skysight-inc/HackerNews huggingface dataset:
Synopsis: Google disclosed a bug with security implications to Microsoft. As per their policy, they released information to the public 90 days later. Microsoft wanted to wait a couple more days, and is now trying to paint Google as the bad guys for disclosing the flaw.

Two things bother me about this situation.

First, why did it take Microsoft more than 90 days to patch the bug? Especially since it potentially affects the security of their users. Do they actually care about their users?

Second, why are so many people getting on Google's case here (such as in the comments of the article)? Google notified Microsoft of the problem, and followed their own policy of disclosing the information to the public after 90 days. That seems like ample time for Microsoft to fix the issue. Also, Google sticking to their guns here is better for Microsoft users: maybe Microsoft will patch the next bug sooner.

After reading the article again, it states that Microsoft wanted to wait until a normal "patch Tuesday." If this bug has security implications, though, why would they wait for a normal release?
Apple Might Make Computers You Control with Hand Gestures
Julius Caesar's Elephant
Nice work, the Dropbox integration is probably a good idea (although I personally don't use Dropbox). One question though: is it not possible to click to the next question, when you're reviewing? Does this require signing in?

Coincidentally, I also recently used React to build a SRS site specifically targeted toward review of computer science topics. React definitely makes building UIs into a pleasure. (Now, if only there were an equally elegant, open-source solution for client-side data/models).

By the way, you mention possibly moving to Mathjax. I tried out Mathjax before I ended up just switching to pre-rendered images generated from LaTeX. Now that I know about KaTeX, I'll probably switch to that instead of pre-rendered images. But trying to integrate Mathjax with React is a challenge, because of how Mathjax manipulates the DOM. It's doable, but even then I ran into performance issues and abandoned it in favor of pre-rendered images.

KaTeX appears to have addressed both the React integration issues and the performance problems (not to mention the download size of the Mathjax libraries).

At the moment, I've just released a basic flashcard version of the site without the SRS functionality [1]. (the SRS requires Firebase, and I haven't yet published that code)

1. http://esbullington.github.io/canonicalcards/ (by the way, I'm actively looking for pull requests with additional questions on data structure, algorithms, and other topics from the core computer science curricula).
I didn't suggest it was hypocritical, and nor did I suggest Ulbricht should feel compelled to defend the principles he wrote about. I'm saying that I wish he (or anyone in his position) would fight for those ideals, which are entirely justified in a world where NSA spying is treated as the punchline to a late night show monologue joke.
You might want to add an optional parameter "number of matching results" that would be used before sending the sorted results.
It's true, it is easy to get carried away by the fact that the Leidenfrost effect can protect you from small splashes of nitrogen on your skin. As the demos show, it's even possible to dip a BARE hand in... very briefly. For the love of god, don't do this while wearing a ring or a glove.

It's objects that are the problem, because they do not evaporate and they do not flow away. One of the worst is cloth, which tends to be wrapped around your skin, so when it gets soaked in LN it promptly gets super cold and then sits there burning you while you try to get it off. I got a tiny splash on one of my socks once. Fortunately it wasn't a big enough splash to do more than sting a lot and teach me never to splash LN on my clothing again.

And, as you point out, the other problem is that protective gloves are essential for handling cold solid objects, but very dangerous to have on your hands when touching the liquid. Which means you need tongs! Long tongs, so that your gloved hand stays safely at one end while the other end is fishing around in the nitrogen.
I wouldn't complicate the the first contact probably need to lead with your strongest benefit. "Are you interested adding 30% more bookings form the internet? something like that. Also, I would call a couple first. only way you'll actually understand what they are looking for. just keep calling different places until you find some one that's interest in talking with you. you could say your doing research for a project at college for that matter.
TLDR (from PDF):

