skysight-inc/HackerNews huggingface dataset:
It is somewhat confusing whether this is a wishlist or done-list :)
Matias once threatened to kick my ass for messing with one of his UI widgets many years ago. It's a badge of honor I still wear to this day. :)
""" More to the point, if you're buying drugs online you're not supporting local drug dealers and the crime and violence that typically accompany open air drug markets, particularly in inner cities. By cutting those sellers out of the equation, you're seeing a net reduction in violence overall.
> the GOES-3 Satellite —a weather satellite launched in 1978 that lost its weather imaging capabilities and now provides 1-megabit per second data transmission for eight hours a day

Beautiful! From http://en.wikipedia.org/wiki/GOES_3

> having spent over thirty one years in operation, it is one of the oldest functioning satellites in orbit.
The Perl community really frowns upon that kind of code now.
That's true in the US, but not necessarily elsewhere. There are lots of great cities in Germany which could stand for some growth; people have been talking about Leipzig recently.
Federated Education: New Directions in Digital Collaboration
I would caution against drawing arbitrary lines between agencies like FBA and NSA or GCHQ or the "cryptographic community" in terms of information/skills, e.g. http://www.foreignpolicy.com/articles/2013/11/21/the_obscure...

It might be more accurate to conclude that information is a currency in an unregulated market: GCHQ shares with NSA who shares with FBI DITU amongst many other public and private sector customers.

In a world of parallel construction, the most reasonable assumption is that anyone can be privy to anything, or at least information derived from it.
Hasn't that change in 2.X series?
Which do you need sooner; fast? or correct and scalable?

Erlang is built first for fault tolerance, not speed. The decisions that went into that make it also really, really good for concurrency and distribution (and so that's what it often gets touted for).

The decisions that went into C++ were for speed, and compatibility with C (and all that entails).

If you've got something truly resource intensive, yeah, you're going to need a lower level language. That's largely unavoidable. Erlang.org flat out states don't use it for number crunching.

I'd guess that 90% of what is programmed in the wild isn't that resource intensive. And given that, I'd go so far to say that most of what I've coded in Erlang is more performant than what I've coded in Java (haven't done enough C/C++ professionally to have useful data points). Why? Because the abstractions and conventions lead me to writing better code; the tooling lets me profile and find bottlenecks more easily, and even code I tweak for performance is oftentimes cleaner than it started, rather than more arcane.

Joe Armstrong, the founder of Erlang, is quoted in OTP in Action as (paraphrasing as I don't have it on hand) - "First, make it correct. Then, make it beautiful. Then, if you need to, make it performant. Chances are once you've made it beautiful you'll find it sufficiently performant". And that's been my experience with Erlang.
I had the same reaction! The Veldt!
It would be nice if this thing could read eBooks or at least play Audiobooks from Amazon. If they add this feature (and remove some of the creepy stuff), i'm sold.
Europol took over the .onion domains? How does that work technically? And doesn't it sound a little brusque considering Europol doesn't have authority to do anything on the field?
Erlang is developed by the Ericsson as a product to use for themselves. Its not a research language like Haskell but developed for a niche and when I said commercial I meant that it is designed as a commercial product. I have seen more Erlang systems than any other functional language.

Just to mention one, RiakDB, a successful distributed software system is developed on top of Erlang. Actually I've yet to see any other product used by 100s or perhaps 1000s of developers developed on F# or Haskell. Not to mention, almost over 80% of telecom industry is running on Erlang.
It's called hacking, scratching an itch to see what you can do using a different approach. Remember, this site is called "Hacker News".
Can your endpoints log to syslog so they can be forwarded on to a central collector?
You can download a DB with this info here: http://dev.maxmind.com/geoip/geoip2/geoip2-csv-databases/

I integrated that into my own webserver so I get fun logs; there's a tingle when you see people reading your own posts after all.

