skysight-inc/HackerNews huggingface dataset:
> Anyway, if anyone who is contributing to FF reading this I just want to thank you for best browser ever.

Thank you. The web is full of criticism, so it's nice to get compliments sometimes.
Having jumped back into some green field work in Scala in the past few days, I will say I'm quite impressed with the improvements to the SBT, IntelliJ, universe. Compile time seems to be improved considerably (though the project is still quite small so time will certainly tell).

One problem, which is also one of the advantages of scala is that the interop with Java often means that all your Option[] etc code can still get NPEed by some offending Java Lib you've decided to use.

As the fidelity and ubiquity of pure scala libs improves this will hopefully go away to a some extend.
Check me on this: The TLS_FALLBACK_SCSV will prevent downgrade attacks, yes. However, any "real" SSLv3 connections will still be SSLv3 and still fully vulnerable to the described attack. Downgrading is not a necessary component of the attack, it just increases the number of vulnerable client/server combinations to include those that would normally not be vulnerable due to negotiating TLS1.0+. Therefore, if you are in a position where you truly care about security and the fact the SSLv3 has such an enormous hole in it is unacceptable, you should still be looking at simply turning off SSLv3 as the only acceptable mitigation, even if that does cut some clients off.

Yes?

(Except please note for the purposes of this question I'm assuming as a given that cutting off SSLv3 is considered preferable by the entity in question to a very weak SSL negotiation. Whether or not any given entity should have that opinion is a different question; I politely ask that you get into that question elsewhere.)
> The house is taking 8 - 10% rake meaning you have to have a 60% winning percentage just to break even.

That's only correct in a constant sized market. In a growing market with lots of new money coming in, its much easier to win. When growth stops, it becomes much more difficult. The vast majority of remaining players start losing, only the house (and maybe a couple sharks) can win consistently. Assuming a market in continual decline, eventually everyone loses (except the house).

Nate Silver devotes a chapter to this in The Signal and the Noise. He goes through the numbers, anecdotally supported by his experience during the online poker boom.
New Social Network That Pays You for Interacting, Taking Early Signups Now
It hasn't rooted anybody's phone calls for a long time. Even Ericsson doesn't use Erlang based phone routing anymore...
I wish I had someway to up vote this post to the top of HN. I feel like I am in a theatre on fire and everyone is ignoring it and just complaining that the smoke is blocking their view of the stage.
I think there a strong case of prescience there. It is not unreasonable that we will have systems whose time tracks to the beginning of the computing epoch in 1970 long after we forget what 1970 was (assuming we don't kill ourselves first). Just think of all the layers above that today and add a few thousand years.
Do the Firefox releases have anything to do with the Spidermonkey releases? I've been seeing the placeholder page for Spidermonkey 31 for a couple of months now...
Turbo Pascal used a similar scheme, but they split every source file into an "interface" and an "implementation" section. The interface would end up as information exported to other modules, but in binary form. No other part of the process had to read the original source file.
I'd also recommend this, with the caveat that the built in javascript rendering engine isn't that great. The workaround is to load the page with phantomjs, and then send the computed DOM (w/ the JS stripped out) to DocRaptor / Prince.
Several days of shedding virus. Also, with influenza, you start spreading virus before you have symptoms. So keeping away from people once you notice you are sick isn't enough.
I've said the same thing about the early days of online poker to people putting money in those sites. Have fun and all but watch out for the regulatory hammer.
Not really. Moore's Law over 50 years.

http://observationdeck.io9.com/comparison-of-lunar-module-na...

Too bad other fields haven't progressed. Commercial supersonic flight, for example, would be nice. In 1970, I'm sure they would have predicted 2-3-5 the speed of sound by now.
a+b+c=a.b.c when a=-b and c=0
Scala gets a lot of things right by default. Also it got a lot of flexibility and power. Almost "a framework" to write other languages within the language.

Use it every work day for over two years... Like a lot, but sometimes wishes it would be a bit simpler and more aesthetic.
Show HN: JSX a faster, safer, easier JavaScript
AFAIK masks for old processes are cheap. I don't think the Avalon Bitcoin ASIC guy spent $1M for his 130 nm NRE. There are also shared mask services like MOSIS.
> Adblock is known to consume something like 40mb per tab open for example

Nope. It's more like 4 MiB per iframe.

