skysight-inc/HackerNews huggingface dataset:
One of the challenges of patent reform is that there is a huge advocate of strong patent systems in pharma, and they are good at lobbying.

They care because patent protection is how they recoup the costs of FDA trials (which are north of $100 million per drug). Reforming patent law would become easier if they were given what they need in the form of an alternate form of temporary monopoly for having paid for the FDA trials.
Precisely because your questions seem particularly on point, I find them hard to answer; but I wanted to say that I appreciate your thoughtful engagement with respondents in this thread. It's a rare sight, even on HN, and a pleasure.
> Still, he concluded his statement to Swedish media by observing the “good news that through our reconnaissance we could not find any preparation for terrorist activities.”

Well played, sir.
The Freakonomics guys did a podcast on the perfect murder, and it turns out it was "kill someone with your car" because only a tiny percentage of people that kill pedestrians are prosecuted for manslaughter. Tiny.

This is also evil, though I'm not sure who is to blame for it.
Ask HN: Micro investment for one-person projects in third world countries?
There are a lot of side projects / one-person startups with a lot of future in third world countries that don't prosper only because the owner/creator hasn't enough time to dedicate to it (mainly because his/her main job).

In some of these countries, $1000 monthly would be more than a salary, so investing 1k per month to these projects would allow to its creators to quit its main job to focus on the project.

I think the main problem would be trusting the one who builds the product, who receives 1k per month from the investor in exchange of a percent of the ""company"". Besides that, I think it could be a good idea.

What do you think?
I wanted to get a Beagle Bone Black over the holidays for some project. Didn't want to wait the 2 days for amazon, I wanted it that same day.

They wanted $100... So I got mine off of amazon for $54. Nuff said.
Famo.us partners with the jQuery Foundation
> Professional software engineers with years of experience get pay in that range. Guys just starting out want that kind of money. I see it all the time.

At Google, new grads get 120+k with their bonus, not including the ~62*$500 in stocks every year for 4 years or the ~$25k in signing/reloc bonuses. If a new grad gets offered that amount, why would they not want the same elsewhere?
The Long Steady Decline of the Private Eye
The interesting thing about this is that it's very nearly a First Amendment infringement on the right to assemble. In order to assemble on a street–a fairly obvious place to do so, for a protest, since it has good exposure and visibility–you have to ask the police to explicitly redirect traffic on your behalf. That's not a small hurdle.
I think we hit Poe's Law.
It's worth keeping in mind that the Turkish government hi-jacked DNS resolvers; as-deployed DNSSEC would in no way have helped.

The 2008 attack was not novel and was described by DJB about 7 years prior to Kaminsky, and DJB's utilities included a mitigation: randomized source ports. At present there is an equivalent vulnerability: UDP/IP fragments can be spoofed in such a way that poison records can be injected to resolvers. It is possible to mitigate this, but many DNSSEC proponents - including the Bind maintainers - refuse to consider mitigations because they feel that people should be moving to DNSSEC instead. It bears repeating that as-deployed; DNSSEC doesn't help protect against cache poisoning towards stubs - only towards caching resolvers.
> Browsers and operating systems aren't going to add full DNSSEC resolving caches.

Actually they already did. OS X for instance has this baked into mDNSResponder.
Eating Within a 12-Hour Window for a Healthy Weight
Rice-sized laser, one electron at a time, bodes well for quantum computing
Now check out Atlassian's new office:

https://www.flickr.com/photos/atlassian/sets/721576316725737...

Guess who's winning the bug tracking market share
The Builders Syndrome: Harsh reality you need to accept when building a startup
Or Stellarvore. Anything but Starivore. Yuck. I always want to say "Stare" instead of "Star"
Jaywalking is not a crime here, but I'm always amazed when a TV segment indignantly shows people jaywalking and talks about its risks.

I actually find it safer to cross the street somewhat away from the crosswalk. Crosswalks are usually close to road intersections and other places with increased traffic, where the traffic seems to be less predictable.
Hmm, the reply button to submit this comment is just reachable with tab as it should be, so I don't see any issues there?

