skysight-inc/HackerNews huggingface dataset:
It's clear LibreSSL is only a half measure.

TLS is far too complicated with design-by-committee, special vendor extension sauce nonsense. Heck, the FIPS code was rushed and basically done at the behest of US/Canadian govts. OpenSSL should consider burning their deadwood and stop adding features until it gets its house in order.

There's no telling how large of an attack surface remains at the protocol level, in the codebase and with CAs being compelled to issue rogue certs for MITMs.

Moreover: Can TLS features be narrowed to focus on popular and high-value use-cases instead of SCTP, UDP, oh look a bird feature? It's fine for hacking on, but not production code. (If "TLS" is evolutionarily to "Perl," who's working on a "Python"?)

BTW: What ever happened to the cert WoT overlay 'moxie0 was working on?
Its kinda limiting. That's means I have to lug a hub around with me at all times, a spare port would be nice for phone charging, usb drives, etc.
> It would seem odd if they actually change the build process in a security patch, right?

No release of OpenSSL has ever been "the previous release plus the minimal patches for a security fix". This isn't a security patch. It's a new release that happens to include some security patches.
Is this worse than previous adoption rates for new Android releases? If not, then this article is pretty boring. "Steady as she goes in Androidworld!"
I understand the need to simplify (I think?) but I think you could work a little more on the design, spacing/margins especially. Nice work though so far!!
Duolingo for Schools
I'm pretty sure telephone lines are indeed today regulated as utilities. That's why I can get DSL service from a company other than Verizon, even though Verizon owns all the phone lines in my neighborhood.

No one ever put the phone modem on cable networks, though, or fiber optics, or wireless. None of those are regulated as utilities, so the only service providers on those lines are the companies who own the lines. This is a big reason Verizon has sunk almost all of their recent investment into FiOS and wireless.
There is no confusion if you read it as it is stated. They are referring to banks investigating Ripple, not Bitcoin. So no, the article is not confusing the two. Bitcoin technology (blockchain) is completely different from Ripple (consensus). The only thing they have in common is the "crypto" moniker. You can see an article with a Vice President of the St Loius Fed who is aware of the differences: https://ripple.com/blog/5-questions-for-st-louis-fed-economi...
Hi there,

This is Danielle Fong -- I'm also a longtime HN'er.

1 container is 750 kWh at 200 bar.

We adhere to the ASME codes which have an impressive set of tests you need to pass -- for example you need to cycle 60000 times in an oven, cycle to 1.5x design pressure with two deep gashes in the outwear walls (40% of the depth of the wall), and survive without bursting a 50 caliber armor piercing round shot from an anti-tank rifle.

You are right that 90% thermal efficiency doesn't account for electrical or mechanical losses.

Unfortunately it is a little confusing and we need to fix that. The gold standard is electrical to electrical efficiency, but we had not optimized or demonstrated that at the time. (We are very close!)

What we had done (2011 - 2012) is demonstrated the thermodynamic, scientific viability of the process. The 90% one-way thermal efficiency compared to what a typical adiabatic process would have of about 65%. The one way efficiency of a typical compressor is further reduced by friction, etc. to about 59%, and still further by electrical losses to about 55%.

At the moment we can achieve a bit above 71% one way in our best runs (including electrical) and are trying to drive to 80% this year -- that's a 50%+ or 64% electric to electric efficiency. We want to be near to 60% across a whole operating cycle.

Note that with 55% one way efficiency from the best previous compressors, that's only about 30% efficiency. So the promise of our tech is that we double efficiency overall for energy storage -- and that's enough to make it viable.
Sometimes, but if that's a concern, they'll often use it the first time, mention the actual name is the DPRK, and then go from there.

Calling someone by their chosen name is one of the most human things you can do. Dale Carnegie and all that. The United State's dehumanization of the citizens of the DRPK begins with calling them by the name we prefer rather than the name they've chosen for themselves.
Seems like a slightly more complex (has a binary -> decimal decoder) of this [1] which was made around the same time but is a bit easier to see how it operates (since it isn't made of K'nex)

[1] https://www.youtube.com/watch?v=GcDshWmhF4A

I guess the big difference is the ball-drop adders don't require electricity or motors for one calculation, but you need some method (human or otherwise) to move the balls back to the top. Also you can only carry out calculation downwards, so your CPU might wind up being a few hundred meters tall!

