skysight-inc/HackerNews huggingface dataset:
> It's just wrong to mention DI here

I agree with SSI and SSDI the pit is very, very deep. The incentive to just give up is extraordinary. You have to willingly forgo tens of thousands of dollars for the pleasure of working. Since trying even just a little bit disqualifies you. And yes, SSI/SSDI eats your soul.

But the argument stands even without SSI/SSDI though. Just adding ACA on top of the existing subsidies was enough to almost completely eliminate the incentive to work for practically half of Americans! (median household income: $53,891)

> you can't count payroll taxes as lost income, because they contribute to your future social security benefit.

If only that were literally true!! As usual, a tiny little bit of work each year contributes a lot to your benefits. Everything above that contributes ~1/8th as much. See: http://www.ssa.gov/pubs/EN-05-10070.pdf

I'll summarize: Take your annual earnings each year (up to the FICA max for that year), and adjust for inflation. Take the 35 highest earnings years, and sum them, then divide by 420 (35 * 12). The result is "Step 4". Now look at Step 5:

5a. Multiply the first $816 in Step 4 by 90%. 5b. Multiply the amount in Step 4 over $816 and less than or equal to $4,917 by 32%. 5c. Multiply the amount in Step 4 over $4,917 by 15%. Step 6. Sum the three to find your benefit!

Do you see what they did there?! This is nuts! What does this actually all mean? The net effect?

15.6% * $10k * 35 = $ 54,600 of FICA taxes ==> $ 816/mo in benefits (5.5yrs till breakeven)
15.6% * $120k * 35 = $655,200 of FICA taxes ==> $2,642/mo in benefits (20 yrs till breakeven)

TL;DR - With Social Security, paying 12x the premium nets you at most 3.2x the benefits. The highest payers would need 20 years of benefits just to get their money back, and that's with no ROI / compound interest.

Plug $20,000 (it's a bit more than current-day maximum FICA) per year savings for the next 35 years at even 4% ARR into a calculator... the day you retire you should be looking at $1.35 million dollars in your savings account. At 8% ARR (S&P500) the balance would be $2.8 million.

But they'll pay you inflation-adjusted $2,600 / month. About 1% annually on your 2.8 million. It's. A. Scam. $18,000 / month would be a respectable ROI on that level of investment. In other words, the vast majority of that up to $655k is effectively lost.

I'm not tracking inflation, but since the Wage Base tracks inflation, and payout as well, I can make the point without adding that complexity.

It's like a disease ridden throughout the tax code. The progressive nature is literally everywhere, and it's all designed to apply more and more pressure the more money you make. The problem is, it's all additive, and there are so many layers...
How is that relevant? It doesn't matter if it works for you. It doesn't work for somebody else, which means there is a problem of some sort.
To me the most interesting parts were the ones where stories were buried on Hughes direction:

>Several months earlier, Noam Scheiber, a senior editor at the magazine, had started to report a story about Andreessen Horowitz, a major Silicon Valley venture-capital firm. It was slated to be a feature in T.N.R.’s hundredth-anniversary issue. But Hughes told Foer that he was scheduled to meet with Andreessen Horowitz about investing in another venture. Scheiber was reassigned to work on a profile of Valerie Jarrett. (Hughes denies that he gave orders to delay or cancel the Andreessen story.)

>“Chris seemed pretty pissed about Leon’s ‘Colbert’ appearance,” a staffer who is still at the magazine told me. “Editorial people were talking about how great Leon was, and Chris was angry that the first thing Leon said was what’s wrong with American culture is ‘too much digital.’ ”

>Hughes responded to the note six minutes later: “I think those are valid issues, although Apple has acted squarely within the law,” he wrote.
Agreed.

My kids may be too rough on them for glass, so I may tend towards stainless steel. However, this article shows a nice range of options:

http://ecowatch.com/2014/03/13/non-toxic-bpa-free-bottles/
I always joke to my friends that why Chrome didn't bring extension support to Android - Because extension support will hurt Google's mobile ads revenue so deeply if you can install adblock with one click.

So, please also consider support a non-profit organization like Mozilla, when their products are actually not weaker.
Ok sure, your blog has mundane content. But you might use a the same login for your blog as you do for your online banking (with minor changes to the password to make it more "secure", like adding a kid's birth year which people often do). Say you happen to login at a coffee shop, anyone sniffing your WIFI can now pick up your login because your traffic wasn't encrypted.

Most people wouldn't be comfortable with a stranger looking over your shoulder while they logged in. This is the same thing, only you don't think about it.