Have you looked at something like BigBlueButton? I recently used it to give a webinar. They don't have an HTML 5 client yet unfortunately, but they integrate some interesting things to provide video/audio over WebRTC and to their Flash client. I think it uses Freeswitch for the audio/video part.

If you nail the technical issues, you might find that lots of blindies are not that good videographers. You need a high quality stream and preferably a method to let the remote party control the camera zoom. I use "remote eyes" in various situations and had quite some issues focussing my camera in the beginning. I use USB camera glasses or a smartphone, usually just through a Skype connection.
That is not a valid excuse for keeping your kids indoors.
Nice, this is a feature that'll really improve ZFS's usability for me, as a home user. I'd like to be able to redo my Zpool with a different architecture (6xDisks in RaidZ2 rather than 4x in RaidZ1). Doing it online rather than as a copy would be awesome. The next best thing would be online ZVol restructuring, though.
And after that, kick things up a notch with the Boltzmann Brain paradox:

http://en.wikipedia.org/wiki/Boltzmann_brain

> The paradox states that if one considers the probability of our current situation as self-aware entities embedded in an organized environment, versus the probability of stand-alone self-aware entities existing in a featureless thermodynamic "soup", then the latter should be vastly more probable than the former.
Responsibility needs to be allocated according to reality, not historical sentiment.

Horses have priority over hikers and mountain bikers on trails because horses spook, and around here hikers defer to mountain bikers because a hiker can quickly stop and step off the trail, while the biker cannot.

Also, it's not true that the vehicle automatically bears no responsibility if they strike a jaywalker.
What if they had photographic memory and a lot of drawing skills and were able to produce a drawing of you naked that was indistinguishable from a photo? Should we ostracize those people from society?
DNSSEC was also the reason why source ports weren't randomized, and thus the reason that Kaminsky's attack was briefly so viable. Somewhere there's a NANOG post with the BIND maintainers talking about the "scoreboarding resolver" they'd implemented but wouldn't release, because (even back in 1997) the real answer was DNSSEC.

I'm not sure I agree about the novelty of Kaminsky's attack. Ruefully: I remember arguing with him about that on Twitter, him getting me on the phone to explain how his attack refined the older cache poisoning attacks, me conceding it, and then bad stuff happening a few months later.
> Look at the code in Firefox that handles certificate failures, presents user interface to end users to resolve the ambiguity, and then completes the operation once that happens. Then look at the sample code I linked to. The code I have there is a decent approximation of "idiomatic". The code I'm referring to in browsers is larger by a factor of, what, 100? 1000?

(The link tptacek is referring to is https://gist.github.com/tqbf/e8d82d614d1fea03476b btw.)

If I had my say, the code you link to would not have to be changed at all, because the `gethostbyname` interface would stay the same and return a lookup failure on unsuccessful DNSSEC verifications, if the parent zone reports the domain to be DNSSEC enabled.

> Browsers and operating systems aren't going to add full DNSSEC resolving caches. They're going to use stub resolvers and delegate this problem to "DNS servers" (caches), like they always did. DNSSEC does not protect the last mile.

You've said so in your blog post, but you don't say why. Everyone that is seriously considering using DANE as a replacement to the existing CA hierarchy assumes they do include a DNSSEC enhanced resolver (I don't see why it has to be a "full" and caching resolver, though).

> DNSSEC does not protect the last mile. You can dodge this point by redefining the concept of "last mile", but that's not a persuasive argument.

When the "last mile" is on my PC (i.e. when my local resolver checks the DNSSEC signatures) then it is as protected as my OS.

> The US NSA controls both the CA hierarchy and .COM. It is amusing to see people try to rescue DANE from criticism by evoking the CA system to protect it.

While I find your enthusiasm to protect against the NSA encouraging and important, my point actually was that DANE improves upon the security of the existing CA system against attacks by non state-sponsored attackers and foreign state-sponsored attackers beside the NSA.