Not to disparage the ball-drop adders at all, just pointing out the differences.
DRY is also very much about coding (cut-and-paste versus extraction of common code into functions).
Lead Payments Engineer at Invoice2go in Palo Alto
In an alternative utopia: everything uses the lightning connector design.
Practice safe charging: https://www.kickstarter.com/projects/1137339450/lockedusb-ad...
Getting Drunk in Colonial America (2013)
Not to mention that even if the DOJ doesn't freeze your assets, defending yourself against the DOJ is an incredibly expensive proposition. It can deplete the life savings of even affluent people.
LibertyBSD: OpenBSD even less useful.
How to Quickly Build Social Proof in a Market
He may have been engaging in controversy to sell his book at the time

http://techcrunch.com/2014/09/17/tweet-tweet-pass/
> Drug addiction works similarly, except especially with something like heroin, it gets special teeth. You stop, and not only does stress trigger your compulsion to seek that comfort, even if you're not otherwise feeling stress, you now start to feel pain, or fear feeling pain from withdrawal symptoms.

This is absolutely on the button. It's a vicious, vicious circle, and incredibly hard to break out of. I have a good job, and own my own home, and I find it difficult to quit heroin, and still haven't managed. I know that's 100% up to me, but fuck if it doesn't _feel_ like the drug is in control much of the time.

Just imagine what it must be like if you're unemployed and homeless...
Downvoted for not taking doom-top seriously.
Pricing might be a missing factor. 95% of all downloads are free apps.
Talking Mobile Design on BusinessRadioX
I'm only not surprised because of the very poor state of software assurance in the industry as a whole. Indeed, the issue is not OpenSSL specific, similar bugs have been made elsewhere (and I assume also carried forward in "more audited" OpenSSL forks).

But thats the only reason I'm not surprised. Cryptographic code is safety/security critical and as an implementer (In my experience) the potential for this kind of error is very clear. This class of mistake can be found with a strong testing and verification strategy: it can be found with correctly targeted randomized tests (as was the case for this CVE), it can be found via manual review, or it can be found via formal methods.

Widely deployed, high value cryptographic code should be using all these techniques and producing publicly visible evidence of their use.

Of course, serious software issues aren't just cryptographic ones. Systems programming, as an industry needs to up its game. (And the common tropes of higher level languages to save everything is countered by examples like this: Software safety and correctness is more than memory safety. Higher level tools can be useful, but if they get in the way of really rigorous reasoning about the software they may be counter-productive.)
It's cool. I did something similar on my home page. http://catzo.com
There are many, many crimes where the victim has to press charges for any prosecution to happen, and copyright infringement most certainly should be one of those.
Having made full OpenGL games in C++, I can honestly say that this example is very, very good. One thing I don't understand is how input and output work with CHICKEN Scheme. With all the talk of monads on Hacker News lately, I was surprised that it wasn't discussed in the article. Does anyone have a link that discusses how CHICKEN Scheme calls imperative code from functional code? I found the wiki but there's a lot there.
In a way both are fixing bugs created by someone else.
I expect the removal of the Fn key itself, and the function-toggling, but for the top row to remain (in a smaller format than the current one). That would be in keeping with Apple's moving of "function keys" to the background and hard-coded toggles (volume, media controls, …) to the foreground.
There's a startup out of New Orleans called Niko, Niko that does something very similar. It's about understanding your employees satisfaction levels. They can also reply anonymously with helpful suggestions to management. Seems like a great idea.

http://www.nikoniko.co/
I'm not too young to remember that. Air transport regulation isn't a particularly good comparison. The current wireless cell phone industry is a much better comparison, because it's already regulated under Title II. If that really meant "ask permission before you do anything," cell phone providers would be having to go before the FCC -- or state commissions -- to introduce new service plans or even change existing ones. They do not.

I think it's too easy to leap on the "regulation bad, deregulation good" bandwagon; in practice, it's rarely that clearcut. Look at phone company deregulation in the 90s and the rise of CLECs, Competitive Local Exchange Carriers -- CLECs would never have existed without deregulation, right? That's true, yet it turns out that what created the first C was actually new regulation: incumbent LECs were required to share their networks with competitors. If that sort of "government interference in the market" had happened in the early 2000s with data communications, the end result might well have been having half a dozen different ISPs to choose from no matter where you lived, rather than a choice between your single cable company and your single phone company. (Of course, like what actually happened to CLECs, there's also a good chance that the lack of regulation meant nothing would prevent a series of ever more massive corporate mergers leaving us with the same lack of choice we had before deregulation, but never mind.)
U.DO reverse to-do list with friends
Sort of?

ISPs ran on top of telecom service, which itself ran on telecom infrastructure, not that differently than any business that received phone calls, except it utilized telecom more heavily.

Later, with DSL, service was provided over the same infrastructure telecom used, blurring the line a bit. Additionally, by this point, the internet was becoming more important to daily life.

Now, we have telecom and other services offered on top of the network service which is provided on infrastructure designed for networks, not telecom.

So I would say, yes, an ISP is a telecoms provider, but they didn't really start that way.