These things are ALL rare, but why would you want to expose yourself to this?

SSL everywhere is also about improving security for those who don't realize that they might be engaging in behaviors that compromise their own security.
I've had the opposite experience - demos of hosting mail elsewhere lead to me getting absolutely overwhelmed by spam. I think being a gmail user since it was initially released has given it a really long time to train to the spam I normally receive.

Very few false positives too. Maybe one or two a month.
Models, Cats and Pirates – A Lesson on Product Management
I have been learning Erlang because I like the practices it encourages, but Elixir seems like Erlang with more modern syntax and especially better string handling. I think I will give it a try.
what is the book about in a nutshell? will read it eventually.
This is very interesting; thanks!

I am not very familiar with hashing algorithms, but why isn't the length of the content specified in the `integrity` attribute? Wouldn't it help avoid length extension attacks?
Social issues cannot be solved with technology.
Rape is a "hate crime" in India..
http://www.washingtonpost.com/blogs/worldviews/wp/2013/05/15...
Perhaps, but it can be both. The two concepts aren't mutually exclusive.
I have also given up on trying to find Go contracting on these markets. It's just a complete waste of time if you try and offer anything that's well planned.
Ask HN: Is this common in the gaming industry?
I just want to know if the following is pretty common thing in the gaming industry, being all new to the field I am not too sure. It would be nice to get feedback.

I recently applied for a junior software engineer position with Crytek(Germany).

As a first line of assessment they had given me a coding test to be completed within a week, the HR lady gets back to me after a day to tell me that I have only 2 days to complete it. No big deal, as I had already completed it the same day, I submit it.

Next after a couple of days, I was asked to attend an international telephonic interview with 4 senior programmers. Unfortunately for the interview, there were some technical problems from their side which resulted in a telephone call where I could hear their conversation but they could not hear me.

Shockingly, as they were trying to fix the problem for an hour without realizing that I could hear them, I overhead them making racial jokes/taunts at me.

Without giving any further thought to what just had happened, I emailed the HR to request a re-schedule of the interview but I have still not received any reply. I am thinking they might have dropped my application for the fact that it maybe too much hard work for them to assess me.

what I would like to know from those of you who may have a lot of experience in the industry, is this something common, that one should expect when you interview in the gaming industry regardless of the company being an AAA games developer.

To be honest, I was shocked and appalled by the lack of professional courtesy.
All of those things are easily cleared, however. If I do a clear history/cache/cookies in Firefox, there's still a lot of miscellaneous data floating around in my profile, to the point where, last I recall, the Firefox team still recommends you outright dump your profile in case of difficulties.
The magazine has almost always lost money

Magazines like The New Republic are effectively public-facing think tanks, and were never meant to be enterprises. Print journalism as a whole is going in that direction. Billionaires like Carlos Slim and Jeff Bezos will prop up the big papers, and multi-millionaires like Chris Hughes will prop up the little papers.

Hughes (bizarrely) confused himself with a businessman, and confused TNR with a business. No. It's always been a political mouthpiece. You're supposed to lose money.
Just so I can answer, why what?
This would be a great first step, maybe a new T0.5 in the transition plan. Get people on board by securing the data they are sending around, and the secure the pages they are reading later.
That's fine for image and flash ads, but provides no support for CSS blocking of elements. My understanding is that the CSS blocking is the slowest part, too.

Of course, if you don't want that, you're sweet.
Some sites are in theory fine without encryption or an alert. Others are definitely not. The problem is that the browser (software) can't possibly know the difference, especially because the sites that "should" be encrypted is a matter of circumstance and varies from user to user. Some might say that the user should know the difference, but I think we can reasonably call that a huge cop-out.

So in order to show an alert whenever sites that should be encrypted aren't, you just have to show an alert all the time. The SSL everywhere movement and Let's Encrypt are about making encryption easy enough for sites like yours that it's practical to do that.

Basically, your site being encrypted, even if it doesn't specifically need to be, helps to improve security of the web as a whole.
This seems to describe a situation where sites served over plain 'http' would pop a red 'x' or other distinguishing UI element to connote untrustworthiness.

This is almost the case already where a good number of browsers will show no positive (green indicator or lock icon) for domain validated certs - showing a preference for the much more expensive EV (Extended Validation) certs.

