skysight-inc/HackerNews huggingface dataset:
This might be a stupid question, but is there a way to leverage object annotations [1] for runtime checks of data coming from e.g. an API or FFI call (node.js module calling C++ code)?

[1] http://flowtype.org/docs/react-example.html#general-annotati...
An interesting tidbit from the HIG (https://developer.apple.com/library/prerelease/ios/documenta...):

Create prerendered animations using a sequence of static images. Store canned animations in your Watch app bundle so that they can be presented quickly to the user. Canned animations also let you deliver high frame rates and smoother animations. Creating animations dynamically from your WatchKit extension and transferring them to Apple Watch adds a delay before playback can begin.

This is not a good sign as to the power of the watch, unless I'm drastically misinterpreting things.
RSS Feed Notifier for Windows
In all fairness, Paul and Sara have been on an absolute witch hunt, seemingly angry because of Travis' capitalist ideals.

I've desperately avoided commenting on anything related to his because I've known Travis for about a decade, but... you are sadly mistaken. Uber has a downright toxic culture. Sarah might have gone a little far here and there, but it is not because Travis is capitalistic, but because he's turned into some kind of megalomaniac nearly unrecognizable from the person I knew a decade ago.

I recently saw a lovely email sent by Travis for an offsite reminding everyone that they were not allowed to fuck their subordinates and he, by extension, was not allowed to fuck anyone. That isn't just toxic to women. That is downright scumbaggery.
Livestream: Open edX developer conference
Sorry for the misclicked downvote (to the post I'm replying to).

It is very plausible (from my rando perspective) thatq moxie's reaction was greater than it would have been for some other badly done security. But it's also plausible that it's just frustrating to be working on something and then seeing a well-funded attempt to obliterate any good that you might be doing. Which is what Telegram was. Is it a "conflict of interest", if your interests are for secure messaging to become widely used, to attack those which are, thanks to their ineptitude and funding, a plausible threat to your goal? Taking the words "conflict of interest" literally, yes, but it's not an ulterior interest the way the phrase is usually applied.

Telegram was also doing a really good job of pushing buttons, going off about how they had Math PhD's.

Edit: Hold on, you're saying there was a conflict of interest, in the past, because he's working with WhatsApp now? Do you have any personal knowledge of the timeline here?
I think that plenty of site admins will be happy to run this software agent—remember, there are many site admins right now that aren't even bothered to set up TLS at all.

I run plenty of tools right now on production boxes that I personally haven't fully audited—we all do. This tool should be simple and widely used enough that it will be trustworthy.

For the cautious, it would be nice if the tool offered a mode that could be run as a normal user, even on a different machine. It'd have to be an interactive process:

1. "Enter domain to be signed."
2. "To validate ownership of the domain, create a TXT record on xxx.example.domain with 'na8sdnajsdnfkasdkey' as the value."
3. "Domain ownership has been validated. Please paste the CSR."
4. "The zone has been signed. Here is your certificate:"

Much less convenient (basically the same as the process with current CAs), but it would allow security-conscious admins to use the CA in a way that is comfortable for them. Since the tool is open source, it should be fairly easy for someone to write their own tool that speaks to the CA while providing this interactive process.

The tool is interesting and to be honest, I'll be comfortable using it (I'm not running anything high-profile or sensitive). However, the real news here is the new CA—the tool is merely a convenience.
Sceptive is looking for Jedi Knights
Once again, you can't implement this without specializing every call site that invokes Py_INCREF or Py_DECREF, or in other words, "1 conditional branch per object access everywhere."
This is interesting, but i think it's not useful.
If you had 100 Roberts in A Republican county and then another 100 Roberts in a Democratic county it looks like Robert is a neutral name, overall, for two counties but in reality it's solidly Republican in one and solidly Democratic in another.