Edit: I'm being sort of loose with "telecom" here. I'm using more in the "what we regulate" sense than the "what the word means" sense.
> That ability rests with the cell providers and they always take their sweet time with it.

Can't just blame the carriers, it's manufacturers too. I have a Xperia Z3 Compact direct from Sony, which is a practically brand new mini-flagship. US release in early November, but no sign of Lollipop.

From what I've read, maybe it gets updated in February?

Granted the carrier locked versions will be even slower, but having just switched to this from an iPhone it feels pretty absurd.
Type C was designed to be more durable than micro-USB.
How many driveways does your residence have?

You're fighting a pretty tough natural monopoly to get multiple sets of competing wires. That we have both copper and coax is a relic from the days where they could each only carry specific type of signal.

A form of competition could be fostered by making the wire layers into utilities that wholesale to transit providers. However, it already is this way on the telco side. In most areas, there is little third party interest for investing in competing transit networks, so the ILEC is left as the only provider. Perhaps there would be more interest if latest gen technologies were (de)regulated in the same way, but that undermines investment in new physical wires.
Lore and Baharara are quite a team. When they were Diapers.com they went down kicking and biting against Amazon. I hope a book gets written about these guys, they are incredibly inspiring.
Depends on the antibiotic. GPs don't hand out vancomycin like candy, for example. Of course, that's also because vancomycin is a pretty brutal drug all things considered.
Ask HN: Restarting my career. In a tough spot. Need your advice
HN, I need your advice. Due to a combination of family and personal reasons, I had to move to Asia and “restart” my career. Leaving behind my previous life, experience and career (in software dev) I decided I'd earn my living freelancing; I could do it remotely, freelancing (should be) kind of meritocratic, so given my ability I'd do just fine.

What was my plan is to start releasing open-source libraries (have never done that before while employed), get noticed for the quality of my work, profit.

While I'm doing this now, I've read a lot about getting good freelance dev work and I notice that it is almost impossible to do so without tapping my pre-existing network (unfeasible) or real-world contact (due to external conditions I'm forced into a remote mode).

I don't believe in a “build it and they will come” mentality, yet I am kind of stumped at how to market my services when the time is ripe. Ideas? Suggestions? Help?
Also notable is that Jet.com is using F# as the core language for their backend
Show HN: Ws – A simple WebSocket cli tool
Thanks for the pointer, here's a forum thread on using verbatim mode: https://productforums.google.com/forum/m/#!topic/websearch/Q...

To disable search result personalization: https://www.google.com/history/optout
The person who casts the deciding vote probably won't know that they had done it, so that vote could also have zero value. All they know is that the voted for the winner.

Every vote in the entire election could have zero value, if none of the winners change their political stances as a result, and public policy is essentially unchanged from the period before the election.

That's why I see votes on a binding referendum to have more value than races for office between two essentially indistinguishable candidates.
StartupBake.com is a new platform to sell Rails code
Nobody has anything figured out
I'm sure several billionaires and countless millionaires will come out of the upcoming cannabis boom over the next decade (or two, or three). The real question of interest on HN is how much software will play a role in this.
You might be interested that Aicas is driving the new real time specification for Java.

https://oracleus.activeevents.com/2014/connect/fileDownload/...
Facing the Challenge of Online Harassment
Samsung Unveils SSD Delivering Speeds of Over 2 GB/s
This might just be Samsung's "take" on the update. I have an old rooted Nexus 7 (2012), and it updated to Lollipop just fine. Performance is quite poor, but the update process itself was perfectly smooth.
Besides that you'd have a serious problem getting a DAC that is fast enough and with enough bits.
Yes! I just got this for Christmas. Granted, I showed it to the person who gifted it :) I still loved receiving it and have spent a lot of time with it.
'too much' implies that there is an acceptable and responsible level. kind of like 'drink too much beer'.
Google fiber is plain an simple a serious enough competitor to the major telcos that they'll continue to invest in fast internet tech such as infra upgrades and fiber optics.

Google stands to make money from more people using the internet and being able to send more content to users. If they can spend enough money to force the incumbents to improve performance, they still win.

Pretty sure the point of google fiber was to break even, but not really to ever be profitable. It is more of an insurance policy. They could light up all of the dark fiber they own and be a real problem with the major ISPs if they so chose.
The parent post was referring to GPs, which at least in the U.S. aren't often operating in hospitals, and certainly don't get ID consults.

Vancomycin is the drug of choice for several major infections that are of a concern to hospitals (MRSA, C. difficile) because there's already pretty established resistance mechanisms. There are definitely some "more last ditch" drugs, but Vancomycin is kind of the first of the "Now we bring out the big guns" antibiotics.

