skysight-inc/HackerNews huggingface dataset:
> the ability to connect to a computer should be much more under the control of the recipient (today's firewalls are a poor workaround for a design deficiency).

Erm ... no, it is absolutely intentional that the core of the network doesn't keep any flow state, because that doesn't scale.
I don't think anything designed by committee could match the flexibility and resilience of the currently evolved system. The current internet works because its been evolving in-situ for 20 years, reacting to problems and vulnerabilities as they occur. Anything starting again from scratch would be broken at first and then also need to go through a long period of evolution.
Show HN: Künstler – An easy-to-use GitHub commit graph art maker
The great startup slowdown
Mdoml: Custom HTML elements
Sorry that you had a crappy reading experience Brian! This is my personal blog where I don't write that often. As it's a labor of love kind of thing, I haven't updated the theme for too long. Will add to my to do list.
Nslookup is a badly flawed tool. Don't use it
Restlet Framework Upgraded – REST API, Open Source
You are confusing NAT and a stateful packet filter. NAT doesn't contribute anything there, the stateful packet filter does, and a stateful packet filter works just as well without NAT, just that it's much easier to make some services accessible if you want to.
And America businesses are believing NK is willing to go to war by attacking Americans on America soil because of a movie?

North Korea has repeatedly threatened nuclear war over the most banal thing. Of course it is usually treated rather lightly, but the country does have nuclear weapons.

https://www.youtube.com/watch?v=Qd1qR66gcLQ
Let's say less supply interdiction in this case, at least locally, and for a certain period, actually reduces consumption of cocaine.

What's the benefit? What's the cost?
2 years after Fight Club's (soap and Meatloaf) story of crazed terrorists destroying towers to reset the economic system, some crazed terrorists did exactly that.

Imagine what would happen if a likable character who isn't a crazed terrorist assassinated a political figure on the big screen and became a hero. Good feels all around, nothing wrong with killing a totalitarian leader, right?
>or a house on prison grounds

How would that work?
The system hasn't evolved on it's own, like bacteria. It has changed over time due to new systems which were designed by people.

Knowing what we know now, would those designs be different? Undoubtably, yes. Would they likely be better? Likewise, yes.

Anyone who's worked with protocols knows just how bad the initial design usually is.
This is very good. I wonder if this could be used to describe someone's personal taste in movies.
RINA is a possibly solution to a number of problems.

http://csr.bu.edu/rina/about.html
http://irati.eu/nextworks/

The theory has been around for ages but it's starting to gain traction with a prototype stack released recently.

http://irati.github.io/stack/
I think you are reading far more from parent comment than he actually saying. Nowhere in his comment did he say anything to the effect of "It's significantly more likely my life will be taken in a terrorist attack." Which is what you seem to be interpreting it as.

At best he just said that this could encourage more situations like this and possibly terrorist attacks. And all he literally said was "it can only create more disasters" which isn't very specific as to how many/severe said disasters are to be. How "overblown" of him.

He's not saying that the sky is falling. He's saying that it's bad policy to cave to threats like this, even once. Which it definitely is.

As an analogy, one police force giving into a hostage taker's demands probably wouldn't lead to more criminals taking hostages. But if it happened every time, hostage taking would become much more rampant. And so giving into criminals is almost universally against policy. Even if on a case by case basis it would seem overblown and ridiculous; to not just give them what they want to save lives.

And there are possibly serious consequences of just this incident. I bet there will be many fewer movies made about North Korea now. Movie studios will censor self-censor themselves more on things that might upset powerful groups. Of course that may have happened anyway but now they've given up millions of dollars - whereas otherwise they might have actually profited from the attention of the controversy. Two movies have already been cancelled over this nonsense.
I don't see how this is different to a gullible online youth mobilized through videos and petitions. You just have to say evil corporations want to control and make you pay for things you want for free, devoid of details for people to make a rational decision with. This is from 2006: https://www.youtube.com/watch?v=xOJnKgsWPGw
OzForex Group Financially Strong, Doubles Down on U.S. Expansion
A follow up post: http://sunlightfoundation.com/blog/2014/12/17/clearing-up-th...
I would use the GNUnet name system:

