skysight-inc/HackerNews huggingface dataset:
The high COL in the SF bay area has become a significant liability because people like you realize it's way too expensive here. It's affecting everyone from startups to really large companies who prefer to hire in the SF bay area, but cannot do so.
D is a better C++. My feeling is that many people wanted just a better C (a portable & extensible assembler with a good standard library?).
I've setup this function in my bashrc to check for the latest build if the new one is more than 24 hours old and then run it with arguments supplied:

function youtube-dl {

exe=$HOME/bin/youtube-dl
link=https://rg3.github.io/youtube-dl/download.html
url=$(curl -s $link |grep ">sig<" |head -1|sed -e 's/href="/|/g' -e 's/">/|/g'|cut -d"|" -f2)

fetch=N
if [ -s "$exe" ] ; then
ts=$(date "+%s")
yts=$(stat -c "%Y" $exe)
[ $(( ($ts-$yts)/(60*60) )) -gt 24 ] && fetch=Y
else
fetch=Y
fi

if [ "$fetch" = "Y" ] ; then
url=$(curl -s $url |grep ">sig<" |head -1|sed -e 's/href="/|/g' -e 's/">/|/g'|cut -d"|" -f2)
echo "Fetching [$url] and deploying to [$exe]"
curl -s $url -o $exe
chmod a+x $exe
fi
[ -z "$@" ] && $exe --help || $exe $@
}
Sadly this is probably true. So what do we do about it. Conor Gearty (LSE podcast) recently talked about the awful idea of UKs withdrawal from the EU Human rights declaration.

To me (and I am still working on this) it seems we need to understand the new and old landscapes and hopefully put in place trustworthy institutions (and I would class crypto-currency as an institution too)

- ensure we keep the 18th/19th/20th century evolution of human rights (ie rights for white men through to rights for all)

- expand (somehow) rights to privacy and rights to ownership and control of data about oneself (I suspect commercial ownership of my data is a solution)

- start persuading the new UKIP voters that print for a different set of politicians is not the same as ending this.

In the end I think that the new Labour Party is really the Pirate Party
I'd like to see the impact of different grammars in compilation time, which I suspect are small.

C++ compilation is not slow because of the grammar, but because of things like multiple includes
I'm looking for webapp ideas. Not droid or iphone apps. I'd like to build something with Laravel or Angular since I have been learning both. Right now, I might go for a purely javascript text game, since I always wanted try that (candybox2, thegoldfactory).
youtube-dl lets me avoid the awful youtube ui.

I setup a makefile to let me just go make and then eventually vlc pops up with stuff to watch every so often. Its quite nice.

https://github.com/mitchty/youtubes/blob/master/Makefile
I'd be wary about that advice. Sure, the companies you mention have elite teams of super smart people, but they have lots of programmers as well, so many must be average. End up in the wrong team and nothing changes (except, you get a good pay and a good name to put on your cv).
Heh, the net sure is a small world.

(and yep, egg on my face for not looking at the link poster)
Sounds like smth quite in the spirit of CMake, not surprised a tiniest bit (and not humorous either).
Renewable energy 'simply WON'T WORK'
I have to admit, after this hilarious trainwreck I'm totally buying my girls the doll. Just not the book.
Show HN: Cvpipe – Premium CV Designer
Spot the Difference to Reveal Exotic Particles
Tor Support
Is Adobe the New Microsoft? BUY vs. RENT
An obvious idea would be an app which lets people submit and discuss their in-progress or weekend programming projects.

If you wanted to go all out with it, you could even have posts auto-delete after a week if there haven't been any comments on them.
Java ranks highly as usual
You know, nobody stops anyone form making open source native apps.
Winamp and VLC also don't play these..
https://join.me/665-651-418
Good article. I wonder why Mailpile are targeting difficult use-cases such as activists, journalists, etc. It feels like every PGP provider aims for this, but OTR encryption tools aim for a much easier use case: average users who just want to hide their private conversations from big data algorithms which then sell their secrets publicly. OTR is much easier as a result, but it can't do email (that I know of). :-(

In this article mailpile worry about users who need an airgap. What worries me is whether creating features for airgap users makes anti-features for users like me who just use PGP when mailing with my parents, my wife, and some friends. We just want to avoid our secrets being part of "Big Data" and as a side benefit we resist passive surveillance. Mailvelope (which is "easy") is complicated enough for my parents, they would never add the complexity of an airgap. We just want easy encryption, even if it isn't totally NSA-proof.
thanks for reporting -- i've weakened the javascript a bit on that front. what site did you visit?
> I thought something like pilot wave theory gets around Bell's theorem

Bell's theorem remains true, but pilot wave theory achieves the quantum results by sacrificing locality instead of hidden variables.

