skysight-inc/HackerNews huggingface dataset:
The Go SSH library implements that RFC. That's why you can use and standard SSH client to connect.
Why was Homeland Security involved in this? One of their charters[1] is to "Safeguard and Secure Cyberspace", which they state is:

* analyze and reduces cyber threats and vulnerabilities;
* distribute threat warnings; and
* coordinate the response to cyber incidents to ensure that our computers, networks, and cyber systems remain safe.

None of that looks like "stop people from buying drugs".

[1] http://www.dhs.gov/safeguard-and-secure-cyberspace
A speaker icon isn't making a judgement as to whether that sound is good or bad. Turning no-ssl into a warning is like having the browser judge you for being poor or cheap or incompetent. Not having HTTPS does not mean that you are insecure, it means the site isn't encrypted. There's a difference. Whether the lack of SSL makes you vulnerable to shenanigans depends on a lot of factors having nothing to do with SSL encryption and everything to do with the site content and what one may gain from snooping on your request or manipulating the response. Sometimes there's nothing to gain there.
In this case I really don't think that the owners of these mega-farms have such humanitarian interests at heart.
An Illustrated History of Blackhat SEO
> Hughes insisted that deep reporting and ideas would still be important to the magazine. “That’s not enough,” he added. “We also have to do videos. We also have to do interactive graphics. We also have to be increasingly smarter—we’ve already made good progress, but even more—about how we use social media.” The session finished abruptly with Hughes banging on the table and declaring, “This institution has been around for one hundred fucking years,” and promising that it wasn’t dead.

Ugh...as someone who worked as a developer in the news industry...I don't believe that fancy interactive graphics and video have a chance to save a text-based company. What is necessary for journalism companies to survive is not only good content, but good process...and if you have a staff accustomed to producing text pieces, you will not have the pipeline necessary to do the "cool" web stuff...And even if you did, those things would not save you, even when done competently.

Case in point: The New York Times produces visuals and interactives at a level that is the state-of-the-art; not just in the journalism industry, but in any industry. But there hasn't been much evidence that their groundbreaking work has made a significant impact in declining revenues.

As evidence, I point out that NYT's current strategy is to bet much more heavily on video, massively increasing its video production (and presumably, video-ad-producing) department. However, according to this Columbia University survey (http://videonow.towcenter.org/), not a single newspaper organization has yet made a profit off of video, and video has been part of news websites for almost a decade.

This is not to dismiss the talent at the Times...it's very possible, for example, that their web interactive group can produce dividends...but that will be because of a focus on developer process and digital strategy...not simply because they produced a few highly popular features.

That said, I'm not suggesting that if New Republic stuck to what they do now, that they'd make a profit. But as they say, jumping from the frying pan into the fryer is not really a survival strategy.
The expectation that things work on merit and that you should be able to just work hard and succeed, seems to hit many people.

Unfortunately, real merit seems to go beyond one's official role. You are better if you can move stuff forward and facilitate projects succeeding overall. If you can make things happen.

Schools never taught us to think about life that way.
Are those the problems that are best solved by throwing more and more programmers at them? If anything, the people doing the grunt work would be PhD students (save the shaders, perhaps).
Twitter value drops by $1.5bn
I remember reading about a similar but different test that had good results. I can't find the source so this is just from what I remember. Before starting a course the students were shown short snippets of code and asked simple questions about it. They found that consistent answers were a predictor of who would do well. The theory was that people who are able to construct a mental model for the problems ended up being good at programming tasks, even if the models they had made didn't match what code actually does. Have you heard of or tried this approach?
There is a very good reason to not secure your site if you are dependent on ad revenue. When I switched to https, my earnings dropped by about half. I tried it for a week, but I couldn't take the losses.

When you have a secure site that uses Adsense, Google only serves ads from secure ad servers. This shrinks the pool of competing bidders significantly.

For me to switch back, either Google needs to push advertising networks into securing their ad servers, or the nonsecure warning will have to be really big and scary.
Great comment. Fascinating thoughts, and well said. Can't upvote it enough.

> "Steal this book" is punk, but "steal all the books" is tyranny

Just wow. I'd like to add some thoughts so that my comment isn't just a well deserved kudos that adds nothing to the conversation:

Hackers and hacker culture aren't actually as all powerful as you make them out to be. Most of the people on hn don't have four houses and a private jet or the power to crash corporate systems single handedly. We do have disproportionately more power than we did 30 years ago and the imbalance is growing. But we still don't have the most important thing that any would be revolutionary can have: Public support.

