skysight-inc/HackerNews huggingface dataset:
You can build it from the mainline git repo, but what you get is a version of the kernel with defining features of Linux/Unix missing.
It looks exactly like an iPad mini, to the point where I may have difficulty telling them apart.

There are x86 Android devices, have been for a while, although they are more rare than I anticipated. Should be an interesting device indeed.
Nice! Didn't knew that other providers do it aswell.
Part of the notion is that any piece of code _can_ be a microservice. The way our framework does it, very nearly any function can trivially be turned into a microservice.

It becomes a _service_ once it gains communications and a global name, perhaps?
Emil Michael suggested that Uber should hire opposition researchers to investigate the personal and family lives of journalists, including but not limited to, harassment of their spouses and children.
This sounds very useful.

One further question. Say a service A calls service B. And let's say service B needs several seconds to complete, and emits a progress indicator every second (I assume this is possible?) Will A be able to read these progress indicators also every second, and send its own progress indicator to its caller?
But that does not mean the Android OS will be updated.
I never understood why people rely on the + trick to determine the source of new spam. Wouldn't a smart spammer / list-seller simply strip the suffix from all @gmail.com addresses?
Girls Gone Wild
The submitted link (https://whispersystems.org/blog/whatsapp/) is 404. Also, at this time, the Whisper Systems blog doesn't actually show a blog entry referencing WhatsApp.
Incomplete Article for old well known stuff:

1. "Gmail has a wildcard for the + sign as it doesn't recognize it nor any characters that follow it."
This wrong. It is well documented and called aliasing within Google. There is even a support page for it: https://support.google.com/mail/answer/12096?hl=en

2. Even that is documented: https://support.google.com/mail/answer/8158?hl=en

3. Even that is documented: https://support.google.com/mail/answer/159001?hl=en
There are also a lot of ccTLDs that Google has for Gmail. Also those will work.
He 'suggested considering' this at a dinner party, and 'Michael at no point suggested that Uber has actually hired opposition researchers, or that it plans to.' according to Buzzfeed - they're trying to imply it was a serious suggestion while actually sticking to the facts, which imply it very much wasn't. It's fascinating.
Uber explicitly talked about going after reporters' families.

The primary reporter that Uber was talking about at that dinner is Sarah Lacey at PandoDaily. Sarah has been very critical of Uber in the past. She also has two very young children and has written a lot about what it's like to start a company and pitch investors while being pregnant and/or having young kids at home.

The obvious implication is that they were going after her kids.

Here's her response, in PandoDaily:
http://pando.com/2014/11/17/the-moment-i-learned-just-how-fa...
Show HN: Brandfather – Digital styleguides made easy
Doesn't that alleviate the benefit of deduplication, if you're working on multi megabytes objects ? You'll end up copying a lot, unless I'm missing something obvious...
You can have multiple versions of the same deb package. Look for installed Linux kernels on your system and you'll likely find an example right there.

Not so much - they have to have different names. I couldn't have a package named, e.g., linux-kernel and install version 3.4, 3.5, etc, instead I have to install linux-kernel-$version, each of which is a different package.
They might have contributed the most over time, but we probably don't disagree who was more important to the whole WebKit party getting going.
Spoken Word of a Feminist
I've thought the same thing since I encountered this trick a few years back. My guess is that most email providers don't allow the use of a "+" in the address and as a result its viewed as a fringe case and not accounted for.
From what I see 3 upvotes in the first 10 minutes is usually enough to get to the front page. And I think you can get away from the ring detector and penalties if you just keep your influence on upvotes at 3.

At the same time, I think this is not unfair to HN. There is a lot of luck in getting these 3 first upvotes, and luck, as I see it, shouldn't be a factor on the ranking of a post.
When on the frontpage, even for about 10 minutes or less, then there is enough people seeing your title and reading your post to get luck out of equation. And your post will get traction more on merit than luck.

