skysight-inc/HackerNews huggingface dataset:
Here's what could help - turning all users into (exit) relays. That strategy has worked for torrents very well - all downloaders are also seeders (I think it's a similar situation).

This solves multiple things:

1) makes it much harder to do traffic analysis

2) makes it almost impossible to "go after relays". Sure, they'll still try to arrest some here and there, just like they try to arrest people who torrent movies, and even with the mass copyright laws they couldn't stop piracy. There were just many more who did it, making the hunted down but a tiny percentage.

3) should make the legal defense case even stronger than it is now for relays. You can say today that "you don't know what's happening through your relay", however you still have to choose to become a relay. I think that says something. It may not be a huge case in the prosecutor's favor, but it may convince the judge to be against you in some cases. But if everyone is a relay and you can use the defense that "this is just how Tor/Firefox works", I think that would work a little better

4) should improve speed since relays can't be choked anymore

5) I'm not sure about this one, but I think it should make it much harder to DDoS Tor users/hidden services as well?

I think having the way Tor works currently is a design flaw in Tor. Tor should be "fully distributed" in a way.

As for the argument "but then no one will use Tor if they are forced to be relays!" - I just don't buy it. I think there may be some that will get scared in the short term, but then see Tor actually gets more secure this way in the long term, and will return. I also believe Tor will get more new users in the long term this way.

EDIT: What I'm referring to is turning everyone into exit relays/nodes. My arguments remain the same. If it's not illegal for people to have an exit node in US (as Tor claims [1]), then it shouldn't be illegal for millions to do it either. In fact it could be a sort of stronger civil disobedience thing.

Plus, even if it is illegal, so is piracy. That hasn't stopped millions from doing it. Just like "being gay", what's legal and what's illegal is a matter of how we shape our laws. To change those laws, first you need someone to break them and change the society in a different direction. If you didn't have anyone to break a law in a certain direction, then laws would never need to be changed.

[1] - https://www.torproject.org/eff/tor-legal-faq.html.en
New XKCD comic about the Rosetta mission is updating over time
Yup, I get that. Same can be said of http--so we solved that problem and created https. I just don't get why folks like IBM, Microsoft, et al never bothered to push secure email standards. I'm surprised their customers never pushed them to do it.

SMTP with starttls is not secure because as an end user I have no idea if my mail is getting sent securely.
Here's the Communications Act of 1934, which contains Title II: http://transition.fcc.gov/Reports/1934new.pdf

Here's the Telecommunications Act of 1996, which modifies Title II: http://www.gpo.gov/fdsys/pkg/PLAW-104publ104/pdf/PLAW-104pub...

Got to warn you, it's not light reading.

I haven't been able to find something that explains Title II in a relatively neutral fashion. In short, proponents of classifying broadband as a Title II utility say "the FCC can ignore and not enforce the onerous portions not related to net neutrality", while opponents say "the FCC can ignore and not enforce the onerous portions not related to net neutrality, but there's no guarantee that they will, and that's a lot of power to hand over to the government for the indefinite future."
Hi Andrew

I can't find your email address in your HN profile. Maybe I'm not looking in the right place?

Cheers

Max
Google Optimize to increase ecommerce conversion rate on Shopify store
Optimizing your Shopify shopping store to attract relevant web traffic is not the same as updating your informational website. An eCommerce platform like Shopify offers wide variety of features with supporting a large inventory base. - See more at: http://bit.ly/1xwj6Po
Good for you! I'm from the South and moved out here without knowing anyone before. I would love to meet you and hear how things are going. I would be happy to introduce you to people too. Included my email when I responded to your web app but my personal email is listed in my profile. Coffee is on me though ;P
> it is an education issue; just as "Private Mode" warns users that they might be tracked by ISPs or other agents

I wonder what percentage of users understand that. How many read the fine print, grasp its meaning, and act on it?