I was watching a documentary on Che Guevara the other day and I noticed how well things went for him in Cuba contrasted with how poorly they went in Bolivia. The difference was that the people were behind him in the former and hunting him in the latter. If hackers make the MPAA out to be the enemy, geezers that we need to hack circles around, then they will never win. Most people aren't upset with the MPAA or the RIAA, they don't see them as villains to be defeated. Everyone likes to get free stuff, but not enough to stand up and fight. Most of the people I know happily pay whatever price itunes asks for music or movies or any digital content. Granted most of the people I know are professionals with enough disposable income to pay for an album or kindle book without a second thought. And until they get pissed off with something that the various entertainment industries do, there will be no support for the freedom of information cause. The revolution will not be televised, or downloaded, because it won't exist.

This is the general problem with the freedom of information movement, you can't rally people to fight against someone who isn't actually oppressing them. No one I know has a problem with even DRM, it generally never occurs to them to copy media and send it to someone else. Heck, most of them aren't even aware of TPB at all. It's always good to see people fighting for what they believe in, but unless the majority of people can be convinced to join the fight the battles will be long, hard and potentially pointless.
It seems to me that Hughes has surrounded himself with sycophants. This would also explain why he was so upset when his husband's political campaign ran into trouble. He was not used to the criticism. Hence his dismissive attitude toward the writing staff.

My hometown paper, the LA Times, also became a money losing proposition, and was sold by the impatient heirs of the founding family to Sam Zell, a Chicago billionaire who was also used to getting his way.

It went about the same way. The two low points that come to mind are Zell saying it was OK for employees to watch porn at work "because it is un-American not to like pussy," and calling a reporter a "motherfucker" to their face, from a podium, while addressing the staff.

Zell is coarser, and is on the right politically, but the essence of the story is the same. Asserting editorial control, thoughtless "disruption," buzzwords, resistance from the old guard of reporters, revolving door of editors, bad news via conference call, resignations.

Because of the way the deal was structured, Zell laughed all the way to the bank. I don't see that happening with Hughes and TNR.
wow, your music's good man. keep it up!
http://lwn.net/Articles/620699/

And here's the patch that uses cgroups to control cache allocation in future processors: http://lwn.net/Articles/622893/
Exactly. Fat has a lot of calories but it doesn't produce an insulin response and isn't digested nearly as quickly as carbohydrates, so it keeps you satiated. A dose of fat early in the morning will help keep you from feeling hunger pangs for a while.
Yes! I have 4 sites that I bought an SSL certificate for out of around 20 that run. If browsers wouldn't throw a warning for self-signed certificates every last one of my sites would have been secured from the start, easy. The only thing separating a self signed cert from one obtained from a CA is that the CA has some of your contact info but even then it wouldn't take a whole lot of effort to bypass their checks.
Can someone explain this part?

Secure (valid HTTPS, other origins like (*, localhost, *));

Are parenthesis-asterisk and asterisk-parenthesis some kinds of special origin?
Agree that self-signed SSL certificates are treated as if they were the red-headed step-children of SSL. Perhaps if movements like Let's Encrypt[1] take off, self-signed certs will be a thing of the past.

[1]: https://letsencrypt.org/
For what it's worth, http://w3c.github.io/webappsec/specs/subresourceintegrity/ is actively being worked on, and implementations in Chrome and Firefox are on the way in the near future. The polyfill issue is handled in that proposal as described in <http://w3c.github.io/webappsec/specs/subresourceintegrity/#f...: Your "src" attribute points to a server you control, but your "noncanonical-src" points to the CDN, and a browser that knows about "noncanonical-src" is also supposed to know about the "integrity" attribute and ensure that the content it gets hashes to what you expect.
Do you think Whitney ever considered using the NetBSD kernel code instead of Linux kernel code? No doubt, small was a priority. Why not BSD?

And why doesn't kx have binaries available for BSD? They have Solaris. Burning questions I have always had. Maybe just based on demand from their licensses?

k and kdb are some of the very few things that keep me interested in programming and computers.
Could you elaborate in what way? I've heard both sides. Sure there are more tech jobs and unparalleled startup scene. But housing situation is extremely shitty. You are forced to live in shoebox for a LOT of money. People waste enormous hours in traffic every day. State is in huge debt and public school system is one of the worse. Govt is not able to develop infrastructure with growth. And you still pay everything through nose added with state and city taxes. The place is enormously overcrowded to be pleasant. Significant portion of population is possibly undocumented exploited immigrants who don't even speak english. People who often feel its nice out there are usually coming from mid west small town with nothing to do or super-crawded places like NJ/NY. People from places like Seattle, Florida, Portland or New England might not feel they have ended up at better place.

But really, I do want to know in exactly what way California is everything it’s made out to be?