To both take luck out of the equation and avoid being tricked, I think HN should have a small section on the front page with random "new" posts. One or two every 5 minutes. Then people would have a chance to see what's new and chose to upvote.
Until then, if you call 3 friends, ask for upvotes regularly spaced in the first 10 minutes, and do it only once, I think you have a pretty good chance to get your Show HN on the front page and see if it stays there by merit. But don't get greedy. Do it with too many friends, for too many time or too many times and you will get penalized.
Very interesting, it looks like they're working with IdenTrust on this. I wonder if it supports wildcard certs.

Like StartCom selling Class 2/3, running a CA is very expensive and I wonder how they plan on recouping the fees for this.
Cheapest possible toaster oven + cheap multimeter thermocouple for manual temperature control + {paste flux, solder paste+stencil} works better than you'd think for soldering BGAs. Even honest-to-goodness reflow ovens can be had on eBay for $300-$400 (search "T962"), which would give you another one or two nines of reliability by circulating the air and having more precise temperature control.

Schmartboard also makes 1.0mm pitch BGA adapter boards, but a lot of the high-end stuff these days is moving to 0.8/0.5/0.4mm pitch. Of course, for those kinds of things, the extra parasitics of an adapter board are probably a no-no in any case.
MKBHD AMA on Reddit
Yahoo Mail does this. You can make a specific new address and then delete it when you're done. https://help.yahoo.com/kb/mail/SLN3523.html
Alternative theory: Uber is run by an asshole, and that percolates down through the company to create the toxic culture we see today.

We can differentiate by looking at another highly regulated market: short term housing. AirBnB certainly isn't angelic, but I think it is fair to say it doesn't come close to Uber in pure reprehensibility.
This is one reason that I don't regard PHP as anything more than a toy language.
This is a 404 too, like the whispersystems blog post.
How Arrow's Team Plans a Winning Strategy
Thanks for the clarification. Further clarification:

I need to refresh my knowledge before I'm sure, but I think that statement regarding dependencies only goes for build-time dependencies. An update to a run-time dependency wouldn't require a rebuild of the dependent.

And the build-time dependencies' up-to-date status is not very important most of the time. "Does it matter whether I used Bash 4.0 or 4.2 to run that ./configure script?" Nope. I'm not sure to what extent this carries over to practice so far; the recent security patches to Bash did cause a total rebuild in Guix. I hope that will change by the time 1.0 is released. Theoretically, you could use the same build-time-dependency packages for years (e.g. a "bash-for-building" package), yet quickly deploy bleeding edge versions to users (proper "bash" package).
This is a surveillance tool so that 'we' can monitor 'their' activity and take appropriate measures.
Wikipedia's "openly editable model" in 2014.
What you missed is that Microsoft didn't buy Nokia or the brand. Nokia only sold its ‘Devices and Services’ business to Microsoft. Nokia was left with Nokia Networks, Business Services, HERE, Nokia Research. MS licensed "Nokia" brand from Nokia for limited time. Nokia can't make mobile phones until 2015.
It's really strange -- I was literally just reading this and saw the paragraph at the end of the Verge article implying Moxie's support. Confirmed that it's 404 here too.

>>Still, it took a lot of work to get TextSecure's protocols ready for WhatsApps hundreds of millions of users. Open Whisper CTO Moxie Marlinspike says it took six months to get the code ready for such a large deployment, beginning shortly after WhatsApp was acquired by Facebook. "Most of our efforts have been focused on making our code easier to consume," Marlinspike told The Verge. "I've been really impressed with the dedication and commitment WhatsApp has to the project."
Yes, you're right about the support pages. I only knew about the "+" sign until now and it seems like lots of people didn't knew about this :)
Also the article from The Verge went offline http://www.theverge.com/2014/11/18/7239221/whatsapp-rolls-ou...
Incidentally, the WhatsApp cofounder donated $1M to the FreeBSD foundation today.

The other link posted, theverge.com, is 404 as well, btw.
I get the feeling that there's a side that Buzzfeed and Pando aren't mentioning.