Let me state it differently: At the moment, example.de has to worry about attackers controlling the .de zone (, the root zone) and attackers controlling any of the >100 CAs (including many nation states). With DANE, example.de only has to worry about attackers controlling the .de zone and the root zone. As a more graphic example consider how at the moment the "Deutscher Sparkassen Verlag GmbH", the CA of a german umbrella organization of local banks, can issue certificates for amazon.com, wikipedia.org or any other domain world wide. This kind of nonsense is solved by DANE, not NSA spying.

(My apologies to German readers for not inflecting "Deutscher" in the above sentence. I keep the identifier verbatim to allow readers to look it up via non-fuzzy search.)
That makes no sense whatsoever. If the law is unethical then so are the consequences of that law.

This is like saying that laws against homesexuality may be unethical, but trying to avoid being punished for being gay is wrong.
Yandex and Naver deserve a mention. In some cases, localism does triumph even without very heavy handed censorship.
I bought one for dev purposes, and I was never really convinced about the design (even being a prototype). It looks nice, but it is unbalanced on a side, they could have put an extra battery on the other side, the official blog was just talking about Instagram-like uses (who is that had that horrible idea?) and the screen was not great.
Mass transit is also a lot different from the princely horsepowered carriage trundling through the streets in order to maintain a proper separation from the unwashed masses.
light orange font on dark orange background, hmm....
You're saying running on the JVM is a performance issue? Really??
Here's what is revealed in the article: At one point in time, a DHS agent had the belief that Karpeles was involved with the Silk Road.

That's it!
EFF and CDT Tell FEC: Don't Increase Regulation of Online Speech
I think you're a little off on the 100 years bit.
30 years maybe.
The first jet was the German Heinkel He 178 built in 1939. First jet airliner wasn't until 1952. First high speed train was 1962.
If you bought a car 100 years ago, the wheels would come with wooden spokes, it had 2 speeds and a reverse. There was a transmission brake but no brakes on the wheels. No clutch. You had to crank the engine by hand to start it.
People here do indeed jaywalk more than in many other countries, but we look both ways first.

I want to point out it's not the "not looking both ways" that is the only significant cause. I walk 4 miles per day and I rarely jaywalk. I often have to jump out of the way of cars because they refuse to yield the right of way to me. I think it's a cultural thing. I think too few people walk in the US and therefore cannot empathize with people that do. The number of times someone waits for me to walk slightly out of their way and zooms past, within inches of me, is flat out infuriating. All it would take is a small miscalculation on their part to kill me. Honestly, it makes my blood boil thinking about it.

Put those people into cross walks 20-30 times a day for a month, and I'd bet they would stop doing that shit.
Reaction when @tqbf, again, claims DNSSEC is NEVER GOING TO HAPPEN

http://dnsreactions.tumblr.com/post/92623693242/when-tqbf-ag...
Yea man! It's my favorite pizza place in NYC :)
Thanks, I'll look in to those two.
> a race to the bottom for CA pricing, led hopefully by EFF

Also Startcom. https://startssl.com (free TLS certs, each good for one subdomain + your base domain, for one year)
Since the early twentieth century, the world is undergoing dramatic and unprecedented change. It's going to be very hard to extrapolate from the failure of any past system or experience into the twenty-first century.
What could be better for a reasonable doubt defence than the prosecution opening with a Mark Fuhrman?
The main issue is unless we ban cars from areas that benefit from pedestrian traffic, it's essentially impossible to keep pedestrians from cars. Given there will be a mixing of cars and pedestrians, who should we design primarily for: the person driving or walking? If we design for driving, then we relegate walkers to malls and parking lots. If we design for pedestrians, we relegate cars to narrow, crowded, slow streets, and possibly limit which streets cars are allowed on (or which streets through-traffic is allowed on). There isn't one "right" solution, but these are conscious decisions that communities need to be aware of.
NIST Workshop on Elliptic Curve Cryptography Standards
Going to put a shameless plug here for the python awk replacement I made.

github.com/kespindler/puffin

Instead of learning a new language and new syntax, just use python!
Only if you interpret the 1st as absolute.
Technological progress doesn't necessarily have to work against privacy. That's only the trend now because the interests of business and government happen to converge on aggressive surveillance. Technology can progress in a myriad of ways.
National Archives Washington DC
From The Verge article (http://www.theverge.com/2015/1/15/7553591/silk-road-trial-ro...):

"One of Karpeles' companies had registered 'Silkroadmarket.org,' leading investigators to consider him as a suspect."

