skysight-inc/HackerNews huggingface dataset:
Several reasons:

1. The https protocol allows self-signed certs, which defeats the purpose of a guaranteed secure connection.

2. The https protocol doesn't have any way of differentiating between a normal connection and one which mandates multiple certificates all verify the same identity if the host has been mitm'd. You'd go back to the chicken-and-egg that is HSTS and your initial connection is hijacked again.

3. Because https is inherently broken (for the edge cases discussed here), the users will not be able to rely on it. Yes, it would require re-training everyone in the world to always use this other protocol for their secure communications. But it would guarantee a secure connection every time without having to think about it. I'll bet that's a tradeoff most people are willing to make.

The idea is to never allow the user to make an insecure connection. Give a user enough rope and they'll hang themselves.
Ask HN: Why do we need Visa/Mastercard in today's world?
Visa/Mastercard are just networks that facilitate communication between the acquirer and issuer. More like the manager in the movie Office Space. So why do we still them, I mean Visa/Mastercard? Its 2014 and every server is connected to everything else and what can Visa still provide? Do they actually provide value or is it a giant marketing success now?
In base Pi there's a quite a simple pattern.
Yes, I often muse about this
No. This is to prevent DoS attacks on the network. Each transaction must include a fee.
Damn. I guess this just goes to show how hard it is for an external observer to judge intent. I mean, you gotta admit that between the long, scary warning and flipping the buttons around compared to other privacy related settings, it certainly seems like a dark pattern. But I've been on the receiving end of this, so I understand how frustrating this must be. "No, really, it was late and one line got pasted in front of another and no one noticed."

I guess that just leaves the fundamental incompatibility with Google's current business model and personal privacy.
Chromecast is great, but it would be nice to have a somewhat standalone device to do everything, rather than needing a smartphone, computer, Plex server, etc.
How long does it usually take for the approval process and to get offers?
How much (per hour) is social media consulting worth?
I'm trying to figure out some kind of industry norm/average for the rate and time, internationally.
The issue (which the article explained badly) isn't that punishment doesn't work; it's that cats don't understand human social cues.

For a dog, yelling is a punishment on its own, because they understand what the tone of voice means. A cat will just think "hmm, the human got louder - I wonder why?" If you're trying to punish a cat for things, you either need a physical stimulus they don't like (spray bottle, for example) or a social cue they understand (hissing is moderately effective, though that's more of a warning than a punishment).
Security baked in? Infrastructure services generally require that you configure and deploy your own infrastructure, including security measures. AWS still definitely allows you to very easily deploy very insecure things, and you still need to do a lot manually to tighten things up.
Huh. Your first link says nothing about search suggestions. I based my comment on my experience of having to disable search suggestions every time I start a new browser. I hope you're right…
There's plenty of proof (maybe not in this particular) case, but in a lot of these cases to put people in jail, extract fines that are punitive (and not merely rounding errors), and at the very least pin the wrong doings on people (and not faceless companies).

My experience in the US (having worked directly with regulators) is that they are afraid to regulate. The literal tail is waggging the dog. As to the root cause of this (many blame the public/private revolving door), I am not entirely certain. I just wish in the US, at least, the regulators would not be such wussies and stand up for the consumer/voter and stop worrying about push back.
> I found Brin's Existence really refreshing on this front -- the predictions and tropes seem based on looking at technology of today and extrapolating from that. I really enjoyed it!

So based on the rest of your post, give it 5 years and you'll find the predictions disappointingly dated.
Deis Breathes New Life into Dokku
I used to use Skyscanner only for intra-Europe flights, but it's quickly becoming my first and last stop when looking for cheap deals. Really fantastic service.
Found the same. Bit of a steep learning curve when starting a project from scratch, but it's very much a plateaux
PEP 8 is the Python language's style guide.

Right -- it's a "style guide", not a syntax.

When we talk about "ensuring compliance" (enforced by commit hooks, no less), we're effectively making it a hard constraint. Which, being a style guide, PEP 8 was expressly not meant to be. As PEP 8 itself says:

But most importantly: know when to be inconsistent -- sometimes the style guide just doesn't apply.