You can also buy a bigger, better DB from the same people.
The Launch Diary: Three months left to save our startup
Making video games inside Minecraft
Twitter’s future: How high can it fly?
Hence the idea of reasonable doubt which has a specific meanings in various jurisdictions:

http://en.wikipedia.org/wiki/Reasonable_doubt

None of the items taken by themselves are enough to convict (e.g., other people would be tweeting about Silkroad 2 at the same time), but you add it all together (server in his name, piles of unexplained cash and large purchases, tweeting about it, accessing the servers from his machine, etc., etc.) and it starts to look really bad.

Plus he's also confessed, apparently.
It is a pity that the concurrency column is as red as it is. I hope it does not end up like Perl threads.

It would be so nice to have easy threads in this language.
What makes for a stable marriage? Part 2
I don't think your concerns are justified: the added-value of Erlang is not its speed but its reliability and its tooling to build large, stable softwares.

Try to look for something that works at scales you're interested in, break it down to its components and rearrange them into a simple architecture, then only can you consider performance. It turns out the lack of performance you feared at the beginning doesn't actually happen; in the meantime you'll have built a robust software (and, if you want to start the language, you'll have learnt a whole new way to program)
As someone who attempted (and failed) to move to Prenzlauer Berg earlier this year, I can honestly say that it was really rare to interact with native Berliners because they were pretty hard to find. When I stayed in Wedding there were plenty of what you and I might call native Berliners, but locals wouldn't (mostly of Turkish descent), although I did find more in the Hansaviertel than the stats would show, but I think I was better at interacting with local people by then.
A creepy website is streaming from 73,000 cameras; some in the bedroom – Neowin
The whole idea of a centralized market, with someone syphoning off large amounts of money and being the major legal target, sets it up for failing. Once it becomes a distributed marketplace with all services replicated it becomes much more secure.
start.me – The new iGoogle has arrived
I 100% agree with this. Most of my management style comes from managers I have worked for in the past and what was good/bad about them. You will always have bosses and now you are probably reporting to Sr. Manager or Director. Start observing your new management and pick some new role models.

The management traits I try to embody are empowering of my team and almost inverting myself. I am there to enable my team to succeed. It's my job to ensure they can be at their best. That means taking care of anything that may distract, block or otherwise hinder their progress.

The best managers I ever had put a great importance on my growth and that I got to work on things interesting to me and in line with my career goals. They would make sure I got into working groups I wanted or the projects I was interested in.
The FBI raids might actually be giving free publicity to these kind of markets. People who had never heard of them have now read news stories about the markets and might now seek them out.

After all, the services that sprang up to take the place of the original silk road soon grew bigger than the original site. Perhaps the same thing will happen now with whatever new services now emerge?
Is that “perl poetry” or does it mean anything?
Part 1 is here: http://www.randalolson.com/2014/10/10/what-makes-for-a-stabl...
> I believe that the OpenSSL API allows one to implement the actual transport of the TLS protected data however one choose.

Yes. Through the terrible BIO_* API.

It's imperfect, but it lets you treat TLS as a "black box" that you shove encrypted/cleartext data into, and get cleartext/encrypted data out.

This API is good for socket communication. Nothing more.

This API could be extended by adding "underlying" read and write functions. Off of the top of my head:

typedef int (tls_underlying_io)(struct tls ctx, void u_ctx, const void in, size_t inlen, void out, size_t outlen);

int tls_set_io(struct tls ctx, void u_ctx, tls_underlying_io u_read, tls_underlying_io u_write)

Where "u_read" is used by libtls() instead of calling read(fd,...), and u_write() is called by libtls instead of write(fd, ..)
Here's the important part:

The ressl API does provide one noteworthy feature. Hostname verification. In order to make a secure TLS connection, you must do two things. Validate the certificate and its trust chain. Then verify that the hostname in the cert matches the hostname you've connected to. Lots of people don't do the latter because OpenSSL doesn't do that latter. You have to do it yourself, which requires knowing about things like CommonNames and SubjectAltNames. The good news is that popular bindings for languages like python and ruby include a function to verify the hostname. The bad news is if you pick a python or ruby project at random, they probably forget to do it. Another funny fact is that since everybody has to write this code themselves, everybody does it a little bit differently. Especially regarding handling of wildcard certificates and everybody's favorite, embedded nul bytes. Hostname verification is on by default in ressl, and the API is designed so that you always provide a hostname; there's no way to accidentally call the function that doesn't do verification.
Moving email to Emacs: Wanderlust
Were you using SMS or push (GCM) transport?