ABP is a well-written extension, and I am 99.9% certain that it is not the cause of a Firefox instance taking up 21 GB of memory. Please don't spread misinformation.
Lots of feedback here seems to be very critical and for the purpose of pointing out everything you've done wrong. That's totally fine, and exactly why posting to HN can result in useful feedback. I just wanted to say that I think you have a great idea here, and if in the future, I find myself single again, I'll take another look at your service.
this is data vis now? repeating what the @#@#$ graph is already showing you?
There are plenty of companies that do FPGA-to-ASIC conversion. Gate arrays can also be an intermediate step that only require a small number of mask layers instead of a full set. This diagram is interesting: http://www.easic.com/products/easicopy-cell-based-asic-migra...
Content and Social Media Marketing Intern
We're an off-the-record YC company that's fresh out of the winter '14 batch and growing fast. Everyday our clients call and email to say that we're making them happy. And that feels great.

We are looking to hire a content and social media marketing intern to conduct research, write a few blog posts per week, manage and grow our social media community, write and promote press-releases, and help with various other marketing initiatives.

Come learn about the way a fast-growing startup works and use your creativity and passion for writing and marketing to help us build this company. Work with a down-to-earth, smart, and experienced start up team who will offer enough guidance to help you succeed and enough autonomy to have a real sense of ownership. Build your digital marketing skills and help us continue to accelerate our growth.

We're looking for people who are curious, and clear communicators. People who love digging into complicated or intimidating subjects, and pulling out the important, urgent issues at their core, because what we're doing is important, and it is urgent. We're attacking a wasteful, insecure part of the home-buying process that costs Americans $50 billion a year, often causes them enormous stress, and sometimes exposes them to scary things like identity theft. Help us change an enormous and antiquated industry to make home buying better for consumers.

Responsibilities specifically include:

* Writing blog posts that are informative and human, useful both in- and outside of our company (this means technical content written in fluid prose)
Communicating with influencers in our industry, writing press releases, and pushing them to different PR channels
Building our community on social media, helping us spread the word about the important work we are doing and establishing our voice within our industry
* Other various and sundry marketing initiatives from SEO to event planning and more

What we're looking for:

* Someone who can write clearly and persuasively
* Have some experience with social media (ideally for a business or startup)
* Be detail-oriented (with nicely organized details to prove it)
* Eager and driven (while still courteous)
* Experience with real estate or mortgage is a HUGE plus (but not required)
* Someone who can work 10-20 hours a week, (in our San Francisco office and from home)
* This is paid (by the hour)
* Students welcome - turn this into a work-study project and have a clear mentor within the organization

Send us an email to fintechw14@gmail.com telling us about yourself. Please include a resume and writing samples.
The end of https://www.imperialviolet.org/2014/10/14/poodle.html talks about this better than the several paragraphs I just wrote in a draft comment. So go read that.

tl;dr: practically, yes, we want to move away from SSLv3 ASAP, though it isn't totally broken yet.
https://zmap.io/sslv3/ - "POODLE Attack and SSLv3 Support Measurement"
No. There was a port of real Firefox to iOS.
Is there any hope for a workflow similar to clojurescripts? It's very nice to have your page hooked to the repl and be able to re-evaluate pieces of code then have the page functionality change without constant refreshes and recompiles.