As this article demonstrates, print books are still the best suited to the optical, cognitive, and metacognitive requirements of the reading brain. While e-paper technology has been shown to be the optical equivalent of print on paper, e-readers still are lacking in the physicality that has been shown to be so important for comprehension. E-readers also
lack the haptic qualities that readers enjoy about books, and seem only willing to give up only when convenience and portability are at a premium. In terms of metacognition, ereaders
provide limited opportunities for text interaction, while virtual page turning has been demonstrated to discourage review of previously read material. Computer-read texts
have all the limitations of e-readers without the superior optics of e-paper, and the added cognitive disadvantage of distractions from multitasking. Hyperlinks, once thought to
streamline the learning process, have instead proven to interrupt the seamlessness of the reading process from perception to thought processing, and this is when they are passed
over. If links are actually followed, the lack of textual linearity is sure to lead to confusion. When learning from a text is the objective of reading, printed books will remain the preferred format.
Ask HN: Don't want to work for acquiring company?
I work for a startup that has been around for several years. The company is not dead, but I wouldn't call it a success either. Management is hoping that we will be acqui-hired, and is shopping for a buyer. The process looks a lot like a job hunt, except that I don't get to choose the companies I apply to, and generally don't know what position I'm being considered for. I've done a couple interviews so far where I've had to feign enthusiasm for the potential acquiring company. Has anybody been through this? Has anybody left their job because of this? I guess I'm supposed to be excited at the prospect of a potentially larger salary at the new company, but my stock options aren't likely to be worth anything. I find the whole process unpleasant. I guess I'm just wondering if I'm the only one. I haven't been able to find much written about this situation from the perspective of an employee. Any advice? So far, all of the potential deals have fallen through, and I'm getting tired of it.
Sorry Kinect: Apple Wins Gesture-Control Patent
“Everyone carries a flashbang,” Malette testified. “Any time we encounter locked doors, we have an unknown, we have to gain back that initiative.”

I understand that police are interested in maintaining control of a situation, but practices like throwing flashbang grenades into houses without looking...these guys seem to think they're Delta Force.
It has been free for the first year with Namecheap for as long as I can remember.
> “Some of what contributed to this tragedy can be attributed to well-intentioned people getting in too big a hurry,”

The things you can get away with when you have an uniform...
Please Help me help my mom with her Lupus
Depending on where you live, that's exactly what happens.

In Kentucky, they'll send (usually) 3 state troopers, and knock on your door. If the person that they want isn't at home, they'll take your word for it, and let you be on your way.

In Ohio, it's usually six or more officers with guns drawn. They'll try to open the doors of the house to gain entry without knocking or announcing their presence. When the person that they're looking for isn't at home, they'll try to find a reason to come inside and search the property looking for that person (and a reason to arrest everyone inside). They'll then circle the house outside for 24-48 hours to intimidate the people inside but eventually give up when they realize that the person doesn't actually live there.

What's really sad is that I was great friends with a member of Law Enforcement until I realized how short-sighted and two-faced he was; the LEO community really breeds an environment of "us versus them" and if you're a defendant (regardless of guilt or innocence), you're a scumbag who deserves to be in jail.
The probability of the original input list being in the exact order it's in is 1/(n!). If that's the order you wanted then the algorithm might very well approach O(0).
Samsung's purported rationale for dropping the FM radio in the Galaxy S4:

Our studies show a trend shift of interest to digital broadcasting, specifically
– focus on listening to music content in social networks or on the channel
YouTube. The flagship model of our products are focused on customers who use
digital content, which use modern formats and channels of information
consumption. (translated from Russian).

http://blog.gsmarena.com/samsung-explains-why-galaxy-s4-lack...

I can't image carriers are upset about it.
Thanks!

Regarding your point on declarative vs imperative I think it depends on your pain threshold--you can't accomplish everything you want with CSS layout, but that doesn't mean not very useful. Crucially CSS has the escape hatches that you need to go and do your own layout if you need to (the escape hatches in CSS aren't very good, IMO, but they're there).

So I do believe that this work could be broadly useful. I frequently use apps where the panels don't incorporate momentum properly, or the motion feels disconnected from my actions.

If I were to build on this work, then I'd want to create a system where it's easier to do something pretty good than not, but you can still escape and grab full imperative control if you need to.
Senators Seek Bill to Spur Hiring Foreign Tech Workers
I was charged with child abuse for leaving my 6-year-old in the car at Wal-Mart
Book Writing Productivity Hacks
Or the Shaggy defense.

http://www.youtube.com/watch?v=Qv5fqunQ_4I
I think now would be a good time to buy.
There are two flaws in this statement:

1) Police, and most public officials, are subject to qualified, not absolute, immunity.

2) Given that municipal or state governments have to pick up the check when juries find against police departments, the comment you are responding to is still sensible (I'm not saying I agree with it, only that it's not illogical in the matter that you seem to be suggesting).
Proof That Goldman Sachs Controls the FBI and District Attorney in NY
Relevant:

http://en.wikipedia.org/wiki/Wiio%27s_laws
It will be interesting to see this unfold. But I am inclined to believe Ulbricht here.

My main reason for finding it immediately believable is that the name "Dread Pirate Roberts" is an obvious Princess Bride reference to a pirate who inherited his trade and occupation from another pirate. That combined with the fact that the name did not appear on the forums for the first few months leads me to believe that the name is an inside joke about the fact that the Dread Pirate Roberts did not create the site.