The executive mentioned 'they'd be justified' in digging up dirt on Sarah Lacy. I wonder on what basis that one would justify that - the article mentions Lacy's criticism for a dumb ad campaign in France, but that doesn't seem like something that would provoke a response saying 'we'd be justified on digging up dirt about you'.

Does anyone know if Sarah Lacy has dug up dirt on Uber staff and their families?
New data reveals it's not just high-tech companies using H-1B guest workers
> Are there any consumer devices running x86 Android?

Motorola RAZR-i (2012) was one of the first I think, there have been many since.
It's OK to Fire Your Bad Customers
The comic was applied to the situation somewhat liberally. :-)

I guess you could say it's about de-facto standards here, rather than standards. Deb, RPM, pacman, Nix, etc., as well as all the language-specific PMs all solve the broad problem of package management, so one of them could become the de-facto standard and embrace the others, but it ain't gonna happen.
What I'm about to write is abstract so you may want to skip this comment.

I see many big products releasing open-source frameworks and most of those frameworks are often very similar to other frameworks that already exists.

Moreover, the goal of those frameworks are also very similar.

But they do it nonetheless. And my understanding for this to happens is that every serious application with enough load is unique in term of architecture and also in terms of culture.

And I believe it's a mix of the two that makes it very hard for any company to use something that is already available. You have the workforce to build something that really looks and talks like you, why would you use something that does only 90% of the job.

And this makes me wonder a lot about why frameworks like that are open-sourced. Is it really for the Greater Good? Or is it a recruiting tool?

I'm ambivalent, and I don't have any answer.
The Verge had an article about this, whatever "this" is: http://www.theverge.com/2014/11/18/7239221/whatsapp-rolls-ou...

But that's also 404 now, here's a cached copy: http://webcache.googleusercontent.com/search?q=cache:NAz9uOi...

And here's a copy of the article text: http://pastebin.com/Y5CUPqDJ

They talked to Moxie about it, so it doesn't look like a hoax. More like it wasn't supposed be announced yet.

It goes without saying that this would be a big deal. And it would explain a lot of the slow movement w.r.t. an iOS client. Although The Verge wasn't sure if and when the encryption would be available on iOS. And WhatsApp is closed source software, something that's unlikely to change, which really isn't what we want from a secure messenger. So I might keep Text Secure installed for the time being.

But still. OTR (and the enhanced/modified version of it TextSecure is using) is probably the easiest to use way to communicate in a reasonably secure fashion, and it'd would be fantastic to see it used by hundreds of millions of users all of a sudden -- even if it's sitting on top of insecure mobile operating systems and untrusted-yet-privileged hardware.
Not everyone knows everything. I knew all of this, but lots of people don't.

If there's one thing I think I could change about HN, it would be that we'd be easier on people who don't know things. Many times I'll read an article about the new version of PolyDoopWerks, and be told that it's the Uber-of-OOD-builders, and have no idea what's going on.
Kwikset makes several deadbolts with keypads and keyZ-Wave support that I've been very pleased with. I'm a big fan of the quick rekeying feature most Kwikset locks have these days so I can always rekey just all my doors and give that key to someone (since putting Z-Wave enabled deadbolts on all my doors would be fairly expensive).
Free CA? This is cool. Why this wasn't done a long time ago is beyond me. (Also please support wildcard certs)

An interesting thing happened at a meet-up at Square last year. Someone from google's security team came out and demonstrated what google does to notify a user that a page has been compromised or is a known malicious attack site.

During the presentation she was chatting about how people don't really pay attention to the certificate problems a site has, and how they were trying to change that through alerts/notifications.

After which someone asked that if google cared so much about security why didn't they just become a CA and sign certs for everyone. She didn't answer the question, so I'm not sure if that means they don't want to, or they are planning to.

What privacy concerns should we have if someone like goog were to sign the certs? What happens if a CA is compromised?
A little vague on details.

Apache only or also Nginx?

Who is the CA?

No way I am running something like this on a production machine.

I like the idea but I would rather have the client just output the certificate and key in a dir so I can put the files where I need them and I can configure the changes to my webserver.