As an occasional lint checker, I can see the value of running a (configurable) style checker, now and then (the "configurable" part being very important, as you'll want to turn off certain proscriptions in certain cases -- to make your code, you know, more readable). But I definitely would not want to work in an environment where I was required to adhere to PEP 8 as an always-on, hard constraint. Which seems to be the very purpose of this tool.
Amazon just told me to log into someone else's account – and delete it
The "%" search sounds really interesting, but I can't seem to get it to work. No matter what I type after the "%", it initiates a web search. This is with Firefox 33 for Mac.
This is my first phaser game and I followed a step by step flappy bird tutorial to learn the basics. It's basically all the same components - scrolling background, generated obstacles, and a simple motion character. I'd love to write a tutorial for this one though.
Not to mention the PC was 8088 based, not 8086.
Google Fit
Automation begins today at Mcdonald's, but don't blame minimum wage raise
Wow! this is very simple and easy to use!! I wonder for how long it will be available..
I congratulate you on possessing such an easily appeased conscience.
It's not that simple. It's easy enough to claim that showing a Chrome ad benefits users and helps Google's brand. Showing third party ads hurts Google's brand and overall value.
That's correct.

The flip side is, UPS and FedEx can refuse to deliver to certain addresses. The USPS can't.
By increasing the ease of writing stuff that needs servers, the idea was that more servers would sell. Some (not all) of those would be Sun servers. That's a net win for Sun.
LOL. Awesome story.
I guess that if he wanted the job he would have used other ways to verity his email from Google.
> Look at this way: A bank is fined $x for doing an action which generated $y. If x < y, there is no incentive to stop any behavior.

Not only is there no incentive to stop, that's actually incentive to keep doing it, faster and on a bigger scale!

If you told me I'd get fined $10k for doing something that resulted in $15k of "earnings" (and no other penalty), I'd start a business and start hiring as many people as possible to do exactly that activity, profiting $5k every time.
I know what makes it bad: http://nordicapis.com/5-reasons-why-developers-are-not-using...
Its a major sin a lot of developer commit. I'll just write 400+ pages of documentation.

That's great. Nobody will ever read it. Make it enjoyable to read and interact with. I keep this XKCD over my desk for a reason http://imgs.xkcd.com/comics/manuals.png
I'm about 50 pages in, currently working on a talk and an article. I'll get back to the book next week.

It's still early. I wouldn't expect anything earlier than 3-6 months from now if I don't find a coauthor.
I don't care about cookies: Get rid of annoying cookie warnings
Enture Investors Splurge on Real Estate Tech
Introducing Tigon: Real-time streaming for the real world
That isn't how private torrents work. They contain a key that identifies the user who downloaded it, for bookkeeping purposes on the site (tracking bytes in and bytes out for ratio purposes), but you cannot get into the site's UI from the information in the torrent. This was a deliberate design decision in most private tracker software, notably Gazelle, because it was accepted that people would post the .torrent files in other places. Many trackers also limit the IP addresses that are permitted to join a swarm based upon the same identifier in the torrent file; all of the ones I've been in have required me to disclose the IP addresses of my seedboxes, and attempting to use another IP address would get my account flagged for a ban.

So no, your assumption is completely incorrect. Even if someone shoved a passthepopcorn torrent in there, (a) that person would likely get banned from ptp, (b) it probably wouldn't work in the first place because joker's servers couldn't join the swarm and (c) the information that the owner of joker can glean from such a torrent file would be almost entirely useless unless the goal is boosting the ratio of the user.

As much as you'd assume about something you've never used, private torrents are actually a well-oiled, quite secure machine. It's easy to think of pirates as incompetent, but Gazelle is actually decent software and the biggest problem I ever faced while involved in that scene was DDoS attacks against the trackers.
@zorbash Wow, the concept sounds nice :)
HTTPS is one of the least important things you can do to secure your site
Beautiful Free Version Control
Minimum Wage Backfire
How would you monetize it?
Open source access to the protocol should make Z-Wave products more valuable. It's a shame they make it difficult to access. Thanks for opening it up!
It is frustrating that most people here don't care about this...
This is sort of like walking into a building with several billion computers wired together with ethernet cables, token rings, and fiber, and asking "Why do we need all this cabling anymore? Let's just skip the middleman and replace it all with wireless."