https://gnunet.org/gns-implementation
Live Chat Widget Integration, WebRTC Service and Archiving Features Released
The Prismata AI: How I learned to stop worrying and love the bots
They need numbers that appear there on the win key press, after icon number 4 I can't just look and get the app right.
Microservices Are Not a free lunch
I've two minds about the proposed change. On one hand, anything that can make it more difficult for governments to engage in dragnet surveillance is a public good. Though, I have reservations that the CA model is not what should be endorsed here. At the risk of regurgitating the same arguments that come up every time with https, I'd much prefer the separation of encryption and authentication in the way browsers echo security back to the user. When logging into a site, I want authentication, when I'm browsing as a guest, encryption alone is fine. The way browsers have thrown self-signed certificates under the bus has only helped to enable state surveillance at its current scale.
(FutureJS) a Language in 20 Minutes
Once interviewed a guy who kept talking about knowing "Squeel". Had no idea what he was talking about until he mentioned "Squeel Server". Cue banjo music...
I was not aware of that. That lends significantly more plausibility to the hypothesis.
9 Psychological Triggers That Convert Your SaaS Visitors into Customers
> In reality, "took down * drug runners who spent * years evading us and supplying * with amount of drugs over * years" looks really good on someone's CV

What I found most interesting was the disconnect between the reality of the drug operations, and the information the DEA had. The DEA thought a $2M transaction was huge and rare. The drug dealers were doing that amount regularly.

In the end, the only way the DEA got inside the organization was that someone talked. If everyone had kept quiet, the DEA would still have no idea about the scale of the operation.
Why learning to code is one of the most valuable skills you can master
"a new way to enjoy cannabinoids without THC". So it's like any other vaporizer then? I see their marketing claims it isn't but I don't understand the subtle difference this product might have.
Some form of content-centric networking ( http://en.wikipedia.org/wiki/Content_centric_networking ) would be good to help up publishing and broadcasting over the internet, and eliminate the slashdot effect / reddit hug of death.
Decentralised power generation and manufacturing is horribly inefficient. In general, ten small engines is going to be less efficient than 1 large engine, because of the constant overhead costs that each device incurs.

Not sure about agriculture, but I suspect the same thing applies: if we gave everyone a small farm each, overall you'd wind up with more land usage producing less food.
Awesome new open source Object based storage similar to S3/Haystack – Minio
Guerrilla Guide to CNC Machining, Mold Making, and Resin Casting
Not sure about web vs internet, but content-addressable sounds like it could potentially be a big win. Particularly if you factor in encryption, it would be pretty great if static assets + signatures could be more easily + globally cached, while encrypted personal content could go in separate packets closer to what we currently do.
Tab Snooze – Snooze tabs for later
Q&A with great Eyal Shaked, founder of 888
So, first of all, let me say that I once wrote a system to spot fake reviews, so I know the statistical signature. You get a lot more out of the timing than the content (especially if it's just up- or down-votes). Fake reviews or votes tend to come in "bursts" over a couple of hours. For example, if a comment that is rapidly getting upvotes suddenly ends up at -4 (or lower) and multiple unrelated posts are getting downvoted at the same time ("stalker downvoting") that's a sign of it.

These are most likely "meat-puppets" rather than sock-puppets. The difference is that sock-puppets are one person making multiple accounts (which I'm sure Hacker News defends against) and meat puppets are when it's separate people (e.g. a whole office). Many startups engage in meat puppetry (e.g. "everyone in the office, vote on this story") around articles that pertain to them.

One notable example is on Glassdoor pertaining to the company Knewton. First of all, negative reviews of Knewton get killed pretty quickly because they get user-flagged (presumably, by Knewton people) into oblivion. But you can see statistical evidence of meat-puppetry in the dates of reviews. A company that had previous been getting about 1 review every 80 days suddenly gets 6 (!) five-star reviews, with no nuance and nothing negative to say, within 96 hours (Feb. 7-11, 2014). The odds of that happening by chance are about 80 billion to 1 against. Before Knewton aggressively policed Glassdoor, the average review was lower (around 2.5-3.0 if I recall correctly). Now it's 4.4, due to this work. It doesn't take much for a company like Knewton to completely break Glassdoor if it's willing to sink that low.