> how does the description of entanglement as "spooky action at a distance" not violate those?

It's just a name, and an old one at that. I suppose if you ascribe it to non-locality then it really does involve something FTL on some level, but even with a standard locality-preserving, no hidden variables theory, no information travels faster than light so you don't actually hit a FTL problem. The strange thing is that the quantum state appears to behave consistently regardless of its spatial extent, which is weird.

> How long do you think it would take to reason intelligently about it?

I would have thought that someone in a PhD mathematics program would be well equipped to understand the mathematics - maybe the hard part is finding a good resource that takes things in a good order. I'm afraid I can't really recommend anything, though Feynman's stuff is probably good.
Agreed. How about, "A visit to Germany's indoor tropical resort"?
That is true, but IMHO it is probably irrelevant to Emacs because adding concurrency to Emacs is probably a bad idea.

Firefox of course has concurrency, and IMHO it makes Firefox a lot "glitchier" than Emacs is (or Firefox would be if it did not have concurrency). Several times a day, Firefox goes unresponsive for a few seconds. That does not make Firefox unusable or unsatisfactory, but not being able to rely on a timely response from Firefox 100% of the time to a keypress or pointing-device input really does seem to change the way I use Firefox.

Anyone with experience with math, even with doing multiplications and divisions in one's head, can see that how much complexity the mind can handle is dependent on how quickly one can execute sub-tasks. That is an example of the general principle getting fast -- reliably fast -- at the sub-tasks increases the complexity of the tasks one can handle (and of course it is the reliable quickness of small sub-tasks that glitchiness of the user experience interferes with).

Those without experience with Emacs or Vim (which I am guessing is like Emacs in being 100% responsive) can get an idea of what I mean by comparing their experience in using Firefox or Google Chrome with their experience of using a terminal-emulation app and a Unix shell: although some shell command lines do take a while to produce a response from the system, most of the time, the user can predict when a delay will occur (e.g., a `find` over the whole directory hierarchy) and even when the user is surprised by the presence of a delay, in retrospect there is always a reasonable explanation for the delay if the user is willing to think through and learn about enough details about the system.

(Yes, I realize that there are some applications that some people would like to write in Emacs Lisp that simply cannot be written without concurrency without blocking Emacs for many many seconds at a time. I am skeptical that being able to write those application in Emacs Lisp is worth the cost in complexity and in glitchiness of the user experience.)

The above is a simplification: in reality, glitches do happen in Emacs and in an interactive Unix shell, but I am almost sure that the cause of those glitches is in the underlying OS, not in the Emacs or the Unix-shell process.
Show HN: ImageS3 – An image hosting service for developers
I don't consider it spying when you have the option to turn it off. https://support.google.com/chrome/answer/95656?hl=en

Sync is pretty obvious since you clearly have no control over the backend. However, that is a non-issue for someone paranoid enough about where their data goes. Clearly you don't enable it.

I think a healthy dose of paranoia in today's world is fine. I worry a lot about what apps are sending what data where, and whether I have control over that. You, however, seem to just be making blatant claims and touting them as fact. You are part of the problem because you are spouting what amounts to misinformation, and not considering that we have tools available to us with which to verify what an application actually does and whether it is malicious or not.
UDIRC 818A quadcopter aerial video
Reminds me of this 4k JS demo which has a somewhat similar concept but is big enough to contain sound:

http://www.pouet.net/prod.php?which=61668

Making of: http://www.ylilammi.com/webgl/highway4k/Making%20of%20Highwa...
Hmmm, can you add the --audio-format mp3 to ~/.config/youtube-dl.conf without breaking normal video downloads?