It would be interesting if Mozilla has studied this security training in particular or if someone has studied security training in general. That is, test how many users read the information, retain it, understand it, and act on it? What works and what doesn't?
We need adblock and noscript in Firefox, not tor.
Swift REPL has multiline editing and auto formatting in terminal
You're mixing cash on hand and equity and still ignoring dilution. I don't know where this term "neutral transaction" came from but it's not true on the balance sheet in the dividend case and it's not true in the market in the new issue or buyback case due to externalities. Consider:

Shady Patents, Inc has 10 shares outstanding. Current price is $1/share. I own one share.

They issue 90 more shares at $1/share.

Yes, duh, shareholder's equity remains constant. Shareholder DILUTION however is substantial. If they collect $1 million on a patent and issue a special dividend, I'm getting $1,000 instead of $100,000.

YES, there's an equal credit and debit on the balance sheet.
NO, this does not mean the market will prop up the price. OF COURSE issuing shares is going to create downward share price pressure. If it didn't, companies would just issue shares indefinitely. And yes, to back up what poor OP said six hours ago, shareholders often resist dilution.
> While I do appreciate that a good number of the non-profits are ones that help women code, having a low number of women/minority speakers certainly doesn't help and could even be counterproductive to those causes.

I don't disagree. However, is it reasonable to expect the conference speaker roster to have significantly higher diversity than the industry itself, considering those speakers are drawn from the industry? Some would say yes, and I think it's a good idea, but it is going to be harder.

I think the fact that to get a ticket I dontated to Women Who Code is more than most conferences will ever do, and I'm not going to vilify them for this, personally...
The problem is that you do not make the distinction between a regular relay and an exit node. There are enough regular relays in the tor network, but people hesitate running exit nodes because of the legal liabilities: many ISPs do not want you to run a tor exit node, because of the nature of some traffic coming through the tor network (illegal marketplaces, child porn, etc -- as you can read in the article, even Mozilla doesn't want to host exit relays).

If you make this the default, you're opening a can of worms legal-wise. If you make only non-exit relays the default, your whole plan defeats its purpose, because then exit nodes remain the weakest link (as they are now).
But isn't that the point of Incognito mode in the first place? To only use it in certain situations when you need extra privacy? I doubt too many try to login through Facebook using the Incognito mode, or at least they wouldn't use their real accounts.

Mozilla just needs to enhance Incognito mode (or create a new mode) with Tor.
Any option for ios?
Great discovery . may be in near future we will be able to use smart phones with a battery that will last longer than a week with single recharge
Not relevant. I'm sure there are bad choices, but the difference between Go and Haskell is probably negligible or in Go's favor.
Cheap smartphones by Microsoft
Securely Implementing OAuth in Single-Page JavaScript Sites
Well, for starters it sounds like you didn't act maliciously. You acted based on the sum total of your training and experience to that point. If your training or experience was lacking then this is an issue for which the company needs to take some responsibility.
Communication: The Problem Solver
Xubuntu is my primary desktop, although I use a variety of distros.

There are so many advantages ove Windows that it is not even close. Mac OSX is almost usable, but the machines are too expensive. I sometimes have used a Mac, but my most recent is a G4 and I don't use it because it does not get security updates. With Windows, I'll say a few things. I don't like software that is designed to be unreliable, as Windows is. It is clumsy to use and makes me feel dirty even using it.

I try other OSes a good bit. PCBSD is pretty nice. I used Syllable a fair amount. Transparently provable security and a decent desktop would draw me to try a new OS.
CSS: It was twenty years ago today – an interview with Håkon Wium Lie
No, an exceptional person without any formal education can blow a person with a formal education clear out of the water both in drive and in productivity and quality.

But that's 'exceptional' for you, it is an exception, I've only encountered one such person to date.
I was just thinking about the battle that would have to be fought to keep JS away from becoming the standard scripting language. JS is a mess - there are people doing great things with it like React, but it's a mess. There's a total lack of design philosophy at the heart of the language, necessitating things like "The Good Parts."