The 2013 quote from the Dread Pirate Roberts saying the same thing when he had no particular reason to lie is just icing on the cake.
Hi. we're working on this. can you imagine what, if any, part of this could be done purely online?

what would your top three features be? (in an actual, online agent, actually on your side.)
What about the locale of the user producing a different sort order?
This comment doesn't need to be downvoted. It's not stating anything as fact - quite the opposite - it's very clear it's just a guess. And it makes logical sense according to this [1]

1. http://en.wikipedia.org/wiki/Non-apology_apology
There is a lot of work being done on agricultural robots that will displace even more farm workers. Which, given how back-breakingly awful farm work is, shouldn't be viewed as an entirely bad thing.

What happens to the people displaced, I dunno. Malthusians and Luddites have been telling us we're all going to die in a mass of unemployment and poverty for a quarter of a millenium, and they've been consistently wrong, mostly because they lack the imagination (as we all do) to see how humans will cleverly adapt to the new reality.

In the medium term, agricultural robots may displace a lot of pesticide use as well, because if you have a solar-powered 24/7 robot weeding, you don't need chemicals. This also should be viewed as a good thing.

But a world where robots can do everything, including writing this post for me, creates an interesting problem. Most people--especially men--are not well-suited to not having work. How we fulfill people's need to work in a world where there is no work that needs to be done is an interesting problem to have. But remember that there was a Roman emperor who killed off an early attempt at industrialization and rudimentary assembly lines because he feared what the newly-unemployed would do, and worried that surplus slaves would revolt. It's hard to argue, knowing what we know now, that he made the right decision. Our inability to see our own future shouldn't stop us from embracing it.
If the email integration is seamless then it's worth looking into for me.
Let me tell you the blatant truth which no founder will tell you: You are just a worker bee for them. They will do whatever it takes for the startup to be successful. So even if you gave your blood and sweat, and single-handedly built the product in the last 2 years, if they think (I should underline they think) that a vp of engineering will do a better job than you - then they will go out, hire that person and probably give them more equity than you.

You should think about what's best for you next. If you think you are not going anywhere, you should cash out and leave.
Who says they can't check 3 times? Original, caps inverted and uppercase? This would make sense. You could even make it try neighboring keys on common key layouts. If the hash has enough bits of security then good passwords will still not break.
> Don't share your identity with anyone else.

Maybe implement HTTPS then?
Elon Musk Talks Seattle Satellites, Model X
This fact was so evident last year. I don't understand why cop cases don't have special prosecutors or fall under federal jurisdiction.
It's O(whatever algorithm the responder uses), plus a HUUUGE constant for latency and wrong answers.
Wow. I had a joke theory that the "real truth" was the Silk Road was a DEA sting operation but the (gov) operators were caught skimming and needed to shut it down in a hurry. I didn't think that would be the real defense.
My point is, even as a fix-it tool, when over used, it removes natural fluctuations in a persons voice, and creates sameness.
Early Access is a crapshoot though, and I'm glad Valve is taking steps to rein it in a bit. Too many developers start with basically a POC, sell it at normal release price points, and then development peters out after that. Godus and DF-9 are good examples of this.

Strangely, it seems that you should avoid Early Access when it's for games by [i]established[/i] developers (Peter Molyneux and Tim Schafer are behind Godus and DF-9, respectively). Meanwhile KSP was made by a bunch of (former) nobodies, who actually made a game that delivers everything they've ever promised.
Yes. Along with the vast majority of programmers being absolutely terrible at their job, to such an extent that they can't even choose an appropriate tool (language) to do their trade with.

Just look at how OpenSSL is written in C++. And look how that turned out. OpenSSL indeed. Wide-fucking-openSSL would be an even better name. Open to OSS contributions it is not; because the codebase is in such a terrible state. What is the point in OSS if nobody can contribute because it would take a year just to understand the ridiculousness of the codebase, right down to trying to understand why they chose such an inappropriate language for creating a supposedly verifiably secure software system.
Your approach sucks. Looks like your going around, hat in hand, looking for someone to give you a job. As if people owe you or something.

Look for ways to help people. If you got big bad skills, prove it. Make people come to you.
I agree, leaving is not being a dick. Staying and not helping, or actively hindering new staff through lies and misdirection about implementation details of a complex application in a complicated domain is.
Obvious question the jury will be asking: so who did he sell it to? Better have a good answer.
> The purpose of a comment is to explain something; if you cannot explain it fluently, then the comment is useless.