When you learn the signals you can spot this stuff pretty easily. Just the fact of something being downvoted doesn't necessarily tell you anything (it could just be a shitty comment). It's when you see sudden trend changes, and spill-over effects to other comments, and when the topic pertains to a specific company, that there's likely a PR effort going on. Of course, these are all statistical inferences with non-zero error probabilities attached, and I have no way of proving (nor do I really care, because it's not worth my attention) whether the "downvote squad" came from Snapchat or from some other cluster of fanboys.

I've had a lot of comments get downvoted and, 99% of the time, the downvotes are genuine and come from disinterested users without an agenda (they just don't like the comment and, to be fair, some of my HN comments are better than others). When a comment that is quickly getting upvotes suddenly dives, and a bunch of your related comments dive as well, and when there's an obvious motive because the comment pertains to one company or founder, it's likely that the votes are correlated... but not that interesting, because (a) it can't really be proven, and (b) downvotes on a message board don't really matter. Truth be told, this statistical wonkery is probably only interesting to me.
LNG prices vary a lot around the globe, so, wherever they are highest is where the LNG ships will deliver it.

Right now I believe Japan and other parts of Asia pay a lot more for LNG than say, the USA does.

Actually this PDF shows the disparity quite nicely: http://www.ferc.gov/market-oversight/othr-mkts/lng/othr-lng-...

And with the location of the Prelude's operation being just north of Australia, you will note that the highest-priced areas are quite close by.
Two relics that haven't (and couldn't have) scaled past the late-90s magnitude of the Internet, and yet we're still with them:

TLS: CAs. TLS/SSL is largely "security on the internet", and any of thousands of CAs could sign a cert for any of our websites. Very few exceptions apply here - to protect against this, you effectively need to be on the client (see certificate pinning on chrome). We need something like TACK[1] here. The current state of the TLS CA system is very convenient for malicious actors of any size.

Routing: BGP is an overly trusting protocol[2]. Any of thousands of ASN can advertise a route and its peers will happily chug that traffic along to it. This would allow, for instance, a Pakistani ISP "taking over" YouTube, or more recently, Indosat trying to take over the Internet[3].

There's many things that would be "nice-to-have" fixes, but these two are pretty urgent in my opinion. They were designed for a much friendlier Internet.

[1] https://tack.io/

[2] http://security.stackexchange.com/questions/56069/what-secur...

[3] http://www.bgpmon.net/hijack-event-today-by-indosat/
Lispy.el – a superset of Paredit
Sure and let's yell fire in a crowded movie theater for every showing and see how long it takes for people to ignore the warning.
Append only; the ideal internet would never forget. Persistent databases such as Datomic make that feasible. Websites would be views on top of those DBs. APIs would be a thing of the past as we'd just subscribe to a service's public dataset.

Homoiconic; code would be part of the internet. Views on datasets would themselves be stored in a persistent database. Clients would simply subscribe to the code feed and can update automatically, while still being able choose to run old clients, apps er even just particular versions of functions.

Conversational; interactions between services consist of exchanges of immutable data between services (just like conversations.) I publish some code; you publish your interactions with that code. I publish a question; you publish an answer to that question. This has the added benefit of being able to map it onto existing encrypted communication protocols like OTR.
This guide was updated since the previous HN discussion [1] two years ago.

[1] https://news.ycombinator.com/item?id=4679939
Sure, but the root problem IMO that still leads to a wide range of perverse incentives. Science has a huge push to be the first to publish and little emphasis on accuracy. Which leads to a lot of crap being published making some disciplines nearly worthless.
The big picture in Silicon Alley
Anonymous attacking Swedish servers
AirBnB invents call center which isnt hell work
The web would be semantic.
Living on Last Month: For Freelancers
Just one thing : no Javascript pretty please :-)
I think "How we did it" case studies are interesting and useful, but the moment you turn it into "Here's how you can do it too!", you're on snake-oil territory.