Non-related to TextSecure, I've tried to use GCM to send notifications about faulty servers and found it quite unreliable. It seem to work fine when the phone's on and has a good WiFi connection, but seem to lose messages in real-life conditions. Not to the extent to completely stop working, just a packet loss, though.
Both this solution (and easytiger's above) work if disconnects happen rarely and for short times.

But it my case, I have "30 minutes on, 5 minutes off, 90 minutes on, 90 minutes off, 2 minutes on" kind of situations, in which anything that doesn't track what was already transferred and what wasn't, will lose data. (zeromq's buffers also have limited capacity and/or are tied to a process on the other side - if it restarts, buffers are gone).
Try 'format' ;-)
I'm a bit confused. The more i read the doc, the more i feel it look Just Another Queue system. I don't really see the difference between Kafka and let's say RabbitMQ, Celery or also statsd...
Sounds like a job for logstash: http://logstash.net

If you don't mind using a 3rd party service, you could look into using Papertrail, Loggly, etc.
Wow, this is interesting. Good luck guys
Probably. Do you know of a syslog/forwarder that deals properly with intermittent connections? (i.e., available for an hour, then gone for an hour, then available again, etc.)
Ignore the fact that the entire West is working together at your peril.
I'm not sure what you're getting at here. Does it matter if it's a repost if the other link has 6 upvotes and 0 comments?
Introducing a New Guide, “The Secrets to App Success on Google Play”
Excellent story.

While I think it's worth throwing oneself into a startup for a few years, because there are learnings you will get this way, that you will never get anywhere else, there should be a long term vision.

The story of Rafael Nadal is great and applies to startups 100%, because the best founder is the one who has a balanced life and can make use of all of his creativity. A startup founder who doesn't have a life besides the startup, simply won't create a huge startup. Yes, they might be able to make a few hundred million, but they won't be the ones creating a transformative startup.
Working Copy, read/write Git client for iOS 8 just released
The Improbable Story of the Online Encyclopedia
Perl optimized itself to death. They wanted a new feature, realized they could save 3 keystrokes per day by using $‽ for some new feature, all the experts agreed, and they go with it.

I'm really afraid that Rails is going the same way, that the DRY mantra is going to eventually lead to a Huffman encoding only parseable by Rails experts, and then no one new will want to get on board.
Thank You HN, Voxel Quest Is Funded
The HN community was instrumental in getting my campaign funded, so I just wanted to say thank you. I also wanted to thank the investors who offered through HN, your offered support and praise has really meant a lot. This funding will allow me to keep the company private and hopefully one day fully open source everything permissively (full source is going public on Github in a few months regardless). I am streaming Voxel Quest all day with the new perspective camera being demoed on twitch.tv (link below), and I will answer any questions here as well. VQ is in its last day of Kickstarter if you still want to pitch in. Thanks again everybody, I am moved beyond words. :D

Edit: one side note - the perspective camera I am demoing was developed in the last week of running the KS campaign, so it is still quite buggy but nonetheless a good proof of concept. :)

Edit 2: also, it is amazing that we got there with zero coverage from gaming press! Thank you again HN for being the one site with enough "vision" to see something meaningful in my work. :)

(Youtube demo of perspective):
http://www.youtube.com/watch?v=z5QKin0HAtI

(Live demo):
http://www.twitch.tv/gavanw

(KS Link):
http://www.kickstarter.com/projects/gavan/voxel-quest
Doesn't palantir basically just do this for them?
1) Optimizing for the most common use case. 2) You can create file descriptors not backed by any actual network connection or file on the harddrive (man 2 pipe and man 2 socketpair), you can still build an API on top of that which operates purely on buffers.
Yeah, wow.. I love that common thread to be so open about everything. Best of luck! Can not wait until release :) I will follow along for updates
Budgeting vs. Estimating for Agile Projects
> The second link is merely an animated gif of an octopuss.