Also this does not solve the issue of a CA issuing certificates for your domain and doing MITM.
Huh, http://www.theverge.com/2014/11/18/7239221/whatsapp-rolls-ou... (found searching Google News for TextSecure) is also 404'ing at the moment.
1 second of Googling found me a cool Javascript emulator: http://schierlm.github.io/OberonEmulator/
It's not a valid way to test for illicit spam, but it's a good way to help keep honest people honest.

There are researchers who make brand-new addresses and put them in various places as a tripwire for spam.
Will these certificates work with Internet Explorer and Chrome?
No, I'm having some issues with cm11 and battery drain so thinking of going back to 4.4.2 at the moment. Might try a sneaky install of lollipop just to see. I'm a nogapps user so new android releases tend not to appeal to me :)
Just deleted uber from my phone and installed lyft. This kind of behavior is unacceptable.
Those tools you mention are typically not interprocedural analysis. They use information that is local to the method. The analysis at Coverity is interprocedural and hence much more sophisticated.
They probably recognized the + and stripped it, as well as all subsequent characters, from your address upon form entry.
I've seen some sites reject the + in email address forms. YMMV.
4500 years later, not 2000 years.

But India is not alone. Europe also experienced civilization reversion. As did East Asia. As did the Americas.
They can. Fear is the only deterrent.
Goldbely (YC W13) Celebrates America's Best Foods
Nix is attempting to be the solution you're looking for. Look at the nixpkgs repository: https://github.com/NixOS/nixpkgs

You will see packages for tons of stuff, including:

* Python packages from PyPi: https://github.com/NixOS/nixpkgs/blob/master/pkgs/top-level/python-packages.nix
* Haskell packages from Hackage: https://github.com/NixOS/nixpkgs/blob/master/pkgs/top-level/haskell-packages.nix
* Perl packages from CPAN: https://github.com/NixOS/nixpkgs/blob/master/pkgs/top-level/perl-packages.nix
* NodeJS packages: https://github.com/NixOS/nixpkgs/blob/master/pkgs/top-level/node-packages.nix
* Lua Packages https://github.com/NixOS/nixpkgs/blob/master/pkgs/top-level/lua-packages.nix

All these packages in one place, all installed through the same system and automatically built and tested on the Hydra build farm. Nix users have developed tools which automate (as much as possible) the creation of these packages.

I really believe NixOS is the future of the Linux distro, and it's tragic that it's still relatively obscure. It revolutionizes the OS in a myriad of ways, getting everything into the same package repository is just the beginning. For instance, it's fully configuration managed out of the box, using the Nix package manager as its configuration mangement system. Puppet, ansible, saltstack, chef, etc. are all made obsolete. Sure, it still has some rough edges, but it's a great community to contribute to and is improving at a impressive clip. If you're interested in the other ways NixOS is better than whatever you're currently using, I refer you to the website: https://nixos.org/
I would love to take a class for building a computer like this.
My website only contains publically available stuff for people to read.

Is there any reason why I would want to use https for this use case?

Or what does "entire web" mean?
The background briefings is really just 'seed planting'. They are providing information they intentionally want to have out in the future, it's preparatory and both sides know it. It's the careful dissemination of information.

From the article: "They’re invited to a background briefing, one of Washington’s most common, and little examined, rituals for the transmission of official spin, talking points and, occasionally, actual news."
Hardware by the Numbers Part 2: Financing and Manufacturing
The Indus Valley Civilization was not "before civilization".
I hope all the people commenting with pitchforks in hand have also never said (or have been alleged to have said) anything at a private dinner between friends that could be construed in any way to be similar to these remarks.
Wow, I had a goofy idea a few months ago that one day we could have some sort of non-profit/charity that just runs a free, as in beer and freedom, "common good" CA.

Looks neat.
Getting Your Rails App Running on the SAP HANA Cloud Platform
or use the "is this really equal" operator '==='
How can you be so sure it was not accidental?