VISA and MC make it their business to make sure they are an absolute essential part of the transaction, if not in principle, in practice.
Techsploitation: a true story of labor trafficking in the US
As someone who experiments with nootropics, I highly recommend modafinil over caffeine for sprints like that (up to 36 hours of wakefulness at a time, no jittery feeling, etc). You should not do it for any appreciable amount of time though. See https://reddit.com/r/nootropics for more info.
I don't think that's true, depending partly on how we define "could", but we're getting off into the weeds. In this case, we're trying to understand aspects of the laws of physics; getting at the consequences if they differed subtly could be tremendously useful - akin to a proof by contradiction.
Just wait until some terrorists use only mail to prepare an attack. Then probably every piece of mail will be read to protect us.
Here's What Our Google Sources Are Saying About Sundar Pichai's Sudden Rise
Getting rid of the goddamn corruption, one step at a time
If we go by the time for last several invites, you shiuld expect it to reach in your inbox at about 6pm PDT.

Please convert the time to your timezone accordingly.
Only if the 3rd party project is subpar. largely chrome is a 3rd party project from the eyes of search. I'm pretty sure there isn't a massive overlap between search and chrome developers at google.
Here's a Quora answer from Asa Dotzler, to make you feel better: http://www.quora.com/Why-hasnt-Firefox-merged-their-search-b...

Obviously, I can't prove that it doesn't send search suggestions by giving you a link to the code, since it isn't there. If you want to make sure for yourself, I advise using Wireshark.
Yes, about around 6pm PDT. That means, around 8 hours from now.
There's also nothing that says you can't have two different browsers open at once :)
Ranking of CS Departments Based on Number of Papers
In the US only items bearing USPS postage may be placed in mailboxes. Many pre-built mailboxes have a separate open receptacle for newspapers etc. FedEx and UPS generally deliver to the doorstep, even for envelopes.
> We need to teach boys that they are not, in fact, entitled to women's bodies

It was my understanding that most harassment and abuse is about dominance of the mind rather than physical. It's not about exercising entitlement, it's about establishing ownership. Subtle, but different.

In that regard, I feel like blocking websites would just be transferring the power from one dominating force to another. Alone, I don't think this would solve much since it ends up punishing the platform instead of the participating individuals. Killing 4chan would be like dropping a brick on a piece of shit - you don't have any less shit, just scattered.
Exactly. I cannot be the first person to ask that question. Hence trying to understand what the reasons behind it are. What exactly makes Visa and MC so essential. What do they offer that someone with big pockets (or a consortium) cannot upend?
Google gives you a "filter bubble", essentially exacerbating confirmation bias. That way if you search "what's wrong with Python" it won't return "snakes can hurt you".

Take a look at http://dontbubble.us
So you're against using cloud providers? Apps use push notification services through Amazon or Microsoft all the time.
How to Stop Being Lazy and Get More Done
Of course, sharing the beautiful things you have put hard work in deserves this thread.
Yes shameless self plug but we'd love for them to use Spreedly in the same way SeatGeek does to solve this "drop you on a landing page and fill out all your card data and personal information again" Although I have heard that in the travel referral business they actually want you to go to those landing pages as they make no money off the airline ticket. So they rely on upselling you $30 or $50 "insurance" or other add ons. So Hipmunk would have to start doing that or they'd get bumped as a partner as their referral traffic doesn't "convert" well to upsells. (I think this is just for airline tickets less so for hotels or car rentals)
This is cute, but I will continue using peerflix : https://github.com/mafintosh/peerflix . Loads way faster and is not hosted/tracked (besides the obvious p2p interaction). And I don't have to see ads.
I always assumed that it refers to the fact that interference under certain limit should not permanently destroy the device even when such interference may cause the device to behave erratically.
This looks very deep. It would be an improvement if the title (at least here) was a bit clearer; there are many kinds of collision detection so it would be helpful if it said "For Games", or something like that.
The paid version of Vuze also allows streaming torrent videos
http://www.vuze.com/features/playnow

So all in all, hardly a new concept, but this looks really convenient to use.
That is a very comprehensive set of conventions! Contents pasted here:

Foundations -
Require TLS,
Version with Accepts header,
Support caching with Etags,
Trace requests with Request-Ids,
Paginate with ranges

Requests -
Return appropriate status codes,
Provide full resources where available,
Accept serialized JSON in request bodies,
Use consistent path formats,
Downcase paths and attributes,
Support non-id dereferencing for convenience,
Minimize path nesting

Responses -
Provide resource (UU)IDs,
Provide standard timestamps,
Use UTC times formatted in ISO8601,
Nest foreign key relations,
Generate structured errors,
Show rate limit status,
Keep JSON minified in all responses

Artifacts -
Provide machine-readable JSON schema,
Provide human-readable docs,
Provide executable examples,
Describe stability
Written with a tremendous amount of confidence.
No myth:The travails of women in the workforce
Anyone who thinks women do not have "challenges" in the American workforce have not been privy to the conversation this guy in the next cubicle is having over the phone. Words like "frigid", "she's getting married and so she is off the market and that made you mad" have been used.
As a father of twin girls, I want to have a word with this guy. If I do - the guy is a manager - I probably can't afford to feed my twin girls.
if you put all the points in a straight line wouldn't that invalidate any n?

edit: just saw the bit where no more than 3 can be in a straight line
"Bungee Boss", now over 20 years old:

http://dilbert.com/strips/comic/1994-09-07/
The app is already available in Apple's store.
HEX Colors in Swift
MCM London Expo October 2014
I count these differently. It comes down to intent vs. capability: was Germany intending anything more than becoming a greater power (I'm still reading up on this)? As a serious nation the UK of course had to react to the increased capability, but I view this as qualitatively different than France's crystal clear intent of taking back Alsace and Lorraine, which also was backed up by some serious capability.

Russia intended to help the Balkan nations stay out of the non-Slavic (in terms of rule) Austrian-Hungarian empire, however their capability to directly affect this was limited by geography (again, something I'm in the process of reading up on).

(There's also the forward looking detail: France was a declining nation (e.g. declining birthrate), Germany a growing nation. That put a time limit on their capability to carry out their intent.)
So I just added minimal json export functionality, if you add .json at the end of questions you should get a response.

e.g.

https://approachio.com/question/7/how-long-should-the-averag...
"In 2009, a court in Italy reduced the sentence of a criminal with genes linked to bad behaviour."

Perhaps I'm a heartless person, but this seems counter-intuitive to me. All crimes can be attributed to a combination of genetics and environment. If we can't find a cause, that doesn't mean there isn't one -- that means we have incomplete information. I don't understand this whole "reduced sentence" thing.
So it does not peer the machines in any type of virtual private cluster similar to AWS security?
Does anyone know the answer to this in three dimensions? I'm curious how many points it takes to always be able to find a convex tetrahedron.
No more than two may be on any line.
Plato.stanford has a very nice article about this as well:

http://plato.stanford.edu/entries/mathphil-indis/
So this is basically put.io, but free ?
Mastering the VC game for entrepreneurs
You may find some of these helpful:

• Web API Design Crafting Interfaces that Developers Love - eBook [APIGEE]

• How to design an API function that creates something [SHAREDOM] [SHAREDOM-HN]

• Microservices and the First Law of Distributed Objects [FOWLER] [FOWLER-HN]

• Lego’s API Strategy: Resourcing Developers and Building a Business Case [LEGO]

• A review of all most common API editors — Medium [ORLIESAURUS] [ORLIESAURUS-HN]

• Best Practices for Designing a Pragmatic RESTful API [VINAYSAHNI] [VINAYSAHNI-HN1] [VINAYSAHNI-HN2]

• Best practices for API versioning? - Stack Overflow [SO] [SO-HN]

• Designing Hypermedia APIs [KLABNIK]

[APIGEE] https://pages.apigee.com/web-api-design-ebook.html

[SHAREDOM] http://sheredom.wordpress.com/2014/08/10/how-to-design-api-f...

[SHAREDOM-HN] https://news.ycombinator.com/item?id=8160071

[FOWLER] http://martinfowler.com/articles/distributed-objects-microse...