So, without context, this means little. It's something to mention at a party, I guess where no one will look things up and take what you said as something insightful.
Microsoft: “Nobody loves developers more than us”
Python also keeps refcounts for other objects that shouldn't be garbage collected such as None, True, and False. The reason being to prevent having certain objects that need to be refcounted and certain objects that don't. Otherwise, C code would be littered with if statements like the below:

if (number < -5 || number > 256) {
decrement_refcount(number);
}
I thought that was the other juvenile defendant, the one not being tried as an adult; maybe I misread it.

Edit: I did misread it, sorry. It was Taylor who confessed. I wouldn't be surprised though, if the defense still uses the near-contempt and the overall lack of evidence to try to plead down or even still seek a dismissal.
Andrej, I totally get it, but I think what you have some far may already be pretty good to form the foundation of a product that has a clear/big need in the market. If you'd like to dig in a bit more and bounce ideas, ping me at ilya@robinlabs.com.
A better idea is to reveal potential special interests or personal biases of the journalists, especially if it compromises their professional integrity.
T-shirt millionaires, eh? Reminds me a bit of the Team Fortress 2 item designers who are making a living out of it:

http://www.kritzkast.com/mym-day-1-of-3
Let’s Encrypt: Bringing HTTPS to Every Web Site
Oh, and congrats - this is super-exciting!
Well, regardless of root cause, you all are racking up some amazing open source accomplishments. Big props to everyone working on open source at Facebook.

And I think these efforts will pay off in spades for Facebook, in terms of attracting top talent and in terms of the expertise that results from having the some of the best dev tools available being developed in-house.
This is referring to the delay in the transmission between your phone and the watch. By storing the static, pre rendered animations on the watch itself, they're ready to play immediately. By rendering them on your phone (where the WatchKit extension lives) and then transferring the view over bluetooth low energy links to the watch to display them would add a delay.
GA.TODAY: iOS App puts Google Analytics metrics in your today view (Beta signup)
wow this brings a new set of possibilities to the table!

http://www.slideshare.net/Sudar/transfering-data-using-audio...
Tweets contain a lot of metadata too though. In practice a tweet is really about 3K, not 140 bytes.
> That's a C example, where it demonstrates my point perfectly.

Yeah I kinda forgot about the result.

> Python doesn't even have a printf function, where did you get the idea it was supposed to be Python?

Nowhere? I never assumed your example was python, I was showing something irrelevant.
The main problem is the battery life. All this seems to indicate that the device is deisgned to maximize it. A matter of trade-offs, really.
> Go compiles very quickly, but that actually didn't impact us very much since we have largely been using interpreted languages on the backend. I'll betcha those poor Java programmers get pretty excited about this, though!

Oh?
Do ad blockers typically remove things like Flattr or potentially this Coinbase tip button? You're right about this being a cheap ad by but if there is a high correlation between bitcoin and the use of ad blockers and these tip buttons aren't blocked this could be an acceptable alternative.
If you're talking about the use of pre-rendered animation - you may be right, but given the graphic effects when you're drawing in Digital Touch, it's probably got enough power for animations rendered on the fly. May be a matter of baby steps, and they'll eventually open up more of the hardware in a way that doesn't completely kill the battery.
For some reason I can't reply to your longer comment below, where you say:

> I thought tjradcliffe might consider phrasing his comments more courteously next time.

That actually was my more courteous phrasing :-)

But I appreciate your civility, and in retrospect I should have left out "disingenously", which is needlessly inflamatory and distracting. I'll edit the comment to remove it. [Edit: unfortunately I guess there is a time-limit on the editability of comments, which has passed, so it'll have to stand as a permanent monument to my inherent irritability.]

However, I do believe "the God of the Gaps" is an instance of question-begging: people who use it attempt to build the assumption "anything that cannot be explained by current physics must be assigned to God" into the mutually accepted context of the argument. They assume--and ask their opponent to assume--what they are setting out to prove, which is what "question begging" is.