Edit: I want to expand on this a bit. I'm curious about how the workflow is now and what's envisioned. Things like the above mentioned and also LightTables insta-repl make for great workflow value propositions. I very much like Clojure, but I like Go as well and have written much, much more of it. So this is very interesting, but.. Do I need to write the Go code blind, then compile to js, then refresh and test my page to see what's going on?
Curious - Does anyone know the legality of providing a username and password and passing it through to another site that doesn't have an API/oAuth? Is it all based on the ToS of that site? It sounds like IFTTT does it / has done it. I'm really surprised by that. Isn't this a big no-no?
Ugh. Definitely not Bartlett's material. I now see why pg writes down all his presentations.
Sounds right, and I think that's covered by this:

> Disabling SSL 3.0 support, or CBC-mode ciphers with SSL 3.0, is sufficient to mitigate this issue, but presents significant compatibility problems, even today.
I have no idea how to play.
SSL3 “Poodle” Vulnerability
No information on those 115 strains, the quantity, etc. For example, many probiotics contain Enterococcus faecalis (the name is self-explanatory) - a very questionable strain to put into your body. So, without any specifics on the 115 strains, I'm really gonna stick with Garden of Life Primal Defense Ultra.
A Math Model Is Predicting the Ebola Outbreak
It's legal because no major industry has turned their lobbying efforts on outlawing it yet. There's no clear philosophical line between gambling and, say, investing.. there's just (decreasingly) moral crusaders and (increasingly) interests who profit from keeping things illegal outside of their personal holdings.
Why 'Clicker Heroes' Could Be the Top Mobile Game of 2015
The problem is not just ahead of time compilation. This has been available for a long time on Pascal, OCaml, Ada, and even Lisp. C++ offers access to lower level programming constructs that makes it very efficient to program things like games, numeric algorithms, device drivers, desktop applications, and many more areas that depend on these C++ features.
NEW the Best Vines of October 2014 part 1
Terror threat against feminist Anita Sarkeesian at USU
I'm actually surprised you didn't overfit the data until the backtests showed you had a profitable algorithm. I bet most people would've done that.. I'm curious, what kind of algo were you training?
How big data analytics is helping to contain Ebola
It remained me of GWT that is disappeared for a long time. hah
scrypt was intended to be memory-hard but it failed somewhat. There is a time-memory trade off that significantly reduces the amount of memory needed. Then the altcoin people also used scrypt wrong, setting a memory size of 128 KB which is trivial to include in an ASIC.
Here are some:

http://en.wikipedia.org/wiki/Oracle_Solaris_Studio

http://en.wikipedia.org/wiki/HP_aC%2B%2B

http://en.wikipedia.org/wiki/IBM_XL_C%2B%2B

Notably, each of those can target an OS and hardware architecture made by the same vendor (Sun Solaris/SPARC, HP UX/PA-RISC, IBM AIX/POWER).
We can't act on vague complaints. We need data.

Fortunately there's an easy way to get it. Can you visit about:memory when memory usage gets high, click on the "Measure" button and post the results here, or email me, or file a bug at bugzilla.mozilla.org and put "[MemShrink]" in the "whiteboard" field? Thank you.
Ask HN: Ideas and the ability, but burned out working alone
So I've a few ideas for "lifestyle" businesses that could potentially grow into something more. They are eminently bootstrapable, but I'm tired of working on things alone. I start making progress, then fizzle.

And, while I'm strong at tech, capable at business, and able to network for business reasons, I suck at making the kinds of connections that could turn into cofounders.

I put it in a similar bucket to being able to make friends, something else I'm not particularly good at. Anybody have any clues for overcoming what goes well beyond normal introversion?
I've done that since before security.tls.version.min existed (the pref had another name before, and allowed nonsensical combinations like allowing TLS 1.0 and SSL 2.0 but not SSL 3.0).

But Firefox 34 disabling SSL 3.0 by default will disable it even for nontechnical users. That should force the remaining non-TLS-compatible servers and middleboxes to be fixed.

On the server side, hopefully the knee-jerk reaction of disabling SSL 3.0 will have the same effect, forcing the remaining non-TLS-compatible clients and middleboxes to be fixed.

That could allow for the SSL 3.0 code to be finally removed from both clients and servers, like happened with the older SSL 2.0. And with it, the fallback code for extension intolerant servers, so clients can count on being able to use extensions.
Oh, I agree it has value for just that reason. Just I didn't like the supposed magic sauce that got throw around to justify the value without proof. I dont believe the value is in the matchmakers (who might as well be a computer algorithm) but access to singles also looking for a date or relationship with little work. It is overpriced for what it is though. If I were single I might be interested in a service that did similar at a lower price point that didn't emphasize on "how great our matchmakers are. Trust us."

