skysight-inc/HackerNews huggingface dataset:
> I believe judges have compelled people to surrender decryption keys.

Doesn't seem to be a widespread practice. As far as I can see, the only Federal Appeals court case to have confronted the issue ruled against compelling a suspect to decrypt their own laptop.

http://en.wikipedia.org/wiki/Fifth_Amendment_to_the_United_S...

> It is in concept no different to having a magical safe which can't be opened by any method except the owner's key. The court does have the authority to compel you to surrender that key

It is different, but only because you have the explicit right to remain silent. The US government can legally compel you to do lots of things, but not talk (or otherwise communicate information that's potentially against your interest...generally).
Earth Time Clock
Yes, the CA model we have today is deeply problematic. But there are organizations such as Google that are trying to improve the current situation. See e.g. https://queue.acm.org/detail.cfm?id=2668154 about their Certificate Transparency project.
If it is well known I suppose you can provide something to back that up?
Why you need permission to see my twitter password and post on behalf of me?
We've been sending Windows clients to https://ninite.com/filezilla/ to download it but perhaps we ought to start avoiding it completely. I don't particularly like any other FTP client I've used in Windows, but its been a while since I looked.
Considering phk works as a developer for a very popular HTTP based application (Varnish) and contributed to competing specs for HTTP2 he's hardly a pandering blogger. He's an expert annoyed that the improvements in standards in his field are absurdly slow and perfectly entitled to voice his ire.
The multiple comparisons problem
Welcome back, Seth! This post was from last summer. He's back and rocking hard: consul-template is awesome. Thanks Seth!
While the article tries to make the point that the tower is filling slowly, it fails to do any useful analysis to demonstrate this. Is it filling slower than the original towers? Is it filling slower than comparable office space, in NY or elsewhere? The writer never bothers to find out or inform us.
> One remarkable property of this name is that the abbreviation "WWW" has twice as many syllables and takes longer to pronounce.

World Wide Web

Dou Ble U Dou Ble U Dou Ble U

I count three times as many, is this an accent thing?
Delivering results like they are going out of style. Crush'a challenge.
Sorry, didn't want the post to sound like an advert.

Here: wwww.hiveflux.com
Maybe it's just because I cook often, but to me this is the foundations of cooking. You're always changing and tweaking what you're making to suit your needs. What a more smokey taste in the chili add some chipotle and smoked paprika. Want to make that rub sweeter add some more brown sugar.
www.hiveflux.com
I have had the experience where I _think_ I (or a distributed open source team on a project I commit to) am doing what you suggest -- but then retrospectively, I see it still resulted in too much complexity through over abstraction/engineering.

I think you've got the right idea, but it still doesn't always make it easy.

The places I have found the most success in my design, even looking back, are when I constructed a library for a domain I was already well familiar with (often having experienced how another library handled it), and where I had the time to do it slowly and carefully, deliberately considering each design choice and the simplest possible way to achieve each desired path while still allowing for flexible reconfiguration. When working with other developers, this often, as well, involves some initial disagreement about the best solution that accomplishes without adding unneeded complexity. And sometimes even I start getting impatient with the slowness of the deliberate process and consensus building -- it's easier to do by myself (which takes even more time).

These are rare circumstances that allow for such slow coding though, in the pressure to get things out quick and get them used and then quickly iterate. We have a (hard-won, reaction to other harmful development ideologies) overall ethos in our industry(ies) of getting things out quickly without needing to get them perfect or fully understand where it will lead you, and then iterate based on feedback. That works pretty well for UI, although it can still contain the same pitfalls. It is even harder for infrastructural architecture though, it's probably still possible as long as you are careful and deliberate with your iterations (although knowing when to break backwards compat is still a trick), but, anyway, I don't think it's easy.
Forgive me, but where did they mention it as Jewish start-up? Do you know that there are 25% non-Jews living in Israel?
Life in New York City, Where Arrests Are Down and Tickets Are Rarities
I've heard similar things about FileZilla and it's creator. Do you have any recommendations for an open source, GUI-based, Linux FTP client?

