skysight-inc/HackerNews huggingface dataset:
Congrats! Just a comment. Your landing page seems very sparse. I hadn't heard of you before and from that landing page I had no good idea of what your app does or how popular it is.

I feel like adding your blurb from the about page + including something about who uses your website along with a bigger button for businesses would at a minimum be worth A/B testing.

Also it seems a bit awkward to navigate with no navbar at the top and for the business landing page you have to go all the way back to the first landing page to go to any of the other pages.
I posted a comment on their blog a few hours ago echoing some of the sentiments here (less bugs, free the data, etc.).

It was deleted, it looks like they only want a cheerleading section in their comments.
"The deadline for merchants to make the switch is October 2015; so far about 220,000 U.S. stores have done so, out of more than 10 million. The upgrade costs $500 to $1,000 per checkout terminal, according to Javelin Strategy & Research."

Why not just go to your local office supply store and look up that you can get a iCT250 for about $200 and from the ingenico website you can read that specific model "Gives options to accept all forms of payment including MSR, EMV, contactless and mobile NFC." "credit cards with chips" to the general public are "EMV" to retailers. I think I saw an ad for Staples for $250 for this exact terminal. Its a top of the line device and its only $200 to maybe $300 depending where you buy it. You could probably pay less.

I volunteer part time as treasurer for a non-profit and part of my "volunteer" work as the local IT expert was researching alternative payment methods for our fundraisers, none of which we (aka I) decided to implement. Partially because when you have a bazillion volunteer workers its a miracle if they can just get the name right on personal checks, there is no way in hell I'm personally training 50 people to accept 25 different digital payment methods. Also we keep more cash with our no fee non-profit checking account, so why make some middleman "rich". Our (edited: fundraiser event) cashflow is barely in the 5 digit range, and I can imagine orgs much bigger or smaller, or profit instead of non-profit, might have different end results.

(Edited to add, theres a new alternative digital payment method released roughly every 3 months, its very trendy. So next fall, that would be roughly 29 possible payment technologies for 50 people thats almost 1500 training sessions all of which have to be perfect. No thanks!)
The main submission was flagkilled so thought this, more technical post would be more on topic.
U.S. Said to Join Russia in Blocking Nuclear Safety Moves
They already do. It's called corporate personhood and free speech, where by "speech" we mean unlimited amounts of money given to the PACs and candidates of their choice. So says the Supreme Court.
Great retrospective. I saw gdb talk at HN Meetup in London and with very few years on the 'work' clock, I felt he had a much better insight than seasoned vets. Spoke to him briefly after before dashing to get a train and when I followed up with an email he was quick to respond (feel guilty for taking his time now :( ), right to the point and gave really valuable information. I've utilised his tips on how he manages technical debt. From my few interactions, reading his posts and watching Stripe scale he's definitely a rock-star CTO in my books.
At least that would be defensible, and a superior solution to this abysmal "CurrentC" app!
The problem is that if the CTO abstracts themselves completely from the technology, then you end up with VPs of engineering who get away with making decisions based solely on the tech rather than the larger business issues.
Just wait until the boomers figure out that when they start cashing out their retirements the value of their assets is going to crash.

And, Cat Cafes already exist:
https://en.wikipedia.org/wiki/Cat_caf%C3%A9
I use Transmission regularly. I have tried Brasero, Rythmbox and Simple Scan. These last three aren't bad, I just think that K3B, Amarok and Skanlite offer more and aren't that difficult. I just installed Shotwell to make a more informed opinion.

From what I can see, Simple Scan's "magic" is using a default DPI for Text (150 dpi) with grayscale, and another for Photos (300 dpi) and color. What if I want a light photo for the web, or a photo in grayscale? I think these aren't unreasonable examples at all. I suppose I'll have to use the counterintuitive Text for both examples, but now my photo looks awful on print and it's overkill (and monochrome) for the web! And if I have to go to Preferences for such common examples then it would be better to offer them right there in the main screen. Presets are good, guessing is good if you make the options easily available to tweak them. Simplistic presets and hidden options are not good IMHO.