(Edit) Answering my own question, apparently yes!
Filippo here. I'm sad that I didn't have the time to contribute to ytdl much recently, but it was my first time playing a role in a big and popular project, and I'm terribly grateful for that trust. (Thanks Ricardo, thanks Philipp!)

Also, what always impressed me is the incredible amount of random contributions from the community. Ever since we introduced a super-simple plugin system [0], support for the most disparate video sites poured in as PR. (>800 PR!!) Also, given how ytdl is structured, the most simple plugin gets you 90% of the tool power for that video sit. Big results with minimum effort.

Finally, to answer the question about the updates in some siblings, there is no active effort against us most of the time (VEVO videos being the notable exception) but supporting such a number of sites mainly by scraping means that breaking changes happen really really often.

[0] https://filippo.io/add-support-for-a-new-video-site-to-youtu...
Driverless Cars, EVs, Gen Y and Thoughts on the Future of Cars
If it's not clear from this that kdbus should be rejected and everyone associated with it removed from any kernel related work immediately...
> If you're in the "whistle-blowers, activists, spies" category, is the airgap (physically) really required or would a smart card give you the same protection?

Smartcard doesn't protect you if your Internet facing machine is compromised. With a separate air gapped machine, you could print out the cipher text from the Internet connected machine, then scan it in/OCR it into the non-Internet connected machine and decrypt it there. Then you could encrypt a response on the non-Internet connected machine, read the cipher text back in to the Internet connected machine via scanning+OCR and send it out.
Agreed, but if you did it right (that is, heat the meat through and through at the correct temperature[0]), really you shouldn't sear it for more than 15-20 seconds on both sides. The meat is already done, searing is just for the Maillard reaction creating a browned crust on the outside, adding flavour. Any additional heating beyond that just increases the size of the transition between (hot) brown crust outside and (less hot) perfectly done meat inside, and it is that transition layer that makes a steak tough. Which is exactly the (somewhat) hard thing about cooking a proper steak, the very thing you're trying to solve with sous vide.

That is the reason why they sometimes attack a sous vide steak with a butane torch. It's not only because it's cool :)

[0] 53 degrees Celsius is for rare steak. Rare should not be "undercooked" (flesh proteins denature at about 50C) and with sous vide you can make sure this is indeed the case.
At least you'll have to appreciate that these guys have started a viable enough business before for Siemens to buy it. However, when they started out it appeared equally unfeasible at the time..."impossible is an opinion not a fact"
Hows is this possible? how many years does it take to master it to such level ?
Hi. I've recently done something similar with the OpenPGP Smartcard V2[1] (YubiKey seems nicer now, but I don't think they existed when I got mine. In any case, they both seem to perform the same GPG operations, mine can also only hold 3 subkeys, etc).

> In addition my main key is ~elsewhere~: After loading three subkeys on the yubikey I saved and removed my main key from the keychain. This _should_ solve the problem of the airgap in this article? A reasonable way to get access to your data/mail without giving access to your secret key?

The way I understand it the reason for keeping your main key seperate from the card is so that in case you lose the card you can still issue revocations and issue new keys signed by your master key. The smartcard still contains three seperate secret keys, but does indeed not expose them to the computer.

> I'm confused about the key backup solutions here. Keys generated on the smart card cannot be backed up as far as I can see. I have a decent idea of how I'm going to handle my master key (both where and how I'll store it safely), but .. the rest is still not quite clear to me

Personally I've opted against having my smartcard generate the keys, because like you said this means it is impossible to extract the subkey used for encryption. Instead I generated the keys on a Raspberry Pi, used paperkey[2] to print them to paper (don't forget to also print some instructions on how to restore, in case you forget or someone else has to do it), and also burned them to a few CDROMs. Then I transferred them to the smartcard, keeping them on the Raspberry Pi's SD card as well, which I keep in a secure location with the CDRoms.