This is very much the mode of argument used by people promoting peaceful ancient civilizations, which only crop up in areas of ignorance, and which have a tendency to be proven false when more information becomes available--the Maya are not unique in this regard, but merely the most prominent example. This makes the point relevant to the article under discussion.

I'll plug my book here as you sound like the kind of reader I was aiming for: http://www.amazon.com/Darwins-Theorem-TJ-Radcliffe-ebook/dp/... , which as well as engaging in some egregiously speculative biology was written in part as a (hopefully) respectful attempt to engage intelligent and humane believers with alternative viewpoints on the relationship between science, religion, scripture and God (which was a struggle for me... I'm not an inherently respectful person, and clearly have more work yet to do.)
Our product Camayak (http://www.camayak.com) is a content production management system. We have a number of Content Production agencies as customers.

Camayak provides assignment creation with submission and publishing deadlines, and tracks the assignment through your custom editorial workflow.

We provide an editorial calendar which shows assignments by their deadlines, current status, etc.

There are pitches, comments, activity feeds, various notification streams, multiple content desks per account, customizable workflows, and a ton of other features.

Camayak can publish directly to WordPress, and any other delivery CMS or service through our content API. We support multiple delivery platforms per account and a single assignment can publish to multiple platforms at the same time.

Feel free to shoot me an email at ed@camayak.com if you have any questions!
After reading your profile, I don't think people are disagreeing with your statement :) Personally I've just started noticing your name above comments and enjoyed every one as thoughtful and stringently logical.
From a quick glance at the docs I tend to agree with you. Seems like we're going to be working in a pretty restrained environment on the watch since Apple seems to prefer you do the heavy work on the phone & not the watch Here's to hoping that this is good news for the Apple Watch's battery life!
Lovely writing. This is better than most of what popular science writers have produced on the subject.
Being a resident of South Asia, it makes me sad that we aren't taking any care of these historical locations.
If you want to talk to your friends/family, you have to give up who you are.

What's your solution here? How would I be able to talk to you?
you know what they say about Go being modern right?
So this app wants access to all your photos, ostensibly to make joining groups easier? That doesn't make me particularly excited about installing it.
http://en.wikipedia.org/wiki/Ha-Joon_Chang#Writing
Might want to start by asking the core Python community. Check out the first sentence on wiki.python.org.

Nowadays it's the norm for interpreted languages to be JIT-compiled. They still universally call themselves interpreted languages because the jitter is an implementation detail, and the use of one does nothing to negate the characteristics they're trying to advertise when describing themselves as interpreted languages.

Think of it this way: Can I take a text file containing source code in the language and execute it anywhere that has a special program for executing files written in that language (commonly known as an interpreter)? Or do I have to manually perform an intermediate step of converting the program to some binary representation using a special program for doing that (commonly known as a compiler), and then execute the output that program produces?
wow. That is a coincidence. But every word is true :) How long you been doing this ? And yes, would love to share notes. How to contact you ?
Short answer: because it doesn't JIT
German police and intel agencies sent 440,000 sms type0/stealth attacks to trace phones last year, FBI sent an OTA to a suspects internet stick to broadcast his location, and something shady is going on at airports according to Cryptophone GSMK who's radio 'firewall' goes off whenever you get near an airport. Besides that Samsung backdoor found by Replicant Mod that has access to /data and /sdcard haven't heard of other directed attacks yet.

Of course google can install whatever they want on your device if given a NSL including a modified WhatsApp that sends in plaintext straight to the police everything you type but haven't heard of that yet either.

Since Facebook makes money harvesting data wonder if WhatsApp grabs advertising keywords first then sends via textsecure layer.
Doctor forced to unencrypt laptop with patient info in armed robbery
No judgement here, I am right there with you. I live on the east coast and have a wife, 3 kids and all the expenses that go with the family too. So I get it. And you should really be thrilled you have done so well, that is totally awesome.

Video's are awesome and seem to really help. Glad they are already working well for you.