You see, there's simple and there's simplistic. I already agreed that some options in KDE are overkill and should be hidden by default, but some of them are really useful. For example, why can't I preview a large photo while navigating visually the rest in Showell? It's something I usually do with my photos. With Digikam I just press a button and have that, I haven't found it possible in Shotwell, it's either one large photo at a time or many little photos.
Effects of the x86 ISA on the Front End: Where have all the cycles gone? (2001) [pdf]
v2.5? It doesn't on my iPhone 6 plus.
Lest you think such thinking is an outdated relic of the past, the Military Commissions Act of 2006, retroactively redefined war crimes within the meaning of federal criminal law so that only "grave breaches" of Common Article 3 of the Geneva Conventions would qualify.

Later on in the Detainee Treatment Act of 2005, Congress as a practical matter provided even more extensive retroactive immunity for war criminals via the expedient of a reliance on counsel defense. (Counsel in this case being John Yoo et. al.)
I personally don't have a problem requiring photo-ID to vote, but when it is required, then a basic photo-ID should be provided for free to everyone. Otherwise, it will adversely affect low income voters.
To add another to the list, I really dig PictureLife (https://picturelife.com) for photo storage, especially since I can use my own S3 bucket.
For people who get stuck on the homepage due to CSS issues

To go to the editor directly: https://www.polarr.co/editor

To view it using any browser: https://www.polarr.co/editor?force_browser_support=1
NY Senator Calls for Renewed Crackdown on Dark Web Drug Sales
The Flinn effect has run out of steam. We're starting to creep the other way, as one would predict.
This could be secured with a private network and a firewall. It would be nice if the readme mentioned the security vulnerability this exposes, and maybe a suggestion on how to secure the telnet port. I am sure that someone is going to install this without thinking to secure the telnet port.
IE 11 supports WebGL, any technical reason for browser sniffing?

I tried it with the flag, and it works fine in IE 11.
(https://www.polarr.co/editor?force_browser_support=1)
The Hidden Sonos Web Interface
Unavailable outside of the US? Am in NZ..
Interview with with Bjarne Stroustrup (2014) [pdf]
Last I checked, you have to use some sort of special sockets add on to use raw TCP instead of HTTP over TCP with heroku. So you are making your heroku setup more complicated and potentially more expensive since they sometimes charge for add ons. It may disable some of their routing and load balancing capability as well. It is kind of silly to start rewriting standard transport layers anyway since you are going to spend a long time doing that instead of working on your product.
Couldn't it both be true that Microsoft weakened Bitlocker by removing Elephant AND that AES-CBC + Elephant isn't good enough (e.g. lack of integrity)?

We might discuss how to best design FDE, or whether FDE is what we want.

But that conversation is orthogonal to the fact that AES-CBC is weaker than AES-CBC + Elephant, which is what we are talking about here.

Your criticism comes down to: "CBC + Elephant may be stronger than CBC, but neither are strong enough for me". I agree with this.
I think the way it spins would be a problem to bring humans on it.
Exactly, too many developers think that tables are always bad. Really it's about using the right tool for the right job, and there are times when display:table will save you tons of work. There was a time when tables were used for everything, so people started blaming the tool instead of the bad practice.
I don't mean this as a troll, and this is largely based on my own understanding of the CTO role, but - how many direct reports does Greg have now? If not many, then I imagine that can contribute to some existentialism around the role.
I had to stop reading after that line. “Our most premium services will be advertised as consciousness-free” literally makes as much sense as a pre-Wright-Brothers article predicting that “our most premium flying machines will be advertised as free of feathers.” It’s just a non-sequitur given a grasp of the basic principles, whether it be flight or AI.
>But universally, “sparse micromanagement” (the best term I’ve heard for jumping in to some random issue, overturning all the decisions, and then disappearing) is the worst.