Partially because it's a PITA to give to patients, and has some toxicity problems.
One thing that disturbs me about the Net Neutrality discussion is that nobody's talking about what we might be giving up. I've learned a lot about unintended effects of regulation. I have some ideas about what those might be, like reduced infrastructure investment by the ISPs, but as a community this discussion seems absent. Are there others out there that are concerned about the unforeseen consequences like I am?

In particular, it feels like Net Neutrality will remove the incentive for video streaming services to put investment into new and improved compression algorithms.

I worry about streaming video squeezing out simpler tcp/ip.
for i in [0..width[ do
for j in [0..height[ do
if foo(i, j) then break label outer_loop
# The 'break' breaks the 'for i' loop
end
end label outer_loop

ouch. I see why mathematicians would like that, but programmers are surely annoyed by the open range "[".
And if the target are mathematicians, they surely dont like the verbose do end blocks, instead of {}.

the for loop could be then

∀ x in [0..height[:
if foo(i, j): break outer_loop.

just odd syntax choices.
> Is Anti-pattern obsession an anti-pattern?

No. It's precisely because the world is so complicated and the broad generalizations don't work that I think patterns and anti-patterns (ideally with stories behind them that explain the context in which the author discovered them) are so much more useful than, say, the rule format that so much of our industry's content is wrapped in ("stop doing X", "you should be doing Y", and so on).
I don't know that I would call the decoder trivial. You can see here in AMD's Bulldozer, it occupies a third of the front end.

http://pc.watch.impress.co.jp/img/pcw/docs/430/341/10.jpg
Ask HN: Sell, open-source, or abandon a $10k/year Mac app?
In 2011 I wrote a low-end GIS program for Mac, called Magic Maps. The idea for the app was to make a simple, Mac-like alternative to ArcGIS and QGIS that makes it easy to plot points, import Shapefiles, and create chloropleth maps and animations without first wanting to open your veins in a bathtub.

It was my first desktop app, so the code isn't great, but it's found a loyal user base over the years has netted over $50k since 2011. Unfortunately, Magic Maps is now suffering from neglect and bit-rot, and some of the users are starting to revolt. At the very least, it needs a bit of work to fix crashes, ensure it works smoothly on Yosemite, etc.

I'd do this work myself, but I am putting all my time into another app, and as much as it pains me, I just don't have time to invest into Magic Maps any longer. I'm putting this out there because I'm honestly not sure what to do with the software at this point, and I'd like to hear other people's perspectives. I see my available options as:

* Open-source the project. I think open-source works well for a lot of things -- and I've done a lot of open-source work in the past -- but user-friendly software doesn't seem to be a good fit for open-source without ongoing sponsorship.

* Try to sell the project. This seems ideal, as I think there's potential for Magic Maps to be a viable business with a sufficiently savvy owner, but I'm not sure there's a market for code that doesn't include a developer or test coverage.

* Wind down the project and call it a day. This would be the least amount of work for me, but it hurts me to think about it. It just seems like a waste to throw away all that design and engineering effort -- it's a neat little package and I'd hate to put it in the trash.

Have other people been in similar situations? What did you do, and what do you think I should do? Sell it, open-source it, or call it quits?

BTW here's the Magic Maps home page: http://magicmaps.evanmiller.org/
U.S. jobs created or supported by Apple
You might find some useful suggestions in this recent hn discussion:

https://news.ycombinator.com/item?id=8844972

To prevent repeating myself, I wrote a comment in the above discussion that you might find helpful:

https://news.ycombinator.com/item?id=8845213
Introducing Our Third AWS Solutions Architect Associate Level Course
Ionic: Year One in Review
It is nice for charging overnight, but not so much for usage. Even a beefy iPad adapter (~2.1 amps) doesn't provide enough power during usage. If you want to run it without drawing down the battery, you need the included charger (3 amps), which had a tendency to overheat and melt in its first iteration.
They are not, that is "Intentional self-harm (suicide) by other and unspecified means and their sequelae"
I'm working on a research language with an extra set "explicit math operators" which expose carry in, carry out, etc. explicitly, and doesn't do type promotions and signals errors on under/ overflow.

"+!" If you want C-like behavior.

It'll be imperative with full dependent types as well.

Also interesting: cryptol, Irdis, coq, but the work is on making generic systems programming clear as possible in a static, imperative language without a titanic runtime or crawling along with superfluous assertions.
Are you seriously considering this as a potential system administration tool, or am I just bad at detecting sarcasm?
Sqlite3(1) Mac OS X Manual Page
WhatsApp Grows 300x Faster Than Christianity
Start a blog with a focus on a particular piece of open-source software that you work on (e.g. Drupal) and provide your contact info. Then try to get your feed into some of the well read aggregators and followed on Twitter and such. I get cold requests once a month from that alone and haven't blogged in over a year, requests were more frequent when regularly blogging (note that I don't freelance, I just get requests).