Now that is funny. Either the blogger changed his URL structure in the time I copy/pasted, or I did a dumb:

https://blog.jcoglan.com/2013/11/15/

> If she did somehow draw a causal link between those activities and not using github (she doesn't), it would imply that women should also be absent from Facebook, Pinterest and Instagram. They aren't.

Wait a minute, are you seriously trying to advance the argument that software development (the purpose of github) is as mentally similar as browsing the web for pictures of cakes (the purpose of Pinterest, as far as I can tell)?

Not sure if serious or trolling.

E: jcoglan is doing referer: madness, copy/paste the URL or bang refresh.
I have my old CD collection ripped to .wav and served up via DLNA device. It would be nice if Echo worked with DLNA devices so I did not have to redo all this work.
Exactly, I don't think I'm disagreeing with anything. Balance is about both sides of the equation. I do think you came on a bit to one side however, and it's important to have both recognized.

To the examples you listed, I'd say it is extremely important to look at systems and their effects on individual behavior. There's a reason those problems are epidemic and not just outliers. The same goes for management and poor work/life balance: people don't make these types of decisions in absence of influence, and as leaders we have the ability and responsibility to understand that influence.
Host and cert verification by default is good. You can use tls_config_set_ciphers to set a cipher string, but I don't see if they disable unsafe ciphers by default.
"Buy local! Except for drugs!"

How do you actually get your drugs if you buy them on Silk Road? Do you have UPS bring the MDMA to your door?
"A strong argument can be made..." but the OP never does such a thing nor contextualize it, so linkbait it is.

The title is breezed over, as a topic, in the article. Looks more like WP blogger likes to get high and is miffed.
Silk Road 2.0, infiltrated from the start, sold $8M per month in drugs
It's clearly being upstaged by yours.
Thank you both! Really appreciate it :)
KaOS Linux 2014.11 Released
Pangu8 1.2.1 Download
+1 on the message loss issues. Even got to the point where I would lose incoming messages if I didn't catch them on the notification screen.
This is the most important advice.

Some tips that can help towards this:

Don't micromanage your employees. Nobody likes being micromanaged, and if you have to micromanage, something is broken. It indicates a lack of trust, and people are inherently resistant towards micromanagement.

Look out for your employees. Praise your employees first before yourself, and praise the team for its successes. Keep an eye out for the morale of the team, and talk honestly to the team as much as you can - this doesn't mean tell all bad news immediately, but at the appropriate time. You're in charge of everyone's productivity, so you must act in an optimal fashion.

Also look to develop your employees. People want to keep progressing in their careers, so help with that end.

Set the example - you should be working the longest hours for the most part. This is not a hard and fast rule, but nobody respects someone who is not at least willing to do what they say.
Periodic table – 1 search
They catch Russian carding marketplace admins all the time so living in Brazil or Russia is no guarantee you won't end up in jail either. Just takes one mistake and you are on a plane in handcuffs to a federal court. They could bribe local police to pick you up for them too especially if you aren't politically connected in those countries.
Basically yes - they are sent through the post.
There was an entire novel written without using the letter "e", in French, called "La Disparition".

It was then translated in to English as "A Void", also without using the letter "e".

https://en.wikipedia.org/wiki/A_Void
> How do you actually get your drugs if you buy them on Silk Road? Do you have UPS bring the MDMA to your door?

Yes. Typically it comes in "stealth" packaging to prevent it being detected en route. If it wasn't for tor being so slow it would be basically the same flow as ordering something off amazon

(or so I'm told)
3rd party is not an option. I'll have to look at logstash, thanks.
I went to the local electronic crimes branch of law enforcement once, when my Gmail account was broken into.