Great essay. My favorite term for this is "drive-by micromanagement."

:)

I think it's hard to make "chief architect" work out in the long term--if the role is too weak, it often becomes nothing more than an evangelist; if too strong, it often disempowers the people who are closest to the work.

For figuring out what CTO means in an organization with a VP engineering, you might take some inspiration from Google's organizational history. Google never had a CTO, but they took care to establish ways for highly technical people to have huge impact without being forced onto the management track.

The first was Google Fellow, a level of individual contributor equivalent in to a VP engineering. Jeff Dean and Sanjay Ghemawat are good examples; they didn't manage people, but they did work on very hard technologies like GFS, MapReduce, and BigTable that were used by the whole company, and later inspired projects like Hadoop. (In general, I think having a dual career ladder—one for ICs, and one for managers—is a good idea, and the "Fellow" model really just recognizes the fact that the best engineers are worth as much or more than the best managers.)

The second model is essentially skunkworks: leading projects which are high-risk and important to Stripe's future, but far enough outside the main product that you want to treat it almost as a small startup. The first attempt at this were Googlettes, led by Georges Harik, which included projects like GMail, Google Talk, Orkut, and Google Mobile. At the time, those were very distant from search, but as they grew the successful projects became core to the company. The second version is Google X, where they're now expanding into very distant areas that involve hardware, biosensors, self-driving cars, etc. For Stripe, maybe the equivalent is something like cryptocurrencies, or physical payments, or something you've imagined by I haven't. :)

Anyway, thanks for writing. I have a lot of admiration for Stripe's culture and so I hope you all keep blogging about it.
Click/Tap Rhythm Password
Misspellings don't tend to bother me as much these days because of, well, the iPad. Seriously, I hate typing on that thing with a vengeance. The problem is exacerbated in my case (and those of others) because I have to turn off auto-correction. Why?

Because I communicate in multiple languages and auto-correction/completion makes it very difficult. Switching the keyboard back and forth doesn't help either because it isn't uncommon to use more than one language within a single email or comment (in other words, mixing languages).

My little post was about pointing out a mistake in usage that isn't a spelling problem but rather using the wrong words altogether. I see this A LOT in technical websites, writing, job posts and resume's.

Look around and see how many job positions are asking for a "Principle Engineer" instead of a "Principal Engineer". The first is some kind of a moral cop position within the company, I guess, the second is an engineer in charge of a project or department.

But, yes, you are right. If I know that someone is a native English speaker and they have bad typos, misspellings and generally can't communicate well in written form it does reflect poorly. If they are not native it is a matter of their position. I would expect someone with a university degree to not confuse "principle" with "principal" or "your" with "you're" (and other such examples).
Deploying TLS the hard way
At least some modern DSLRs do. My Canon 5D Mark III supports hand-held HDR for example. It did take a while to find its way into higher-end models though. I assume the thinking was in part that the primary audience would be shooting on tripods and could just combine bracketed photos on the computer.
Practically nothing you said is correct.

* CAs were implemented to issue and verify digital certificates, not verify a connection. No part of TLS PKI is intended to verify that you are connecting to the same service everyone else is.

PKI (and CAs) are intended to assure identity, as well as providing a secure connection over a public network. When you buy a Papa Johns pizza, we know we're not all buying our pizza from the exact same Papa Johns store. But we do know it's a Papa Johns.

* SSH does do your second example, but TLS PKI does not.

As the above example points out, there is more than one Papa Johns store, just as there is more than one web server or service around the globe providing the same organization's data. SSH assumes there is only one Papa Johns store that serves all Papa Johns pizzas; one host is tied to one host key signature. PKI does not make this assumption.

* Blockchains are a stupid idea because they require access to a global public network. Depending on DNS to issue and verify digital certificates is like using SMTP/POP3 to 'simplify' the authentication of users when distributing web downloads.