I think the main scripting language for an OS should at be considered near-perfect when the OS begins - like C for Unix. One of the design goals for that language should be to work well for graphical UI - imagine if a framework like React had a language designed around it instead of being shoehorned onto JS. We could start talking about ideas like separating the layout, styling, and interactive components in a better balance than that between HTML, CSS, and JS.

Really my main point is - There's a conversation to be had around starting from (near) scratch. I think in the end a lot of *nix would have to be incorporated to deal with the realities of hardware and established protocols, but we could also look at starting in a VM and working towards bare metal. Or cave and include POSIX-style standards in a way that is not limiting to desktop OS design.
Robert Morris? THE Robert Morris?
The FCC chairman was appointed by the President, so who really knows what either of them truly want
It is my ISP's fault for BLOCKING THOSE PORTS.

And, since I don't really have a choice of ISP, I can't change that.

Some of us live in the real world where we wind up having to do things like put mail servers on port 80 or 25 because that port doesn't get blocked.

Thanks for playing.
A new idea: "Pentagon Seeks Aircraft-based Drones for Future Missions"

http://www.defensenews.com/article/20141111/DEFREG02/3111100...
The laws of limited supply are your friend here. They may want to hire only from the top tier schools but since these are typically only available in certain numbers and usually already gainfully employed this becomes less of a problem because they probably can't.
Ok, how about:

"At some point, the software is most easily developed on the OS it runs on"

There are exceptions to the rule of course, but much of the time development is going to happen on the target OS or in some kind of interlinked system with the target OS.
Nope, technical analysis of the usual sort doesn't look at the book at all. It just looks at the past prices and, if you're really lucky, past volumes.

Going past what's traditionally technical analysis, in that example at 5.30 it's possible that there's a wall of people. However, the trading in any intermediate currently pair between those, NOK-USD-JPY, for example, will negate that wall in no time at all for sheer volume alone and any artificially imposed walls based on this kind of numerology would be chopped down by HFTs looking for arbitrage opportunities in milliseconds.

If you're looking at a big pair like EUR-USD with a hypothetical wall at 1.25, for example, it's possible it might last for a little longer. But again, arbitrage across currency pairs - EUR-JPY-USD or EUR-GBP-USD or whatever - will wipe out any numerical niceties in marginally longer than no time at all.

That said the more TA traders are out there the more the actual investors (and with SPY having an annual volume 8.5 times its number of shares there seem to be too few of those) can get themselves a long-term good average of "Be fearful when others are greedy and greedy when others are fearful." just through regularly putting money aside and investing through dollar cost averaging in index ETFs/mutual funds.
So You Think You Want to Run a Hackathon?
Please be aware FastMail is subject to Australian law. [1]

The government is scrambling to pass laws for mass surveillance [2] and controversial data retention laws. [3]

[1] https://www.fastmail.com/help/legal/privacy.html

[2] https://www.eff.org/deeplinks/2014/09/australian-government-...

[2] http://www.theguardian.com/australia-news/2014/oct/16/privac...
Personally I would hire some one with 4 years experience. But, programmers don't make decisions. Decisions are made by hiring managers, HR's and other people to whom these kind of things matter.
There's a lot of folks in this thread that are posting "go to school" comments without knowing a whole lot about you. I'm sure that from their perspective it's the obvious best advice. I am commenting to say that people who have invested the most valuable years of their life in school tend to spend the rest of their lives hunting for evidence that they made a great decision.

The simple fact is that their answers are more about their own confirmation bias than giving actionable advice.

While it's true that lots of successful people went to college, the simple fact that you taught yourself to code and you're hanging out on Hacker News puts you into a completely different category than 99.9% of people that don't go to college.

I've seen people talk here about ROI on degrees and "the path" and what makes a good student. I've seen far less about how people are highly unlikely to know what they should be doing with the rest of their lives right out of high school. That there's so much focus on 18 year olds paying crazy tuition to get a piece of paper that proves they attended some generic lectures on a generic subject is criminal.