Edit: My beef is with the prescriptive tone of the post, as if getting 10,000 paying users is as simple as 1, 2, 3...
Please, please, please submit some more original journalistic source rather than PhysOrg for stories like this. It's unclear from this incomplete PhysOrg write-up if the reference is to a considerably older original story in Nature[1] The Retraction Watch group blog, a good source for interesting stories for Hacker News, had some reporting about this story a while ago.[2] That commentary reporting links to a story in Science that is not paywalled,[3] and an easy Google search found another blog with commentary on what the STAP fiasco does to research on stem cells.[4] There is not a lot of new news or added value in this PhysOrg submission.

[1] http://www.nature.com/news/papers-on-stress-induced-stem-cel...

[2] http://retractionwatch.com/2014/09/11/potentially-groundbrea...

[3] http://news.sciencemag.org/asiapacific/2014/09/exclusive-nat...

[4] http://www.ipscell.com/tag/stap-cells/
The Mail Alert System That Saved My Job
Sony to Apply for Terrorism Assistance from the Government
If Sony can get the hack made into an official terrorist attack they may be eligible for US Government emergency assistance. Also, instead of taking responsibility for their own incompetence they can shift the blame to the NSA/FBI for not stopping a terrorist cyber attack.
Sounds like ./configure. The source code isn't changing but the next recompile might be different ;)
It really leaves me shrugging my shoulders when I see titles like "such and such written in such and such language/framework". Like saying that writing a window manager in Rust (or whatever) is interesting just because it is in Rust.

Tell me, what does it bring to the table compared to other window managers ?
Apologies. Thought it was part of the company.
That still doesn't present a contradiction. The post says that they didn't latch on to "The Interview" until after the media linked it. That doesn't mean they weren't doing things to make people think it was coming from Korea.
>Marketing is the science of bringing a product to market...
Marketing is not a science
Show HN: Material UI Color Selector
Business models that destroy UX
I wouldn't have been disappointed to see a mention of the business she has with Sony Pictures in the article she wrote about Sony Pictures, in the interests of full disclosure.
BPG image format judged awesome versus JPEG
Our Team has developed this.

We will be adding various component like Material UI code snippets, sample themes, etc. soon.

Please provide your valuable feedback.
Reddit cofounder: The next Google is one visa away from leaving U.S
Potentially interesting, but largely anecdotes, hypotheticals, and historical trends, with little to no science.
Lotus 1-2-3 Rocks (1983) [video]
>> got to MIT, get an undergrad in math/engineering, apply to TradeBot, Virtu, Getco, Jane Street.

Regarding Tradebot, they are known to hire from local schools out in Kansas. In fact, Dave Cummings once said it's like half-way to India strategy. You don't have to get an MIT kid and pay them loads of money when you can get a local school kid pretty much do the same.

I used to be in this field, so I can say from my experience, at least, such jobs come out of relationship building with the men of influence. Sometimes it means being ruthless about following up until the right moment comes (e.g. they have a headcount).

But I hear you on that. Having gone to MIT may help.
It's not fundamental to keep per-flow state to have more control over reachability. Once you step back from the current Internet architecture, there are a whole host of possibilities. Here's are a couple of (rather old) papers for example:

http://www0.cs.ucl.ac.uk/staff/M.Handley/papers/dos-arch.pdf

http://nutss.gforge.cis.cornell.edu/
10 Notorious Cyber Criminals Brought to Justice – No. 8
As much as I wanted to believe in this vision, I've realized that the sole purpose of a so called Venture Capital Company is to provide an investment upon which they expect a large return.

I don't believe that to be at odds with what we want to see. I think that the VCs would see better profits if they went back to Real Technology. As an asset class, VC has been underperforming for more than a decade, and the funding of Spiegels and Duplans is the reason why.