TLS PKI does not require access to a network, nor receiving any updates from it, and its software is designed to be secure by default, unlike DNS, which in many operating systems cannot be secure by design (because they don't provide a verifying stub resolver, besides the inherent security problems in the protocol's design).

Honestly, most of the suggestions people have to replace PKI just reduces reliability without providing particularly improved security. The biggest problem with PKI is the uncertainty of ensuring the security of such a high number of CAs. That's easy enough to solve... have less CAs and make them more transparent.
Stolen Tesla Tracked with Phone App
I do not understand how the PEGs ordered choice is a problem. Never had any issues with it.
I have voted voted most recently in the District of Columbia. There you do provide a photo ID, in my case my driver's license. At this point I don't remember whether or not I had to provide photo ID in Maryland: that was year's ago.

Nor do I remember how I registered to vote here, but I think it probably was at the Department of Motor Vehicles when I got my DC driver's license. In Maryland, I think that I mailed in a form one time; in Colorado, long ago, I drove to the county courthouse and registered with the county clerk.
Just got that error.
What I enjoy most about Greg's writing is the honesty. Here is someone who appreciates that software is a relatively young industry and many best practices are still a work-in-progress.
<Offtopic for others, but imp for forca - pls don't downvote>
Hi forca: With respect to your comment (https://news.ycombinator.com/item?id=8304139) where you stated you needed some surgery and sought help with figuring out your options? I replied to it (https://news.ycombinator.com/item?id=8334691) which you missed. I can help since I'm launching this very service.

As you don't have any contact on your profile so there was no way for me to reach you. I even contacted YC admin and they confirmed you haven't left an email in your profile :( Since then I've been tracking your comments page to maybe catch you live.

So let's talk? I can answer any/all of your queries and the ones I don't know the answer to I can figure out. Think of me as no-obligation, friendly discussion to clarify all your doubts. I hope you see this message.
Not a form of photo ID that can be used as a "Voter ID", however. The photo ID presented at the polling place would have to correspond with the existing voter registration. A non-citizen driver's license isn't proof of citizenship, and that is what is required by voter ID (with some variations based on the individual state, of course).
There's many more shades of grey than that, unfortunately.

People are genuinely uncomfortable about challenging your residency status. In a number of situations, it's illegal to do so, and this seems to lend discomfort to situations where it's acceptable, or even expected.

I lived in the US (legally) for 5 years. In that time I held three jobs, opened a bank account, got a loan for a car, etc. The topic of my residency only came up once - at the airport on the day I arrived.

When I got my 2-year card renewed for a further 10, I made a point of letting my employer know ('mom & pop' shop, so I had some feel for their concerns). He looked genuinely uncomfortable - like he wasn't sure if he should even look at it. I had to tell him; don't worry man, you didn't ask.

So I can quite easily imagine that on both sides (I've read that, eg, first-generation cubans tend towards democrat, and second-generation tend towards republican - this isn't unique to one side), when trying to make sure that all-important minority vote are all registered and savvy, this topic may not come up. They may not feel entitled to ask, or be afraid of offending, etc. When you're going door to door trying to squeeze every vote you can out of them, you don't want to be that guy that comes off as "are you meant to be in my country?" Trust me - we really don't like that guy.

I guess what I'm getting at is that you can have a perfectly innocent scenario where someone they can assume to know what they're talking about, has come to their door and reminded them to register - and then we try to fault them for not knowing better.

All in all, it is clear as mud. I'm not sure I'd even say "less-educated", as I don't obviously consider myself in that category - but I was never clear on which elections I was, and wasn't (local/state/national?) allowed to vote in. I gather I'm allowed to vote for the county sherif, but not for the president. And everything in between is just one big grey area.
Let's not forget officers/officials of the Japanese Empire who went on to stay in power of Japan after WW2.
This is the best technical education video I've ever seen. If all information were available in such an easy to understand form, the world would be full of geniuses.

