final arbiter of what can be sold or what you can install.
Revealed: ISPs Already Violating Net Neutrality to Block Encryption
Weird, IBM has been trying to replace bare COBOL with higher level languages for years.

Probably not even "years", and closer to "decades" at this point.
Mac development is still reasonably open. Distribution on the Mac App Store is not, and the limitations are crippling. It's not a matter of convenience -- you simply can't sell a sophisticated application on the App Store, and increasingly, you can't take advantage of platform features without it.

You want iCloud sync? Take out the ability for users to access their own home directories and files. Take out the ability to have plugins of any sort. Take out any functionality you wouldn't expect in an iPhone time-wasting app.
Agreed, yep, just haven't had time to implement that yet!
There were exemptions for fantasy sports made under the Unlawful Internet Gaming Enforcement Act. Basically, it's legal to 'gamble' on fantasy sports given the following conditions:

1. The prizes offered are established ahead of time (fixed prize pool, most sites implement this by capping the number of entries - and covering any overlay if not enough people enter)

2. The scoring is based on statistical results in multiple-real world games (none of the DFS sites allow you to 'bet' on a single games - the players must come from a pool of at least two NFL games)

3. Can't make "traditional bets" (spread, over/under)

(And less revelant to most people, you can't play fantasy for money if you are an member of the team - i.e. athletes can't 'bet' on themselves)
If it takes a lot of karma to save a soul, maybe we can pool our collective scores to save more?
They are legal because the courts and legislation(such as the UIGEA) have deemed them to be legal.

I don't understand what seems to be a distinction between daily games and season-long leagues. Season-long outcomes are affected by injuries and other random factors as well(just ask anyone who drafted Adrian Peterson with their first pick this year).
To business owners and large sites operators out there: before disabling SSLv3, make sure that none of your clients/customers/users are stuck on IE6. We still see significant IE6 traffic coming from China. Some legacy clients are also stuck on SSLv3.

As a general rule, review your logs before disabling things. And ask your users to use modern browsers as soon as possible.
Yes, there was: https://news.ycombinator.com/item?id=8452931

That announcement implied that the vulnerability was SSL 3.0 only. Knowing that, the obvious place to look at would be the differences between SSL 3.0 and its successor TLS 1.0.
There was a lot of Twitter traffic about SSL3 being bad. But TLS1 has very few differences from SSL3.

In Heartbleed, we knew that it was introduced with a particular OpenSSL version. That had 12 changes; 8 were DTLS. Two were clearly not relevant. One was heartbeat. Dan Franke took about fifteen minutes to go from that set of inputs to a sketch of heartbleed.

I now advocate QA by what I call "virtual tests": you don't have to write the tests, just the failure messages. Developers will do the rest of the work on their own.
Awesomeness and Usefulness for Web Developers #7
Does this actually work in address bar? Both FF and Chrome open file://... URL if you type //...
Yes, they did. "Everyone that went for them came down with a mild flu after the shot."
If you absolutely have to use IE6, go to Internet Options's Advanced tab and check TLS 1.0 and while you are at it uncheck SSL 2.0. But of course the preferred solution is to upgrade and while you are it please also update to XP SP3 if you hasn't already. There is no WGA check in WinXP service pack in general, despite such misconceptions.