> Mobile. So, if my day to day keys are on this smart card, I cannot read those mails on my mobile. Which .. might be a good thing when we talk about security, but a PITA for my day to day usage. No idea how or if I can solve this one

I've been wondering if it would be possible to install opengpg on a rooted android phone and then seeing if it were possible to connect it to an usb smartcard reader using an OTG cable, but honestly I think that'd mostly just be a lot of wasted time and effort, and possibly insecure. I tend to carry a chromebook around and instead use that.

> But back to the article: If you're in the "whistle-blowers, activists, spies" category, is the airgap (physically) really required or would a smart card give you the same protection?

I think a smart card could give you similar protection, if it were to work perfectly. I don't think we can be absolutely certain they aren't backdoored, which is easier to make sure with a basic linux install on a computer that has never seen the internet. Additionally, if you were to use a smart card on a computer attached to the network, the plaintext would exist on that computer at some point which would be a problem if a keylogger or similar were present.

[1] http://shop.kernelconcepts.de/product_info.php?products_id=4...

[2] http://www.jabberwocky.com/software/paperkey/
Probably something closer to MPLS all things considered. If you think about it they effectively are a carrier network with many virtual customer networks on top.

MPLS has a bunch of advantages over VXLAN and is decidedly L3, which is more suited to AWS VPC. The real question however is what the control plane looks like.

They may just go pure carrier style and just do tagging and resource control on the NIC but it's entirely possible for the NIC to be doing much more, especially if they have a dynamic control plane similar to OpenFlow (though probably not exactly OpenFlow.. it's less useful than it sounds).

I would love to see a talk on AWS VPC internals rather than sitting around taking pot shots. :)
In ranked order of preference based on ~10 years experience consulting, with safety being the only criteria: Java, Golang, Python, Ruby, PHP, Perl. Seriously, don't use Perl.

That Golang makes it so high on the list surprises me too, but we really did look at a fair bit of Golang code, and Golang projects (at least the ones that didn't do their own crypto) tended to be dispiriting, because there usually wasn't much to find.

Also: Java's pole position on that list makes some assumptions; for instance, that you're not using a heavyweight framework in the vein of Spring and Struts. All bets are off if you use Spring.
Wow, this is big news for the GWT community, I was lead to believe that GWT is somewhat abandoned by Google.
Thank you for stopping.
Ask HN: Music/ebook/app publishers how do you process/analyse your royalties?
I'm curious how publishers/labels (especially small and self publishers) of music, apps, ebook and other digital media manage their royalties?

In the simplest case the publisher would be keeping 100% of sales for themselves, so while there is need for analysis, there is no need for anything more complex, e.g. splitting out payments due to third parties. Beyond this, it seems to me that it starts to get complex very quickly, as you have a myriad of issues to consider - exchange rates, recoupment of advances, accounting periods, mechanical and other copyright payments to third parties, etc.

So with that in mind, do you:

- Do everything manually in a spreadsheet?

- Use a stand alone programme?

- Use a SaaS offering?

- Other?
Show HN: Alternative to AutoLayout, do layout in code instead of storyboard
Back when I used youtube-dl, it seemed like Google changed something about Youtube every couple months and youtube-dl would break. Yget survived many more of these changes.

Getting youtube-dl to run has been a pain for some reason, for example I always seem not to have the right version of Python available. Yget doesn't depend on such volatile tools.
Wouldn't using svg's be tremendously more powerful, rather than pngs and image sprites? Of course, there are compatibility issues with older browsers but placing 1 of 4 pngs is just barely "time aware"
68Katy – a 68000 based computer on a solderless breadboard
Not impressed. Equipped with imagemagick and imageoptim, I'm able to achieve similar results. Exporting the example-original.jpg with 55% quality in Pixelmator and then optimizing with ImageOptim, my JPG is smaller and not visually worse for the naked eye.
Thats in the context of using xorg as a systemd user service. You can run startx as a normal user and have the server run unprivileged just fine.
Ask HN: How can we find a computer security Job in Europe
Since all security jobs need clearance and also while all agencies is focused on developers, How could I find computer security position in Europe?
I'm a little unclear on the point of this article. Is it that the future is here, but it's way different from you thought it would be, or that universal surveillance is universal?
Indeed but bear in mind you are then obliged to submit annual tax returns for the company for which an accountant would charge you £300+
Now try with ImageOptim, a free and open source tool. :)
He's not really just talking about an indoor tropical resort.
and allows you to play video-games in between your work.