I know how hard it is to meet new people to date. Especially when you get older and all your friends all are busy with families and what not.
There are lots of dispensary that deliver. For example, you can find them by checking the Delivery search filter on https://weedmaps.com.

Not sure what the value add is here.
would be cool if the website had a sample game to try so user knows how to play before downloading.
i wish we didn't live in a world where we had to be rewarded just for being nice to people.
interested to see where this goes!
> The difference, I think, between POODLE and BEAST is that BEAST needed not just blockwise "chosen-boundary" control over plaintext, but also a continuous channel that would provide the client with fine-grained control over the first N bytes of each request. It didn't work (IIRC) with vanilla Javascript.

Sure you have control over the first N bytes. Look at the request-line: "GET /hello/world/this/is/my/url HTTP/1.1". Sure, you don't control the spaces, but you can assume any practical implementation uses a single space character. Combine that with control over the method (with XHR or statically through <form> or <img>) and the path, you're in business.

AIUI, the JS PoC took a fair bit of trial-and-error to find the right value of N, but all these attacks require a fair number of requests anyway, so it's not really significant.
For more in this line, check out Newton's Wake, by Ken MacLeod. In that book, there are combat archeologists: people who go places where a singularity blew through, leaving all manner of post-singularity technology lying around, and they have to make sense of it to use them or steal ideas from them, only they have to do this in the midst of armed conflict over ownership of those things.
We've thought about releasing a white paper but haven't gotten around to it. We brought it 35 people and 4 professional tailors. We had each tailor measure the subjects and then we measured each subject. We compared the standard deviation of the 4 tailors vs. the average of the 4 tailors vs. us. Our std was 20% smaller -- for the stats people out there, we're 20% more precise. Apologies in advance for anyone who wants to yell at me for the misleading use of "accuracy."

I encourage you to give us a shot and see if we can nail the fit for you!
Interesting. I was thrown off by their characterization of the images as "grainy 16-bit grayscale satellite pictures" as the word grainy seems to connote poor image quality, while 16 bits of gray is excellent. Perhaps what they are (confusingly) trying to say is a very good scan of grainy film.
As I understand, this is not the kind of advice you're looking for, but: have you seen https://assembly.com/discover? It has a very interesting model that I think has legs going forward.
Navy Tests Unpowered Exoskeleton
i thought u were going to say that your other two co-founders took your idea and continued working on it without you! certainly hope that is not the case!
“Our biggest search competitor is Amazon,” – Eric E. Schmidt
Seems new generation of people comes around. People that wants to be rewarded, awarded or recognized for being good.

Thats the moment when Being Good = Being Greedy for attention I am afraid.
Kevin, Nice lecture: Lots of good ideas backed
with lots of good experience.

In my start-up, currently I'm just doing the
technical part of writing the code, etc. to
get the product to work well, but a little
before or after going live with a version 1.0
I will need to consider your ideas and likely
use several of them.

Your ideas, and experience, on managing a team,
including people working from home, was
terrific, by far some of the best team management
ideas and experience I've heard.

Some of what you are suggesting is close to
at least three ideas in E. Fromm, The Art of Loving,
e.g., that important qualities are caring, respect, and responsiveness.

A fourth Fromm idea is knowledge, that
is, for a couple to "give knowledge of themselves
to each other". Since the relationship between a
business and a user/customer is not really like
a romantic couple, Fromm's idea does not fully carry
over to a business relationship, but maybe some of
it does: The company should try to get the
customer/user to give the company, or at least the
company's customer support, knowledge of how they
think/feel about the product/service. Also, your
idea of giving a user a list of product enhancements
"since you were gone" (nice wording, suggestive of the
caring, longing, pathos in the old movie Since You Were
Away) can be viewed as the company giving knowledge
of themselves to the user/customer. Nice.

Some of your descriptions of your UX seem to
want to give the company a personality, and
I can't help but think of the guest post

http://www.avc.com/a_vc/2013/02/guest-post-how-to-social.htm...

by Fakegrimlock, robot dinosaur.