The problem is that some of the investors care more about becoming celebrities and "virality" than the laborious process of building real technology companies and getting rich slowly.

Venture capital isn't more broken or evil than any other industry. What happens in any organization or ecosystem is that, over time, the influential players end up being the ones who are good at playing the politics, not the ones who are good at their jobs or ethically sound. The ones who get to the top are those who value nothing other than personal advancement, because caring about anything else would slow down their political ascent.

In the case of VC, there are a lot of good investors, even now. I wouldn't be surprised if the good ones outnumber the bad ones. The problem is that the ones who become most influential are the ones who seek risk for its own sake, focus on "virality" rather than lasting value creation, and engage in collusion that hurts the ecosystem immensely (and that would be illegal on any public equity market).
These always remind me of Milner's Bigraphs, although they're quite different in semantics.
Yeah because making the first thing to be the zero thing in a collection is completely logic and does not break common sense consistence or anything.
A User Protocol (UP). It would be similar to IP but specific for each user. Basically, a user for all your devices and webpages. It'd be managed on the browser-side and synced across devices. A User might have and use several profiles, much how you can send emails with several "from" or when you browse in private mode.

It would basically delete all the throw away accounts that we have to do nowadays and the security risk with repeating passwords. It might even get rid of email as we know it since you could do communication user to user.

Development nowadays

- Mozilla's Persona: https://login.persona.org/ getting adopted slowly.

- Facebook/twitter/linkedin/etc login apis. Not ideal since you are tied to the place.

Pros: emails and communication, p2p, payments, development time (no difficult login).

Cons: stolen id = stolen life, privacy
Out of interest why do you think they have managed to reach 10,000 customers?
was really expecting a talk about ruby
The sanctions (because of the Ukraine liberation/invasion/annexation -- depends on your perspective) are part of the issue, so he isn't wrong.

It is sort of nice to see economic sanctions being effective (even if that is only part of the story.) They also seemed to have a real effect on Iran in getting them to change their behavior. I think that Israel may be next on the list (although primarily from Europe, US is likely to sit out that fight), the wind is sure blowing in that direction.
They are developing a nuclear weapon and have the fifth largest army in the world (even if it is not the most modern). They also have limited support of China. Most of the peole may be poor in this country, but I would not considered North Korea as a state with limited means.
IPv6 is key. I think if we never had to do NATs we would be a lot better off.

Security. HTTP and other similar protocols without encryption by default are not appropriate for today's Internet. Similarly, we wouldn't have to use opportunistic encryption of email.

Better support for protocols other than TCP and UDP. SCTP is a great protocol that fits many application level protocols so well. Instead corporate IT very often sets up the firewall to simply drop anything but the two most popular protocols.

Sadly, we still wouldn't have a more widespread web of trust. Once you buy into WoT, it can be an invaluable tool, but the problem is largely orthogonal to the development of the Internet: publicist crypto is just too difficult to make easy and robust. I only list this here because I believe a more widespread WoT would mean the end of CA's, government snooping, and many other evils.
Wow, that's not much of a payout.

I do see pandora as different from spotify, though. It's more a replacement for radio than purchased music.

It's not easy to listen to Pharrell's "happy" immediately on pandora like I could if I owned the track. I'd have to create a station, and keep clicking until I get the song, with advertisements along the way. I might hit the max number of songs allowed per hour, at which point I could create a new station and do the same thing. Eventually, I would get the song, probably within 15-20 minutes?

On spotify, I would be able to bring the song up immediately and listen to it, just as if I owned the track on iTunes or had purchased a hard copy. There are ads unless you use the paid service, but they usually don't kick in until you've already listened a bit.

Pandora tends to be more of a discovery service for me - I have found out about and purchased music I heard first on Pandora, similar to radio.
I can confirm this is industry wide when dealing with the big movie companies. I work in the big data industry and we have several of those clients under the MPAA and have had to go through multiple security audits just for their business.
Very valid point and I agree. Tried to tame the inner professor on this one but guess I wasn't 100% successful.