Exactly. If a piece of code needs a comment in the first place, it means that there's something subtle about the task that cannot be fullly conveyed using code alone. But that's exactly the kind of thing that people have trouble expressing clearly in a non-native language.

I would much prefer a clearly written comment in another language that I can ask a colleague to translate for me, than a misleading comment in English.
"Jobs for those of job age," as Anthony Burgess put it.
and are, essentially, burning thermite

What makes you think flashbangs contain thermite? From what I can tell they contain a small amount of explosives[1].

The filler consists of a pyrotechnic metal-oxidant mix of magnesium or aluminium, and an oxidizer such as ammonium perchlorate or potassium perchlorate.

[1]http://en.wikipedia.org/wiki/Stun_grenade
I came to that conclusion when they told me "Sorry, it looks like you don’t have a sufficient number of Facebook Likes for us to generate an accurate enough prediction!"
>One of the headaches of setting up a domain is getting the email sorted correctly. Instant integration to Gmail is a nice feature.

name.com has had that for years. Click a button and it configures all the MX records for you and a few CNAMES on top (so you can do stuff like mail.yourdomain.com and calendar.yourdomain.com).
I am looking for Scala, Haskell, Ocaml, F#, with focus on concurrent distributed systems.
I agree. Both devs and Google earn money from Play Store& Admob. Right now with their intelligent algorithms, Google behaves as only devs are earning something.
No. Now you won't be able to log in if you signed up without JavaScript, or if you paste your password into the form field.
Wasn't Ulbricht logged into an administrator account of Silk Road when he was busted at the library?

That would make it harder to claim you were "framed".
Ask HN: Is Strangeloop a worthwhile conference for cloud developers?
I've just come across Strangeloop, and was wondering if anyone had reviews of past years. I'm mostly interested in cloud-related material, and was wondering if it's worth attending.
Not really, the recruiters are just incentivized to bring in candidates.
One, lots of people like kicking doors in. Two, there are no consequences for getting it wrong in most cases. Three, there's a slim possibility that if they stop someone in the street and they've underestimated the situation, someone in the house would open fire on them, so it's become increasingly standard to carry out every raid like they're in a John Carpenter movie.
So when you go out and look for a job, do you also expect the job to come to you, or you go after the job?

Nobody will give you a job on a silver platter.

Contributing to open source is one thing, looking for a job is another one.

Thanks for the advice though.
paramilitary gear

There's nothing "para" about it. That gear is coming straight from the military.

http://www.nytimes.com/2014/08/20/upshot/data-on-transfer-of...
Ask HN: How do I price my SaaS web app?
I'm very close to an initial launch of a CRM app for not-for-profits, and my first two customers are asking for prices which I've been putting off for a while, focusing on the product.

I can't charge them a nominal fee until it's out of beta because they want to know they can afford the system before moving everything into it, so the pressure's on now!

Does anyone have any tips on how to best approach this, or how it's worked for you in the past? Is there a way I can figure these out that makes the most sense? My competitors are all old antiquated systems, I don't have a lot to compare to.
Why Gratuity is the future of all payments
We all know that tip stands for "To Insure Promptness". Tipping is a way a making sure one gets what one wants. There are many flaws to the process of tipping, but there are reasons Gratuity is a $40 billion a year industry. Acclaimed tipping researcher, Prof. Michael Lynn of Cornell, has shows that there are three main reasons people tip: reward good quality service, help service workers, and gain social approval. Also, it's been shown that having gratuity makes the cost of a service appear lower upfront, increasing the amount of service consumed. These notions show the the psychology of gratuity is subtly very complex.

On this notion gratuity appears to be the future of all payments. As technology increases, the economy will move faster and faster. Our society will get to a point where the reason one pays will generally occur prior to payment, a la Gratuity. Further, there is strong notion that payment data collect on person regarding years of these type of transaction will represent the new credit score and that TipEasy.com's mobile app rating system represents the future of this way payment. It is clear the future of payment lies in the subtle psychology of gratuity.

Sign up to receive tips on a phone at TipEasy.com
Of course it's not necessary to assault a home. But tactics like this intimidate the population into stunned compliance. The word for this is "terrorism", from the French reign of terror where enemies of the revolutionary state were summarily executed in public. Of course, terrorist states managed to redefine the term by the mid-20th century.
Ask HN: How to market a video course?
Hi all,
I'm working on a video course for advanced ios development, inspired by http://scotthurff.com/qc/, was wondering if anyone could give me ideas for marketing it when the time comes to launch eventually?

I've got a blog with a mailchimp list of ~400 members and possibly ~200 RSS subscribers, but other than that i'd love to hear suggestions for how to reach people.

Thanks so much.