Screenshots of the different browser SSL level representations: https://www.expeditedssl.com/pages/visual-security-browser-s...
ext2 comes with its own recovery system: fsck.
The comment about it being okay to watch porn at work rang untrue to me, and I found a primary source that indicates a much milder story, that still itself was a myth: http://www.laobserved.com/archive/2008/02/words_of_chairman_...
He means that, for example, "!hn rust" would search hacker news directly for rust, whereas "hacker news rust" on google would do a similar job but via google, informing google of your search.
I don't find it completely implausible that some people with influence in the lawmaking process (whether it be congresspeople, their advisors, or interest groups) have the historical knowledge and analytical ability to develop a perspective like Michael's.

Why should one assume that the actual reasons behind a policy are the same as the stated ones?

Even more, if these facts about the effects of the policy are true and important, then whether or not they comprise a large part of why anyone wants or says they want the policy isn't even that relevant.
A good digest alorithm should already handle length extension attacks with just the digest. HMAC algorithms handle that as far as I know, and I think modern hashes don't suffer from the length extension problem in the first place.
Encryption makes sense even for publically available static information. You're not just protecting the contents of the information; you're protecting the knowledge that that specific user accessed it.

And I certainly wouldn't advocate giving a CDN permission to MITM your own domain. Give it its own dedicated domain, serve content from that domain via HTTPS, and don't let that domain have any user-specific information.
Just in case this is what you were trying to understand:

https://www.google.com/search?q=recursion+is+dangerous&rlz=1...

http://m.slashdot.org/story/198499

You can certainly dig up more information. For me, and this is just my opinion based on 35 years of software and hardware engineering, recursion is a neat academic idea but in the real world it is useless and dangerous.
I have been looking into setting up SSL for my blog. There currently no free way to get SSL certificates. There are some free ones but they tend to come with strings and lure you into paid plans. I am not sure if this proposal is the best.
My grandma used to make every tea cup with a piece of butter.
It's not even so much being able to influence our government versus one to which we are foreign non-residents, it's that at least the people over at the NSA, however much they may abuse their power, have some small consideration for me as a fellow citizen versus "just some German/Chinese/South African guy".
Telemetry traffic is a small fraction of the the total traffic running through a region, partially due to the use of the Smile data format (binary JSON) for delivering metrics from the client to the Atlas backend.

When you give developers tools for creating and aggregating highly dimensional metrics, they tend to create lots of metrics so that they can answer interesting business questions about the use of their applications. We have some developers who have written code that produces up to 150,000 metrics per instance and the vast majority of these metrics are application-level. We typically see 3-5% of the metrics delivered from an instance are system-level performance metrics.
Today that's true, but hopefully this eff project will turn out next year: https://www.eff.org/deeplinks/2014/11/certificate-authority-...
So, excluding all government jobs would be appropriate? No police or fire in your numbers either?
The mystery of the magnetic train
Aliens in the Valley: The complete history of Reddit
This is the most important comment in this dramatically overwrought thread. The post's own data analysis refutes its hypothesis unambiguously.
Announcing Deprecation of the Google Earth API
Warning: Unsafe Website Blocked!
skullsinthestars.com

This website has been blocked temporarily because of the following reason(s):

Malware

This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons.
Try Axiom
Ads are first-party content, in the sense that they are under the control of whoever is serving the webpage. One would hope that if the content provider were concerned about privacy, they would not choose to serve ads that violated that privacy.

On the other hand, using HTTP would open an otherwise harmless content provider to potential ad-insertion attacks by third parties. So in that sense, HTTPS really does matter here.
>It's also worth mentioning that men actually don't have a strong natural interest and affinity with computers. If you look at males in the general public, very few of them would actually be considered a 'power user' or higher.

I disagree, and think that adults who grew up before computers were commonplace are skewing your perception. I was a teenager not too long ago, and as I remember it, personal computer ownership was about even between the sexes in middle class youth, perhaps even biased towards girls a bit because "a boy will just use it for porn." In spite of this, pretty almost every young boy I knew that had a computer, whether or not they were really a "computer person" or grew up to do anything related to technology, was interested in tinkering with their computers in some way. From playing games for long hours, tweaking their configs or even making maps or modding the game, running their own game servers from their desktop (Minecraft is especially popular for this today), to having the spiffiest desktop and theme, to building their own PCs, hanging out on forums/irc channels/etc. and the good ol' fashioned standby of amassing a huge collection of pirated music, movies, and pornography, there were a lot of opportunities for otherwise "normal" boys to get experience in playing with computers and learning something about them along the way. Being good with computers could even be somewhat cool, in a "you're a fucking wizard, dude" kind of way. And to be clear, this is the perception I got from hanging out with kids on all levels of the social spectrum, not just super computer dorks like myself.