That's what I was thinking too - if Intel just added the needed hardware for some video outputs, they could've produced a version which also works as a GPU, and might receive more interest.
That's a funny bit of message board aggression. Suggesting someone on a cooking thread about cooking steak that someone has never tried cooking a steak in a pan.
Why it’s time for Jeff Bezos to pay Amazon employees more
I believe the correct term is startup. It is only in recent years that people have tried to make startup mean a very specific, narrow, method of launching a business. But the term, traditionally, means a business in its early phase, pre-profitability. Whether this is an international shipping concern or a mobile hook-up app, they're both startups.

GitHub isn't a "lifestyle business" (even before they took A16Z money)
Emacs script pitfalls
This. Light from below is unnatural.

Also, I think this generally would confuse users. I visit at 10AM it looks one way, I visit at 3PM it looks another, and I have no idea why as a user. Even if you paired it with other elements, you've still got the shadow all over the place.

I remember about 10 years ago watching a guy in school build a site that had a header that would have full sunrise-sunset based on your time in cute artwork. If you gave your location, it would display current weather too.

So OP, I think this has limited use; but its good to explore and experiment and see what you end up with. Perhaps with more thought/iterations you'll end up with something really amazing.
When I read the intro, I thought he's going to write about modern luxury cruise ships.... not too far off.
...Assuming your input stack on your non-internet connected machine is uncompromisable.

In practice, this is decidedly not the case. OCR is complex. Your attack surface is not exactly tiny.
Thanks. My fault. You answered my question, but I asked the wrong one in the first place.

Given this sentence in the article:

>An "air gap" is a low-tech, widely understood method of protecting secret key material from being compromised. If we send PGP/MIME formatted mail, air-gapping becomes inconvenient to the point of being infeasible.

my question was: Wouldn't a smart card

- prevent the compromise of one's secret key

- therefor allow sending PGP/MIME stuff again quite easily?

(your airgap explanation made sense of course)
I used to work on Ubuntu since 10.04 but I saw no future with it (lots of bugs, error reports,...) I tried many other distros (Mint, CentOs, Fedora) everything was like everything .. Last summer I bought a Macbook Retina and switched to OS X, result is good hardware and software. I installed my Linux things ZSH,Git,LAMP,Node,... + proprietary stuff like MS office, Adobe apps, which is nice because you use best of both worlds + you get Mac specific apps like Alfred which really worth it.
So my point is my computer is my life I don't only code on it, I prefer a nice UI/UX while having a perfect Unix environment, I still use Vagrant for advanced stuff though. Linux distros are a mess they should collaborate and come up with a good ergonomic and CONSISTENT desktop environment rather than add a menu button and call it a new version.
On servers nothing beats Linux/BSD no argument there.
They're all pretty cool. Maybe bonus points for interactivity?
Oh, then I must've given up before I found the part where he reveals his point.

What is it?
Magnus Carlsen Remains World Champion of Chess
Indian startup's powerful, affordable diagnostic machine
If he has done nothing for the community at all, that's still better than having worked on dbus or systemd. Bad progress is not progress, and people making bad progress can't hide behind it as a shield against criticism.
6 Questions for your next JavaScript project
No, I can buy the phone without any contract/subsidy for that price. Indeed, I don't think subsidised candybar-style phones are even sold here anymore. But even if it's $30 in the UK, are there really no (unlocked) phones available at a lower price-point?
I read this on planet debian a couple of days ago:

http://blog.halon.org.uk/2014/11/barbie-the-debian-developer...

Barbie debian developer + systemD. Wins hands down!
The Xeon Phi looks really awesome, and I'd love to be able to have that many cores at my disposal...however, as far as I can tell, its not at all like have 57 cores on your current computer. Whereas in my current software (Ruby, Haskell programs) I can just specify the number of threads to create to parallelize my software further, I'm not really sure how I'd use the Phi.
Yes, but that is true of Caltech as well.