Anyhow, I'm ranting. I'm projecting. I didn't go to college and I have been very successful. It's because I decided early on to feed my intellectual curiosity and give myself permission to fall in love with things that themselves lead to other things. It's way more important that you learn about music and travel and optimize for interesting than push your square peg through a round hole.

That's not to say that you won't ever go. But if you don't think this is the right time, then you are the best person to know that. Just don't be idle; try to imagine that your life will be a series of well executed five year plans.

Don't let yourself get burnt out along the way, it sucks.

What I recommend is that you join a startup and work there for about a year. Then get the hell out of California for a year; I recommend that you go work at a startup in Berlin or Amsterdam for a year. Get a global perspective.

Hacker News is an incredible resource, but it's also really full of people that buy into a California tech ideology that can be self-limiting. It's just one of many lenses through which you can see the world.

Good luck; I'm really excited for you. Just remember: no person has ever been on their deathbed and thought, "man... I wish I'd made fewer interesting decisions".
Interesting enough, there's no actual generic mail client (for imap/pop3/smtp) for chrome/chromeos ... would be nice to have an option for mail in chromebooks outside of several webmail clients open at once.
I see those in California too. I really don't understand the phenomenon; my best guess is that there is some sort of incentive from the developers or city zoning for shops to open there, but nothing as cohesive as an actual mall.
What is the accepted identifier for nodes? I did a rough implementation of Chord once using IP address as the identifier and ran into the issue where the node would see itself at a different IP than others. The obvious solution is just "don't use it through NAT" I'm guessing.
FWIW, I _intentionally_ de-anonymize myself over TOR as often as I remember to. I make a point of browsing things like local council and government websites using TOR, including logging in or providing details in contact forms, while doing mundane and ordinary stuff like booking extra garbage collections.
The more you read about great companies the more you realize that this is the key :

Eberhard realised that Musk was the first guy he had met
who shared his vision for electric cars: Make a vastly
superior car, not just a car that sucks less.

This is why Google won, and again with Gmail, why Facebook worked (compare it to the only "social networks" that preceeded it - dating sites and you'll see how it's vastly superior), and even before, why Microsoft won (visual basic being the truly superior product).

We also know that design-by-committee approach of large companies can only ever produce mediocre products. Low-risk mediocre products. Most or all of these are doomed. A lot of stuff is ready for complete disruption.
Pickup sailing. Get up to where you can sail longer distances, between ports not day sailing. Without a GPS. Then do it at night. And, occasionally, not by choice, do it in the fog. This gives you a real persoective of what it takes to get from point A to point B. Even with accurate maps it can be confusing as hell. I used to sail a lot. Got pretty good at celestial navigation. Night sailing was always my favorite.
Live and On-Demand Events
Session Hijacking Vulnerability in Digicom Router
Or losing data on crash because load/save cycle is untested.
Cool, thanks for the update!
FCC head may reject Obama's plan for net neutrality
I feel like you're misunderstanding Fooled by Randomness. The results are supposed to look like steady gains in a tight distribution, but the super far out tails are fatter than the average person thinks. Therefore, typical traders take average risk with below average returns (relative to the risk one bears) whereas Taleb takes high risk with supremely above average returns (again, relative to the risk he bears)
"in some kind of interlinked system with the target OS."

I think that's very much the case, depending on just what you mean by interlinked, but that provides a strong out for developers wishing to primarily use another system.
Xubuntu.

Easy to use and can run on old computers. Lot of packages are available and can you the same job as other windows softwares.

I use it both for programming (node/python/go) and entertainment.
The people making the big picture decisions are by far and large not the people who would be enticed by such a puzzle. Hence the dissonance you're observing. (applies to most large companies)
> Being net positive 80% of all days traded with all your winners and losers falling in a relatively tight distribution -- luck can't create highly specific, repeated outcomes like that.