PS: Above are not my personal opinions, it's just second hand information that has often came up in conversations.
Why not tunnel IRC through this and get all the benefits of a seasoned IRC server?
I'm going to have to agree - and this is coming from someone who is in favor of Airbnb and Uber. There is a line beyond which a bold idea becomes a bad idea, and I think this one steps over that line.
hah cool
In modern W3C and WhatWG specs, an "origin" is either a (scheme, host, port) triple or a nonce value. The asterisks in this case are being used as a shorthand for "any origin which is a triple and whose host is localhost, no matter what the scheme and port are".
This is going to make flying more expensive. If this takes off (pardon the pun) and we have more people putting more things in their suitcase for money, then we can see a future where everyone will pack their suitcase to max allowable weight and size for free. This will add weight to the plane which will cost fuel and thus drive up the price of a flight or cause restrictions on carry-ons.

Additionally, I agree with gvb. I do not want someone carrying something they are taking for a stranger on a plane with me. It goes sharply against my interest.

Lastly, seeing how much people are willing to pay for stuff like this, (the article quotes a $350 transport fee for a cellphone) budget travelers would be doing this constantly to lower the price of travel. I could see a college student carrying packages to bring down the cost of seeing the world to a fraction of what they would normally pay. I'm sure there's an informal amount of this already but, someone formalizing it into a business is scary.

tl;dr - I don't want to fly with anyone "GoCarry"ing.
Because it is noise (do you really think that either the poster or the rest of HN need to hear that you are impressed by MIT?), and also because it isn't even stated that he did go to MIT.
Stockflare: Improve how you invest in stocks
> As far as the, "it will change your life" crowd goes it just seems like different strokes for different folks to me. These are probably the same fad jumpers that were having their life changed by something else last month.

Very true :).
Bitcoin does not solve this issue, a blockchain does. That's what the guys at Ethereum for example are trying to achieve: vanilla blockchain, build anything on top.
Frankly, he probably has more money than sense.

He funded his husband's congressional campaign against a republican in the New York Hudson Valley and was defeated handily, even after spending a ridiculous amount of cash. Hell, even the local NPR guy thought it was a not-so-great effort.
From the article:

"
We’d like to hear everyone’s thoughts on this proposal, and to discuss with the web community about how different transition plans might serve users."

...

"You do not have permission to add comments."
I think this is a good start.

But it is also important to educate users that even you are using HTTPS, some companies' internal network might not be fully encrypted and therefore it is not fully secure against some three-letter government agencies :)
Tourists See. Travelers Seek
Software development at the highest level and at scale has everything to do with human needs and social relationships.

Maybe if you're writing an app solo in your bedroom it doesn't, but that's not how the vast majority of industrial software gets written.
AFAIK HTTPS does not by itself prevent this kind of attack. You need to authenticate the server as well as encrypt the connection or you could just be talking very privately to the NSA.
What should my expectations be for a software developer internship?
Hi, I'm currently in the process of trying to find a quality internship to apply for next summer. I would prefer one in NY but I'm open to working in other states as well.

I know C++, Haxe, and Java at a decent level. What should I be looking for and what should I be avoiding (pay/workload wise) when I apply?

If this doesn't fit HN then I can get rid of the post.

Thanks in advance!
Yet in the other latency test in Octane, MandreelLatency, Firefox does about 50% better than Chrome.

Perceived performance depends on a lot of things, not just JS speed and consistency - also graphics, UI responsiveness, etc. Chrome has had an advantage in some of those areas, but the difference is pretty small at this point, especially if you are on Firefox Nightly.
On the other hand, cleartext-based attacks are also more easy to detect since the traffic is plainly visible. The maliciousness doesn't always have to be outside, despite all the focus on surveillance recently; and when it isn't, a "secure" connection makes it even harder to detect until it's too late.

Here's a recent demonstration of this principle - "smart TVs" phoning home via an unencrypted connection:
http://arstechnica.com/security/2013/11/smart-tv-from-lg-pho...

If that was over HTTPS, would such data collection have been as obvious or even discoverable? It would be completely indistinguishable from any other "phoning home" - e.g. to legitimately check for software updates. The same encryption technologies that purport to protect us from mass surveillance... can be used to do it even more stealthily, and this is the main concern I have with making encryption ubiquitous.
Just take the good ol' classical example of quicksort in Haskell or fibonacci in Lisp.

Hell, recursive quicksort and mergesort are easier to teach and remember than the iterative versions even in C and Java. They're divide-and-conquer algorithms, which makes them a natural fit for a recursive solution.
YourMechanic (YC W12) Is Hiring Engineers, PM and Data Scientists
It's not the firm that matters, but the individual recruiters. I know a few good recruiters, but the other people at their same firms totally suck.
>why do you care about it in the first place? Also what is your definition of good programmer?

Is this a joke? They care because they are selecting applicants to a programming boot camp and want to select the ones more likely to be successful. I suppose they could make all of the applicants learn to program and select the best ones, but there could be issues with that. And they are pretty clear that they are defining 'good programmer' as 'good outcome in their course'.

> A better test would be...