[FOWLER-HN] https://news.ycombinator.com/item?id=8172980

[LEGO] http://nordicapis.com/legos-api-strategy-resourcing-develope...

[ORLIESAURUS] https://medium.com/@orliesaurus/a-review-of-all-most-common-...

[ORLIESAURUS-HN] https://news.ycombinator.com/item?id=8505244

[SO] http://stackoverflow.com/a/398564/2541

[SO-HN] https://news.ycombinator.com/item?id=7350432

[VINAYSAHNI] http://www.vinaysahni.com/best-practices-for-a-pragmatic-res...

[VINAYSAHNI-HN1] https://news.ycombinator.com/item?id=6624229

[VINAYSAHNI-HN2] https://news.ycombinator.com/item?id=5819231

[KLABNIK] http://www.designinghypermediaapis.com/blog/index.html
Wow, I had no idea the engine made it into SW:TOR, thanks for that bit of trivia!

I remember eagerly waiting for Hero's Journey and how crushed I was once it was cancelled. Too bad nobody has resurrected the actual vision for that game.
There's already a big community around Cuckoo Sandbox (http://www.cuckoosandbox.org/), I'm not sure this project has any advantage over it.
Downvote it and move on.
Hmm, that shouldn't be the case. If you try again and feel like helping us out, feel free to email the discrepancy to support@hipmunk.com.

Sometimes there is an explanation (e.g. the flight doesn't exist, or has a 30hr layover), and other times we don't have the flight, in which case we want to alert our providers to fix it.
Years ago, Google was head and shoulders above all other search engines. Today Google's competition are almost as good, so other parameters might affect Mozilla's search engine defaults.
Awful or Awesome?: This Browser Extension Clicks Every Ad to Confuse the System
Crashed on Android Lollipop on start. I wonder, why isn't Google testing Inbox and Fit on their upcoming platform (due next month)?!
Holy hell... how common is cat shooting/poisoning/maiming incidents? You make it sound like they happen all the time, which makes me sick.
NuGet availability is a strong win.
So at what point do you go insane? Should I just turn the whole place into a litter box? I have 3.
Sounds like you're going in the wrong direction. An undocumented, granular API with lots of options won't be used, so it won't matter how fast it is.
Another dumb Flesch-Kincaid exercise
steam it, open the seal gently, and reseal it?

open it destructively and make a new envelope? this is probably the easiest option for a 3-letter agency.

soak it in a liquid that doesn't dissolve the ink, photograph the layers of text, and decipher it later?

shine a really bright light on it, using a color that isn't well absorbed by the paper but is absorbed by the ink?

If there's a way to harden paper mail against even a moderately prepared adversary I'm totally interested in learning about it...
Ask them if they can imagine bubble in Treasuries! They certainly couldn't see one in housing or the .com one even though they both were straight in their faces. They laughed off anyone talking about bubbles then

You can proudly proclaim that the bubbles were obvious now that the pops have come to pass, but talk is cheap, and if you're wrong, it's always "just around the corner" until one day, you saw it coming all along. If it takes 30 years for the bubble to pop, then god damn, check out this HN thread from 2014 where you predicted this exact outcome THREE DECADES in advance, but nobody listened!

I'm not dismissing the consequences of running up absurd levels of debt, I just think it's sort of funny that in a thread regarding the failings of human certitude, you felt it necessary to demonstrate your certainty in outcomes regarding, of all things, macroeconomics, perhaps the least reliable science from which to model precise predictions.
> As to the financial sector, while it is obviously difficult to prosecute many financial crimes, I am not convinced that this is the primary explanation for the shortage of convictions lately.

One of the primary explanations is that banks have become "too big to fail", and if you criminally charge a bank, you effectively make it fail. Basically, banks are powerful enough to get away with murder.

http://www.theguardian.com/business/2012/dec/11/hsbc-fine-pr...

"Had the US authorities decided to press criminal charges, HSBC would almost certainly have lost its banking licence in the US [...] The bank processed cash for Mexico's Sinaloa cartel, regarded as the most powerful and deadly drug gang in the world, among others."
Basic point, maybe he cannot prove that GMs are dangerous but no one can prove that they are safe.

So why risk things when there are other ways
Also known as Quangos in the British system (Quasi-NGO).