Yes, it can. E.g. you could sell deep out-of-the-money puts and collect a $1 premium day after day, say 99% of all days. Until one day a {terrorist attack in the US, humongous earthquake in Japan} happens and you lose more money than you ever made.
Is there anywhere one could acquire those rabbits for his or her own everyday terminal use? If not there should be.......
Show HN: a free, simple and fast way to create iBeacon experiences
Well, it sounds like what you're looking for is property based testing. You can setup something like QuickCheck to run at compilation.
I just wanna say: awesome job on the UX. That alone makes me want to sign up.
It fits in the pocket alright, but you're conveniently forgetting about the dozens of satellites.
If you go to those five schools, the percentage of
minorities and the percentage of women is X and Y.
Let's say it's 3% and 10%. If those companies hire
only 10% of the people they interview, then the
number [of minority hires] you get is zero. Right?
It's zero. And to the extent that they are unwilling
to go outside of those five schools, it's going to
stay zero.

No, it's not zero, it should be a number that corresponds to 3% and 10%, respectively. Yes, those numbers suck, but it helps to get the math right.

If the number is only 3% and 10% from those schools, then the problem starts at the funnel that feeds those schools [1]. More minorities and women need to apply to those schools, so that the percentage goes up.

Should companies look beyond those five schools? Yes, but...

I'm not going to speak for any other curriculums, but the truth is that most computer science curriculums in the US are absolute garbage. Many CS programs are just java schools [0]. What these companies have done is identified the schools whose programs have a reputation for not being java schools. Historically, you could figure out which programs are not java schools by looking for those that use books like SICP, K&R, CLRS, TaoCP, PAIP, AIMA, EOPL, the dragon book, etc. as the basis for their CS curriculum. If there are schools out there with a much greater percentage of minorities and women that use such books for foundational courses, then you should suggest those schools as places to recruit from.

Simply put, the criteria for spending time, effort and money to recruit from other schools needs to be based primarily on the rigor of the curriculum, with demographics of the student body being a secondary goal.

That all being said, a lot of the best software developers I've met that didn't go to those top schools didn't graduate with a degree in computer science at all. Pretty much all the others are auto-didacts. Assuming this is generalizable, the only actionable you can extract from it is not to recruit based on school at all.

[0] http://www.joelonsoftware.com/articles/ThePerilsofJavaSchool...

[1] https://news.ycombinator.com/item?id=8593277

[2] FWIW, I didn't graduate from a top school (NCSU) and double majored in textile technology and apparel mgmt and psychology, so I'm not even advocating a position I myself gain from.
iOS supports CalDAV natively. Just follow the instructions at https://www.fastmail.com/help/clients/iphone.html (scroll down for calendar section).
StackLead gets acquired by LinkedIn
SSD Cloud, Public Cloud, Private Cloud and CDN in 178 Location by www.olgali.com
ABOUT OLGALI LLC
Based in San Francisco, California, Olgali is a leading cloud service provider offering cloud solutions to small and large enterprises around the world. Olgali was established to not only provide the best public cloud infrastructure available in the market today, but to assist corporation’s transition to their own private cloud instances in their own datacenters. By teaming up with Olgali, we will rejuvenate your infrastructure so that you can continue to be competitive.

https://www.olgali.com
The MobiCloud Construction App Challenge
700 low-orbit satellites blanketing the world with cheap Internet access
I think this solves itself: How is the NSA going to keep track of ever increasing piles of data-to-be-decrypted? They will be swamped, eventually red-flagging so many people that the red flag becomes meaningless.
Modern Poverty and Informal Class Stratification Demystified
> I think something like "Internet Freedom" would have been a much stronger.

I agree that the naming leaves something to be desired, but think it should have been the other way around. Rather than the status quo being "net neutrality," I wish the proposed changes had been labeled something like "Increased Internet Provider Penalties and Fees."

Then it would be more clear that people want to change from what we have now to something that allows providers to penalize and charge people.