To your other point, I have trained my wife to handle our non-automated billed clients and I have outsourced all the other details like Accounting etc. It is amazing how much that frees up time and really does not cost much at all. I also use an online accounting system that is integrated to our products/services so that when a client purchases it is automatically added to the accounting system and so it removes the need to do bookings etc. The accountant than picks it up from there and does their thing and keeps everything straight for me. If you haven't already done that it may be worth your while to go there. Since you are using Wordpress there are existing integrations to QuickBooks, even if you don't use it for accounting today it might be worth moving to it and buying one of the plug-ins for like $100.

We just built a subscription service website for a client (they do online training with videos and quizzes) and they wanted it in Wordpress, so we utilized Woocommerce, Paid Membership Pro and a QuickBooks plugin that basically allowed us to write a very small amount of code (for that part) but let them have a fully integrated solution from signup to purchase to accounting. Just a point, not an endorsement for any of those products, but damn it works and it was way cheaper than a fully custom solution for them.

Lastly as to hiring someone, since you are in a more expensive part of the country, you could train/hire someone in say the Southeast or mid-west where salaries are a bit lower. Also, if you don't need a developer type to do the demo's, then you can likely find someone for a pretty reasonable rate to help you get people signed up.
In general, this argument is self-defeating: "I don't need a type checker because I write unit tests." Obviously that means you need a type checker, because then you don't have to write 70-90% of your unit tests. Unit tests require time and energy to produce, run, and maintain. A type-checking compiler can remove much of this burden from the developer.
Good point. But at the same time, a secure, bug free baseband won't save you from a fake cell tower that's intercepting and recording your text messages.
I can self-sign a certificate for gmail, the browser correctly warns about potential BIG security issues with it.
Pantelligent: Intelligent Pan – Cook Everything Perfectly (YC W13)
So how does the initial key exchange work here?
Are they allowing access to the sensor data from the watch? I'm particularly interested in heart rate.

A brief scan of the documentation didn't show anything obvious.
I don't think you can really make that claim about the Europeans being less tolerant of conflict. After the first world war, it only took a couple of decades to start an even bigger war. Then, the whole continent got effectively carved up into alliances with two outsid!e superpowers. All the periods of European peace, historically, correspond to some power/empire dominating at least much of the place, and the post-WW2 situation is not really different.

Nowadays, the effort is to make that one dominant power enforcing peace Europe itself.
I disagree partly. It's easier to estimate relative shares of a total from a pie chart compared to his linear examples.
If you have OCSP checking turned on you'll occasionally get this error with a cloudflare backed site.
No, but it would save you from layer-2 attacks that corrupt memory and can thus read encrypted text messages.
What? That's like saying that prosecuting perjury too harshly will incentivize better fabricated story coaching by lawyers. Or, in general, prosecuting crimes incentivizes more perfect crimes.
We're doing it once a year in NY. We don't have a mailing list but you can follow @stupidhackathon on Twitter for updates.
This post was killed by user flags, but since the thread is reasonable and people are reposting the story, we'll reopen it so discussion can continue.
I just ate some bread
I've seen that movie 4-5 times. I like it, it's very cheesy.
Every time I watch it, I become more and more convinced Dr Forbin planned it all. :)

Did you know the movie is based on a series of books?
> For some reason I can't reply to your longer comment below,

HN has built-in time delays that get longer for deeper threads.
It sounds like what you're mainly describing is that it's hard to ask a question that isn't already answered on the site. (You can't close as a dupe unless the duplicate has answers.) From a "helping the most people learn" perspective, this sounds like a champagne problem: There's so many answers that it's hard to find something to ask that's not already covered.

From a community perspective, we do want all devs to be able to get involved in the site, so it's not ideal if the solution set is actually so comprehensive that it raises the bar for getting involved.

But I'm not too worried. SO still gets over ten thousand questions per day, which gives devs who want to contribute to the programming community a ton of opportunities to share answers and help. Plus, and new languages like swift leave a lot of blue ocean for asking new questions.