In contrast, most of the girls I knew used them mostly for IMing friends. The most "hardcore" girls I knew were involved in communities themselves like Deviantart or the various MMOs, which gave them plenty of their own opportunities to play and learn (for instance, Photoshop is a very complicated program, and sites like Neopets and MySpace taught basic HTML to a lot more girls than boys), but in general a larger proportion of the girls seemed more interested in study, their personal lives, relationships, and "drama" (the "dickhead teenaged boys" I mentioned in another post ITT would blush at the shit that girls do to each other), than in the computer itself or the internet outside of their "small world." I'm not a girl, though, so obviously I don't have the whole story.

With the younger generations, the situation looks similar to me, but with smart phones. It's common and "cool" for a guy to have a rooted/jailbroken phone, get a buttload of apps for free, and customize the crap out of his phone. But while I obviously don't have much contact with teenaged girls nowadays outside of family, the ones I have talked with are more interested in instagramming and snapchatting with their friends than the phones themselves.

People often say that women naturally have more emotional and social intelligence on average than men, so I don't really get why those same people get offended by the idea that men could naturally have more more "systems intelligence" or general interest in tinkering than women on average.
It's hard to accept that a bad feeling is a result of a physical mechanism in your brain. It's obviously true. It's just hard to internalize, the same way you've internalized gravity. For example, if you accept that, then you must also accept this: It's within the capability of science to develop an anti-love potion. Want to fall out of love with someone? Drink the potion, or wear the headset. Doesn't matter how much you loved them before: you won't after.

I just want to say thank you for the absolutely stellar comment. It's the best I've read in quite awhile. Perhaps because it touches on so many mechanisms that fascinate me.
Information can't solve a supply-demand imbalance.
If everyone has a different definition, the term has no real definition. That's my point.
You are missing my basic premise, the culture was almost destroyed and is in the process of building backup now. The book has nothing in common with the experience of US Tribes.

The tribes ran the gamut in what they had before Columbus. It is know that trade routes existed bring things only found in the arctic regions south to the deserts and beyond.
Unless it's icky and rainy outside, I generally find it difficult to stay asleep much past 7am. Even when I need it from staying up to 2am too many nights in a row.

I rather suspect it's staying up past sunset that's "unnatural", rather than waking around sunrise.
I share your envy and excitement.

I'm looking forward to dumping Go in favor of Rust once it's competitive in terms of libraries/stdlib. I've been building some big stuff in Go recently (mostly around financial market simulation) and the language shortcomings have hurt a lot. I've been using Go since January 2013 as my primary language, but everything I've seen of and tried with Rust is amazing.
This is a really interesting observation. Can you expand upon what "shrinks the pool of competing bidders significantly" means? For instance, when creating an Ad Words campaign, is there a setting/option that they must opt-in to and if they do not they won't be considered for secure-only advertising?
I can't help but think that the OpenSSL situation would not be so bad if more hackers were encouraged to participate in crypto libs. Even if nobody understands it at first, just going through the source will end up creating more crypto authorities in the community who can fix bugs and create new tools. As opposed to the forbidden black art that crypto is today.
Well, the music industry wanted copyright with "no formalities", and that's in the TRIPS agreement. No more need to put a copyright notice on something, or send a copy to the Library of Congress.

Now the industry is whining that keeping track of who owns what is too hard. They dug their own hole. Let them deal with it. This is so typical of the music industry, which has been shooting itself in the foot since the invention of the tape recorder.

The article seems to be proposing some kind of a micropayment system, where every time someone buys a track of music, all the sub-payments to the various contributing parties get cranked out. That's not only too complicated, but the transaction volume would be huge. Bitcoin is not web-scale. The Bitcoin block chain is currently limited to about 7 TPS.

This idea comes back now and then. Ted Nelson's Xanadu had a micropayment system something like this. A bunch of fanatical libertarians tried to make it work. The free World Wide Web won out.

The amount of effort that the computer industry puts into keeping the music industry happy is excessive. Apple or Google could buy out the entire music industry for cash.
The way I see it, you became good at math the same way a musician gets to Carnegie Hall - practice, practice, practice.

For some reason - possibly due to the disproportionately young age of mathematicians - there's a prevailing idea that math is an innate talent, something which you are either born with, or you aren't. I strongly disagree with that notion - putting in that 10,000 hours can improve one's mathematical abilities.