Silk Road launched in February 2011: that's the same month Karpeles (or his associate at Mutum Sigilum) registered the domain

https://who.is/domain-history/silkroadmarket.org
Fire up a terminal, run "tcpdump -s0 -i en0 udp", open Safari, resolve "www.enteract.com", and tell me if you see a full recursive DNS lookup happening, or if instead you see Safari's stub resolver asking the DHCP-configured DNS cache server for help over the insecure Internet.
It's almost a requirement in a criminal defense case to have an alternative culprit, just the same way that it's almost required to have a motive and a weapon in a homicide case. The defense needs to raise a reasonable doubt that Ulbriicht wasn't the criminal and that's best done by presenting an alternative culprit.
I think you should blame the rock more.
TypeScript is different from CoffeeScript, it's not a new language. It's superset of JS, and it almost is JS, only ES6. So that's the direction where JS is going.
They may also just give you a warning.
Not the OP, but once when I was a teenager I saw a foreign-owned car driving the wrong way on a one-way street, and driving fast. Since then I've always looked both ways when crossing a one-way street.
not a big surprise, they've all but completely disappeared from sight around S. Another Segway, but I doubt Google were ever serious about Glass, it was a demonstration of Google as committed to being a futuristic hi tech company.

The problem with the product is that people like the compartmentalization of the smartphone, you take it out of your pocket to take a photo, nothing surreptitious. And to be honest, the smartphone just does a lot more. This is going to be the challenge that the Apple Watch will also face, it competes with the smartphone for your attention and has to add enough additional value to justify the product segment.

Meanwhile, it's no big deal, products come and go and some end up with much smaller target customer base, although I suspect Glass is (as Segway was) being considered for a few specific markets but over the coming year or two will just vanish only to be revisited in a decade but with holographic projection (a la R2D2) and streetview-like surround-camera and built in plethora of biometric sensors that all feed into the big post-Singularity GoolgleBrain to provide it's eyes, ears and voice...
a lot of people pipe to sed but you don't need to. you can do regex subs right in awk. see sub and gsub.

sub(r, t, s)
substitutes t for the first occurrence of the regular expression r in the string s. If s is
not given, $0 is used.

gsub same as sub except that all occurrences of the regular expression are replaced; sub and gsub
return the number of replacements.

(this is awk from osx, which i think is nawk)
Man, that would be a good read.
It would be very convenient for the establishment if every revolutionary was obliged to throw themselves upon a pyre....
Bitcoin Exchange Processor EgoPay Freezes Funds, Disables API
> and then bad stuff happening a few months later.

Are you referring to http://www.gonullyourself.org/ezines/ZF0/zf0%205.txt perchance?
This has always amazed me about Boston. The image burned in my mind from my one visit there years ago was of a very elderly woman with a hunched back simply crossing the street, as you say almost "at random", and without acknowledging the "existence of motor vehicles". There was a wall of traffic incoming from a fresh green light, but she aimed at a store across the street and just started walking diagonally towards it, not looking either way, and without even a pause for consideration. The traffic simply stopped and waited as she slowly crossed; no-one honked.

In Manhattan I have a different memory, of masses of people stubbornly crossing against the red, right at the crosswalk, while a taxi slowly tried pushing its way into the sea of pedestrians. But I don't blame them because in NYC every. single. god. damn. intersection has a traffic light. I guess they thought Stop signs weren't good enough. Or even just right of way.
I can certainly agree that the car culture in the US is a bad thing. But I don't quite understand why streets make sense at all as a social gathering place. Why not parks or people's yards/driveways/patios?
The only way to understand what does it do is by watching a video?
Sure, but without DANE, they can get a domain validated certificate quickly from any number of CAs that your clients probably already trust.