They basically asked me if I was reporting large-scale financial theft, human traficking or child porn. If it wasn't one of those, they didn't have the manpower or will to pursue it.
Requesting an image of a paranoid person's server isn't necessarily that great. When I worked for a run-of-the-mill cybersecurity firm, our simulator products were protected with full disk encryption using run-of-the-mill open-source software + light patches and keys bound to specific hardware, software, and configuration states via the TPM. This is for fully automated boot up. If you can accept the risk of needing to be physically close to a machine, you can generate random bytes and store those into your TPM and require both the hardware/software/configuration to be correct as well as knowing your key. This would incidentally also prevent you from being able to give law enforcement the key to an image of your computer (this is actually impossible, you don't know the key).

If you're doing this under a warrant, you could just request that the server's operator unlock the machine. Whether you comply is a legal situation that varies from jurisdiction to jurisdiction (in the US, it seems that you might be held indefinitely in jail if you refuse to divulge your key). The thing is, you should be able to make an extremely strong case (possibly with the EFF's help) that any warrant is false. Anonymous traffic itself should not be enough to compel you to divulge your secrets without other evidence pointing to your machines (standard IANAL, but this seems consistent from everything I've read).
http://www.shrewsbury-ma.gov/egov/docs/1231966028252.htm
So glad, I upped my pledge. Can't wait to see what people tinker with for the release!
CSS and jQuery mega-site navigation
I have always programmed micro controllers in C and recently bought a micro python board, which I love. It has been refreshing using python on a micro controller. I have been learning Lisp recently and can't wait to try this out!
Subscribing to the feed and looking forward to following your progress. Good luck!
Linus Akesson ('lft') is probably one of the hackers I admire the most. In a few years he went from a sound-only demo on an ATmega [1], via generating VGA [2] and PAL [3] video demos on the same platform up to implementing custom digital logic including a processor and shader-based graphics accelerator on an FPGA [4].

At the same time, he is a really talented musician, and uses his hardware knowledge to augment [5] and build [6] custom instruments.

He just keeps churning out concentrated awesomeness and hackery.

[1] - http://www.linusakesson.net/hardware/chiptune.php

[2] - http://www.linusakesson.net/scene/craft/

[3] - http://www.linusakesson.net/scene/phasor/

[4] - http://www.linusakesson.net/scene/parallelogram/

[5] - http://www.linusakesson.net/chipophone/

[6] - http://www.youtube.com/watch?v=NV6IFOVY-go
Rakudo MoarVM is the real Perl6, and it's almost all green.
Follr Integrates RebelMouse
Disclaimer: not a cryptographer by any means.

I think "basically pointless" is when there's a known vulnerability that renders the encryption pointless. I think Telegram's more like "bad-smelling and while no exact vulnerabilities are known (since no one cared to audit), it's probably dangerous."

Just trying to be fair.
> Even if all drugs were made legal these sites would still have to be taken down unless you could find some way to tax them.

If all drugs were made legal its very likely risk overheads would exceed tax, driving them out of business.

Why can't I go on to a darknet market and buy a hard drive tax free for example? Because they can't undercut amazon even without tax
Bear in mind that this map is simply showing people born in Berlin (which would include second generation immigrants) vs. elsewhere (including other Germans).

If you're interested in non-Germans in Berlin, that's this map:

http://interaktiv.morgenpost.de/migranten-in-berlin/
> Which do you need sooner; fast? or correct and scalable?

Well, if I need all of these options, then Erlang is obviously not the way to go. In that case, Erlang might work as a prototyping language.

My impression is, from what I've read here, that Erlang might be the preferred tool for situations in which latency is not of paramount importance. For example, when sending text-messages over the internet, it doesn't hurt if the message takes 1 or 2 seconds longer to reach its destination. However, for a webserver, every second it takes longer to load a webpage means that you lose customers.

Do you think that's a fair characterization?
Modeling Data in MongoDB vs. ArangoDB
:) Thanks. Looking forward to see what people do.
Seeing Mammoths
The hostname also needs to be verified somewhere in there.
I think that you're right. The FBI has (so far) only managed to take down three of the top six darknet markets[1]. It seems likely that the majority of the sellers from the shutdown sites will move their operations over to the remaining three; bolstering their sizes and attracting more customers.

[1]: http://www.digitalcitizensalliance.org/cac/alliance/content....