Don't get me wrong, our two biggest product priorities are focused on how we can make it easier for new users to get involved, and how we can ensure that more active users continue to feel appreciated and find it rewarding to share their knowledge on SO, where so many others can benefit from it. There's plenty more we can do on both fronts, but I'm not too worried that we're running out of ways for devs to contribute if they want to.

Disclosure: I work at Stack Exchange. I love Stack Exchange. I am not an unbiased observer of Stack Exchange. My mom says I and my company are special, and I believe her.
https://news.ycombinator.com/item?id=8625092
When I think off-the-cuff "I'd like to do X" (and it's something unethical), I generally don't have a budget specified and number of staff to hire. And then I tend not to verbalise it to a large room of people.

If their product stands on its own, they don't need to keep doing this.
Rooms is a separate app, also made by Facebook, but (AFAIK) unrelated to the Groups app which is the subject of the article.
I think I prefer the term Pans Narrans, from The Science of The Discworld books.
Google has not removed XMPP support, although it's true that some new Hangout features have no XMPP equivalent.
This is what happening around you and your country
Agreed. This fanboy kinda trust and reliance can be very damaging.
I'm happy to see new products and a competitive landscape but frustrated to see Apple (and others) using different development processes. It's already painful to write apps that work on all 3 major mobile OSes, but now watch app developers have a huge set of watches they need to develop for too.

Frustratating to see products each trying to compete using their own closed ecosystem, because it hurts developers and it hurts innovation.
I just use asserts for this. If code is sensitive to a type I assert it as the top of the function. No analysis needed.
Regarding your first paragraph, I agree: all CAs need continuing scrutiny. Certificate Transparency, for example.

Regarding the rest of your post, however, I'm calling bullshit. You give very bad advice. Deploy TLS on every website. Deploy HTTP Strict-Transport-Security wherever you can.

The sites people visit are confidential, and yes, are not protected enough at the moment. (That will eventually improve, piece by piece.) That's absolutely no excuse at all for you not protecting data about the pages they're on or the specific things they're looking at, even if your site is static, or not protecting the integrity of your site. You have no excuse for that. Go do it.

Your other big problem is thinking that anything on your domain "doesn't need security"! Yes it does - unless you actually desire your website to be co-opted for use in malware planting by Nation-State Adversaries with access to Hacking Team(s) (~cough~) - or the insecure parts of your website being injected by a middleman with malicious JavaScript or someone else's "secure" login page that's http: with a lock favicon. (I have seen this in the wild, yes.) If you've deployed a site with that bad advice, it could be exploited like that today: go back and encrypt it properly before someone hacks your customers. This is why HSTS exists. Use it.

Regarding your CDN point, kindly cite - or demonstrate - your working "known attack" against Cloudflare's deployment?
This is certainly frustrating. I can't believe how close the author got to providing some positive reinforcement before missing the point entirely.
Completely worth the time to read. Thank you.
If it helps, my first impression of that post was you highlighting individual actions to smear the governing body.

eg.

>Christianity causes people to murder and steal, because the perpetrator of a murder/theft was Christian.

Any large group will have a number of bad actors, that is not indicative of anything except the large group being large. Even "interfering with the normal course of competitor's business" was an action of one firm, though it's pretty clear Uber allowed such actions to continue.

and finally "price surges" and "price gouging during states of emergencies." are ethically on the fence. People with a capitalistic bent would not find these immoral. Whether you feel our monetary distribution system is fair is another matter... I would argue that if wealth was fairly distributed (operating on my definition of fair here) then that would be a perfectly moral thing.

All this is to say: You were REALLY trying hard to smear Uber. Just like this article is. Which is really weird, because Uber's done enough things to smear themselves. They don't need help.
It renders predation on you maladaptive, because the predator doesn't get back the energy expended in hunting, so over time it does actually make you less likely to get killed.