A few weeks ago, Fred Wilson, of AVC.com,
posted that post again and said that
it was the most popular post on AVC.com
or some such.

Have you seen that post? Do you see some similar
or different views?
New XPRIZE for education software has $15 M reward and Indiegogo campaign
I actually currently live in The Pearl. I've found that the gap between DC and Portland, in terms of startup culture, is shocking.

Here is why I think Portland's startup/tech culture is lacking:

1.) In DC I had ~12 co-working spaces to choose from. All of which had both bull-pen and dedicated office space. One of the spaces I worked out of had ~10 startups with their own offices, and that was just at the single location in Arlington. At their other 3 locations they had just as many if not more. In Portland I maybe have 2 solid co-working spaces to choose from and as far as I know none of them are supporting any well known startups.

2. Meetups in Portland are very low key and don't draw very many attendees. I mean check out this meetup in DC[1]. It had close to 900 confirmed attendees. From experience I'd say at least 70% of those confirmed actually showed up. Portland on the other hand has only 70[2] confirmed attendees for a very similar event.

3. There's a lack of startup accelerators and incubation in Portland. PIEPDX seems to be the largest (and looks awesome). Nike moved FuleLab to SF this year[4] and everything else that I've researched seems to have closed down. In DC you have 1776[5], Acceleprise[6] and The Fort[7].

Perhaps comparing the two isn't fair as DC is a larger city. These are simply my observations as a person who has lived in both places.

It could also be that I'm just not looking in the right places. I know startups like Simple, Treehouse and New Relic are all in Portland, I just haven't seen any presence from them (be it at meetups or otherwise).

To be honest, one of the reasons I love living in Portland is because it's tech/startup culture is smaller than other cities. I'm excited to be part of it's growth.

• 1. http://www.meetup.com/DC-Tech-Meetup/events/154948792/

• 2. http://www.meetup.com/PDX-Tech/

• 3. http://www.piepdx.com/

• 4. http://www.nikefuellab.com/

• 5. http://1776dc.com/

• 6. http://acceleprise.vc/east-coast/

• 7. http://fortify.vc/Fortifyventures/

p.s. - Let me know if you're up for a coffee the next time you're in town. I'm always interested in meeting HNers.
I don't think so. You're dramatizing both situations, I assume based on personal bias.

The US executes about 40x people per year (with a brief higher spike in the late '90s and early '00s); in the 1980s it was maybe 15 to 20 per year.

Texas accounts for not quite half of that.

So remind me again how your statement is meaningful among a population of 317+ million in which the radical majority of Americans live in states that either have abolished executions or execute people very rarely.

How is that some kind of large scale desensitized system of execution? Where are the thousands of annual executions that would take place in such an actual case of desensitization?
Seascape Shader
> In this case, though, the general consensus “among people who care about this kind of stuff,” Newman says, is that the antibiotics are unnecessary for a simple abscess like this one, even in the age of nasty antibiotic-resistant staph infections. Just getting all the junk out and keeping the wound clean is usually enough. But Newman isn’t going to pick that fight today. He doesn’t want to get in the way of doctors’ plans for their patients. If he respects their decisions, they’ll be more likely to respect his, after all.

This is something everyone should learn from.
Thanks, I was looking around for that link.

I've known for a long time that ancient Greece wasn't white stone and marble everywhere, but I've never been able to quite picture it in my mind that way. I still imagine Socrates wandering among white stone buildings and people leading processions to a white stone Parthenon.
It's cool (for those who don't have a choice / don't understand that they have a choice) that it's getting better, but when you release version 6 of your software that comes pre-installed on millions of computers, and that software chooses to ignore standards and do things a different way, requiring many many dev hours wasted on making compatibility layers...don't expect devs to forget quickly.

When you then go on to do the same thing with versions, 7, 8, and 9 of your software, all broken in new and exciting ways, mostly requiring different versions of your OS to test on...don't expect many people to still develop software for you browser platform. Fool me once, etc.

I'll make things compatible with IE again when they switch to WebKit or actually follow the standards.
Source for the Cloudfare configuration: https://github.com/cloudflare/sslconfig