Seems to me, the need to be in control is enough motivation for these acts... without ever thinking that someone will have to build a Chinese amazon
I recently tried WhatsApp alternatives that provided end-to-end encryption on Android (I use TextSecure, but only 1% of my contacts do). Wickr was the best, but a little too paranoid for daily use. WhatsApp has a better UI and sends messages faster. I would love to trust that their end-to-end encryption is legit, and WhisperSystems being involved helps, but.. seems I'm still skeptical.
location history is interesting: I'm showing up in places where i haven't been. Is someones using my login credentials?
Does anyone else think this is (cool but) 10 years too late? I would like to see a model where your phone/device seamlessly connects to these hotspots without the current (very manual and frustrating) wi-fi connect process.

For example, I'm walking down the street, pull out my device and connect to this wifi hostspot. Does the hotspot now work everywhere in NYC? Or do I need to connect to each hostspot each time? Will it remember me or will I need to re-authenticate on a regular basis similar to how TV providers grant access within mobile apps?
https://en.wikipedia.org/wiki/The_Better_Angels_of_Our_Natur...
Thinking over the protocol again I think TLS wasn't a great choice for Tor - not only because of SNI but other things like server certificates are also sent in cleartext during the handshake so it's easy to distinguish and just block all TLS traffic that uses self-signed or otherwise certificates not issued by the big CAs.

Something more like SSH, not relying on central CAs, would be less distinguishable - is it Tor traffic, or is it just someone accessing his/her server remotelly.
Everybody should move to France just for that
My question was more specifically about a single piece of software than a infrastructure platform.
Well, let's do the standard mathematical thing and take the extreme case. Imagine that some country sucks so much that all its industries are less efficient than those in other countries. Since capital is free to move between countries nowadays, Ricardian comparative advantage doesn't apply, and the end result is that no one ever invests in the country's industries, so it just stays poor forever. You might try to use government investment to prop up domestic industries, but the government doesn't have too much money because the country is poor to begin with.

It seems like protectionism would help in this case, by creating a market that can only be satisfied by domestic industries. And since there's a spectrum from this case to more realistic cases, there's also a spectrum of usefulness for protectionism. Does that make sense?
I don't think slavery really explains much. The Southern States' economy was dwarfed by the North. Did slavery benefit the US economy? Of course.

I would argue the US' protection from the ravages of WW1 and WW2 led to its economic power. Before WW1 the US wasn't a major player on the international stage.
Decentralized Peer to Peer Marketplaces
It may not be "directly usable" but I'm sure the code could be examined and patterns gleaned in a way that it contributes something to the greater dialog of code. I know that I spend a lot of time reading different code from all kinds of projects with no intention of actually using the code, just trying to figure out how it's built.
Making content share-able on your app is super-simple on Android because of Intents. Just a few lines of code and you're hooked up to 10 applications.
This is just a pre-announcement to let folks (OSes, hosting providers, other platforms) plan and do integration work. Per our own warnings, we definitely don't want this running on production machines until it launches in 2015.

Our Apache code is a developer preview, we'll be working on Nginx next.

ISRG will be operating a new root CA for this project. Although if you think that your choice of CA makes you more or less secure, you may not have understood how PKIX works -- you can buy a cert from whichever CA you like, but your adversary can always pick the weakest one to try to impersonate you.
Rosetta Probe Discovers Organic Molecules on Comet
"This code intended for testing, demonstration, and integration engineering with OSes and hosting platforms. Currently the code works with Linux and Apache, though we will be expanding it to other platforms."

https://github.com/letsencrypt/lets-encrypt-preview
Assuming you are trying to prevent people from creating multiple accounts on your service... keep in mind they could create e-mail forwarders at other domains, this just stops a very easy method.

Also, more importantly, this would have to only apply to a set a whitelisted domains, plenty of non-gmail systems would treat these variations as distinct addresses. So without a set of domains to apply this logic too, you could end up stopping users from registering with their own normal/actual address.
Yes, because it is no one's business what people are looking at anyways. If you have more than one URL, HTTPS will hide that.

HTTPS will also make an attacker unable to change your content.