Prove it.
Did you blend it? I could imagine it being pretty awful if you skipped that step.
Wow, you've asked just the question i've been wondering ever since I read that date. Very curious, because it seems like there's been a reliably intuitive focus since the very beginning which generally takes years to develop.
great landing page!
It's hard to accept that hackers are a tyrannical controller when they don't actually have any control over musicians and artists. It's less "this tyrant is forcing me to make stuff and then taking it from me, help, my human rights" and more "if I keep hitting myself in the face, maybe you'll learn! Ow! Ow!".

Everyone taking all the music they listen to for free hasn't, in reality, stopped new music creation. Therefore your argument must have some major flaws.

Perhaps artists don't unionise and go on strike, because they're afraid it would make clear the same thing the pirate bay makes clear - that the real market value of entertainment content is approximately $0.

Yeah "we want free stuff" ... but how have you managed to turn that into "people who want free stuff ... want to pay for stuff"?
A nice thing about these is that they work on Firefox Mobile if you sync it.
> production technology (CGI, cameras, which has gotten more expensive)

Absolutely not. Production (at a given level of quality) is cheaper than it's ever been. Consumer standards might be respectively higher, but that's not apples to apples.

> It's doubtful the Netflix model @ $20/mo will be able to cover the million dollar salaries that movie, tv, and voice actors are accustomed to.

These actors might have to get accustomed to less, like everybody else.
Meaningless snarl? How DRY is your code, and have any refactoring attempts been made to dry up the code. Do you have unused functions, methods, classes that are there because you think you might need them in the future. Does every binary have all the code for other architectures that are not specific to the current platform of execution. Etc... I could go on with several more examples, but it's the exact opposite of illusionary.
I'd like to have a scheme for referencing secure third-party content that includes hashes.

All that's really needed is a convention that a URL parameter of the form "example.com/.../sha3hash-nnnnnnnnn" indicates the secure hash of the page to be served. Cache systems can cache such pages, but if they change them in any way, the change can be detected.

This removes the need to encrypt publicly available static information. It doesn't require a secure certificate.
Most importantly, it means you can use a content-delivery network without letting it have MITM privileges on secure content.

HTTPS Everywhere means Cloudflare gets to see all your users's passwords. That's not a good thing.
I think that potential damage to a company's reputation and possible harm to customers is worth counting. If it's something you'd have to notify customers about... It just be somewhat sensitive data, not public information?
What do you recommend someone do / read / learn if he wants to follow on your path?
Just an anecdote, but I literally never watch video news online. I can consume information from text many times as fast, so watching a video just feels like slow motion. I doubt I'm alone in this.
1) Sometimes it's not about you.

Currently, the NSA (and others, presumably) consider the presence of encryption as part of their is_suspicious() heuristic. Other people do have need for encryption, and by saying "I (currently) have nothing to hide", you are saying that you are fine with a high correlation between "uses encryption" and "is doing something suspicious". More than any other reason, we need to dilute that correlation until all data looks similar to remove the possibility of this kind of categorization.

2) https://www.philzimmermann.com/EN/essays/WhyIWrotePGP.html

As Zimmermann said, we need to socially normalize the use of envelopes instead of the postcards that are currently used. Without that social expectation, it will be possible to legislate against the use of encryption in the future.

3) It lets us (in the very long term) simply retire 80/tcp

...and plain HTTP servers in general. Sure, this is a minor benefit, but it would still be nice.
>You can buy USA produce, which is produced under better conditions.

Just because it's produced in USA doesn't mean it has better conditions. As an example: Think of an illegal immigrant, they'll get paid lower than minimum wage since the patron is having the risk of a fine or something, plus they don't speak the language or simply don't know their rights.
To some this is still better than back at home, and some who do it to send money back home still get to send more than if they lived in their country, through exchange rates.

There was a documentary thing about this, someone who got paid cents for each bucket full of tomatoes they picked. I can't find it right now.
Don't be silly. My opinions are never baseless.

We used MDBM in OpenLDAP for a few years on SGI Irix. I haven't touched it myself in something like 9 or 10 years though. http://www.openldap.org/lists/openldap-devel/199903/msg00094...

http://www.openldap.org/lists/openldap-devel/200501/msg00053...

Using DBM-style DBs was an endless nightmare of corruption bugs. That technology belongs firmly in the distant past, we have better solutions today.

http://www.openldap.org/lists/openldap-software/200607/msg00...

I'm not bashing MDBM because it's a competitor; it obviously isn't a competitor. Heck the only reason I'm commenting in this thread is because you asked me to elaborate on its design flaws. Now you're hurt that I answered your question. Don't ask if you don't want to know the answer.

... seems like us folks in OpenLDAP weren't the only ones to have bad experiences with it. This guy in this same discussion seems to share the basic sentiment. https://news.ycombinator.com/item?id=8733819