(edit) I understand DANE puts explicit trust on the registry, registrar, and the DNS root; but given the common use of domain validated certificates, that trust is already there, and I think it is better to have it explicit. Also, there are fewer parties to watch out for, the Belgium Root CA can issue a cert for my domain, but Belgium is unlikely to compel my registry/registrar unless I've chosen to have a .be domain. (My applogies to Belgium Root, if they're not affiliated with the government of Belgium)

Also, I don't think cert issuance can scale without domain validation or a large expense.
EFF: Which apps do (and don't) stop Verizon and Turn's zombie tracking?
at least in the awks built into osx and debian have sub and gsub (and gawk adds gensub).

sub(r, t, s)
substitutes t for the first occurrence of the regular expression r in the string s. If s is
not given, $0 is used.

gsub same as sub except that all occurrences of the regular expression are replaced; sub and gsub
return the number of replacements.
We don't plan to do such a thing, but we would (obviously) be supportive. The challenges for a Docker daemon on SmartOS are several-fold: first, while clearly sympathetic to cross-platform concerns, Docker itself isn't actually (yet) cross-platform, and many Linux-isms were found in putatively generic code. Second, the Docker daemon has a hard dependency on cgo, which is even nastier than Go itself to get working on non-Linux systems. (We did ultimately get cgo working on illumos -- albeit arguably at the cost of the sanity of the engineer who did the work.[1]) Finally, in terms of deploying this into production, we're not about to take third party code from anyone and run it in the global zone on production machines.

So for us, it makes much more sense to implement the Docker Remote API on top of SmartDataCenter, which has the added advantage of virtualizing the concept of a Docker host to be an entire datacenter. But again, we would be supportive of any effort to straight-up port Docker to SmartOS, and we are generally supportive of any container effort that is looking beyond the (mis)design of Linux containers (including the work linked to here for FreeBSD + ZFS).

[1] http://dtrace.org/blogs/wesolows/2014/12/29/golang-is-trash/
Thanks. I'll give this a go tomorrow and see how it looks.
Thanks. Go-micro is by no means a complete solution. It's merely an experiment in the world of microservices and a conversation starter.
350,000 transactions analyzed to see where America drinks coffee
I am not sure where you are getting your info but in my neighborhood kids play in the street all day and move when a car comes.
Urh, anyone think Amazon might buy them? It would be nice for Amazon to have a physical store to demo Fire products.
The Other Silicon Valley
Verisign controls .com and is on pretty much every root CA list, so they can do what you describe today, no DANE required.
The Socratic position of accepting judicial punishment doesn't make sense if you have anything you want to do with your life other than making a political point. If you think making that point, with its immense opportunity cost, is the most important remaining thing you can do, fine, but you can't assume everyone is at that place in their lives.

I don't think someone should be expected to sacrifice everything on principle in order to be justified in refusing to comply with an unjust law.
You're joking right ?

The hyperloop is an unproven, untested, unverified concept. It has massive regulatory and safety issues to overcome and as currently designed is completely stupid. No one is going to use it for 35 minutes without the ability to either (a) stand or (b) use the toilet.
Asbestos imports to the US rising
Yesterday I was working on something that required reading through old paper documents and taking notes, and I thought of how Google Glass could be useful in that situation.

Google Glass has a bright future in B2B — minus the stream everything to our cloud approach, I hope.
There's a bit more information from Sarah Jeong, who has been covering this for Forbes:

"Amazing moment later today: in affadavit, DHS agent referred to @a_greenberg's interview of DPR and said it sounded like Mark Karpeles." [1]

"Investigation found that Mutum Sigilum, a Karpeles holding, had registered http://silkroadmarket.org #SilkRoadTrial" [2]

"Karpeles's attorneys met with Baltimore law enforcement, offering to give up the identity of DPR if Karpeles was not charged w crim charges" [3]

[1] https://twitter.com/sarahjeong/status/555844940841115648
[2] https://twitter.com/sarahjeong/status/555821164661321728
[3] https://twitter.com/sarahjeong/status/555821577485713412