The level of effort is astounding. The "support" part holding the spokes looks cast. They couldn't have possibly cast that part specifically for this video... could they?
I actually like the proposed in the article solution: educate people at the voting place. It is low-cost and doesn't create yet another bureaucracy to distribute photo-IDs.
There's a tunnel in South Bay? Don't you mean East Bay near Oakland?
> Application Error

I hate hater score sites that don't give me my hater sore...
Do you think that'd be the case even if you tighten the strap significantly for a workout?
Iranian Reyhaneh Was Executed for Murdering Her Rapist
Your friends will answer you anonymously
If you are always going to blame the issuer for not being strict... what's the point of the accepter being liberal?

I agree that the issuer should always be strict; and if accepters were strict too, then buggy issuers would be detected immediately and never make it into production. Instead they make it into production, where they will sometimes work and sometimes not, depending on the accepter stack in use at the time and context and how the accepter stack chooses to interpret 'liberal'.
I almost went down this route on a project once. As soon as I noticed myself writing an identity map, I slapped myself in the face and just downloaded Symfony.
Ahh, weird. Well, it works well enough on my phone if it's any consolation.
A typical language mixing example is literate programming: you have your programming language embedded into a markup language (say, latex).

Another example is embedded assembly, embedded regular expressions, etc.

I also find it quite useful to be able to use embedded Prolog, to embed BNF parsers, etc.
> it is still closer to what you might be interested in than completely random ads.

This is projection; "interest" is not the only criteria add are judged by. For instance, I immediately killfile anything animated on a page; something moving next to what I am trying to read often makes the reading impossible. Even though "interesting" ads may be somewhat popular preference, when humans are involved the variance is going to be large.

> Is your own problem for sharing devices and accounts with a 5 year old when you use it for "adult" things.

You are assuming more than one device even exists. Regardless, in the real world there idea that there is any kind of clean separation between devices and accounts is patently false.

The basic idea that it is even possible to predict interest from record of which ads were clicked on or what queries are searched for is very presumptuous, but it the larger problem is "data mining", especially in the long term as the data accumulates. I recommend this[1] very interesting article published couple years ago, about some of the data mining that Target has been doing for at least a decade.

http://www.nytimes.com/2012/02/19/magazine/shopping-habits.h...
BART in the South Bay, huh? Sounds legit.
If such a system is implemented where everyone gets a free id, then it will end up used for everything. This was the fear with social security numbers way back when, and they wrote laws to prevent it being used except for official SSA purposes. Even those laws eventually eroded, first letting credit agencies and the IRS use them, and later on just about everything else.

I'd rather that the friction here lead to people killing the voter id laws, rather than universal ids being issued.
I think the consortium would be much better off asking Apple (and Google) to work with them on figuring out a way to automatically tie purchases from a particular store with that store's rewards program. If I don't have to think about it, I'll gladly pay for my items, opt in to rewards (maybe once per company) and let them track me at only that company in exchange for the crappy coupons. They probably don't need my entire bank information, SSN, and DL # to do that.
They actually don't. Citizens United and similar cases are not actually grounded in corporate personhood, though it is a common misconception that that's the case. The ruling in CU merely states that the government is denied the ability tO regulate speech, irrespective of what the object that speech emanates from is.
I've just moved to the US, and I was curious as to what the process was. I'm not eligible to vote. I'm in Idaho where photo ID is required at the polling place.

As far as I can see, all I would need to do would be show up on polling day, show my Idaho drivers license, fill out the registration form, and vote.

The only proof of US citizenship required is that I would tick a box that says that I'm a US citizen.

I can very easily see that being fraudulently exploited, or just plain misunderstood by new immigrants.

I grew up in Australia, where voting is mandatory and has been for nearly a century. The system seems solid, and there is very rarely talk of vote fraud. The history of voting in the US is so full of change and diversity that I'm hardly surprised there are opportunities for exploits like this.