Most of the time I simply scp or rsync files as neccessary, however I use FileZilla to manage files on my phone and tablets via FTP. I've never found the FTP/SFTP/SMB support in Thunar to be all that reliable...
Interesting thoughts on how spam detection would work in such a system: https://moderncrypto.org/mail-archive/messaging/2014/000780.....
On my load balancers it is more like 5-10%. Not terrible, but not trivial either. Also, it multiplies throughout the environment. If you are dealing with PII or financials, everything needs to be encrypted on the wire.

Load balancer decrypts, looks at headers, decides what to do, re-encrypts, down to the app tier, decrypt, respond encrypted, etc. I'm not saying that is a bad thing, but that's why some people get cranky.

Somewhat unrelated, compressed headers in HTTP 2.0 makes sense if you only think about the browser, it saves 'repeated' information. The problem is the LB has to decrypt them every time anyways, so someone still have to do the work, it just isn't on the wire. Server push on the other hand could be awesome for performance (pre-cache the resources for the next page in a flow) but also has the potential for abuse.
While the technical validity/integrity of HTTP/2.0 is certainly up for debate, there's a bigger issue here, and phk certainly isn't the first to talk about: the rush by the IETF to basically polish SPDY into HTTP/2.0.

To me, that's the most fascinating, and entirely relevant (read: not self-serving or self-important) piece of what the author is talking about.
Tail of Missing AirAsia Plane Is Found
The point is that such applications have no use for privacy, so why should it be forced? (NB: I am not asking this question, just explaining the point)
If you have any questions, feel free to poke me. This tutorial was fun to do :)
It seems a lot of the commenters are looking at this like a black-and-white issue... Either you're a generalist or a specialist who does nothing else.

I think the best place to be in is right in the middle: the "T" engineer (or "T" marketer, "T" designer, etc). It means you have deep knowledge of one vertical, and a shallow knowledge of many related verticles. (Get it? It's a T shape.)

This type of person is damn good at solving anything within their vertical (and gets paid accordingly), but knows enough about related fields that they're not blinded by their own expertise.

As a technical marketer who also knows some code, some design, some B2B sales, etc, I've found those "shallow" skills to be tremendously valuable. Not because I can promise clients to debug their app (I don't), but because I can communicate with the development team, the design team, the inbound marketing team, ... without hitting a language barrier.

So don't be a one-trick pony and don't be a jack-of-all-trades. Be a T.
Thanks - but, I hoped someone would save me from looking through lots of similar pdfs.
I think it's an accent thing. When I say WWW at normal speed, it sounds more like dubble-u dubble-u dubble-u. American, east coast USA.
The entities themselves would have to be (and remain) outside the US too, and given their doctrine in the Ireland email disclosure case Microsoft is fighting, even that would be tricky.
Can’t go all in on an idea? Start with a side project
A technique that never runs out of style: Selling through relationships
Upvoted, not because I think it is a particularly good article, but we seem to have a pretty good discussion based on it.
In [most|all] countries the distinction between government officials, [corporations|financial institutions], spies and organized crime is already extremely blurry...

FTFY.
The more elite the journal, the more "important" it's likely a paper in it is. If the paper is truly important, people will try to build upon it, and in the process discover problems with it.

Contrast to "less elite" journals which in part serve the "publish or perish" market, and are therefore less likely to have material other people care about. The smarter cheaters will obviously game that general concept.
While I initially thought this as well, at some point the site admin (botg) posts this:

""MalSign.Generic.F84". Looks like a typical false-positive generated by a heuristic.

There is no malware in the SourceForge Downloader, you can safely use it to install FileZilla. While the SourceForge Installer may present third-party offers, they are
clearly labeled as such. All third-party offers can easily be declined. Nothing unwanted is being installed without your consent. Declining offers does not prevent nor otherwise disturb the installation of FileZilla.

If you do not wish to use the SourceForge installer, have a look at the additional download options listed on the FileZilla website."

His stance seems to be that it's not malware, rather a false positive (I have no proof to claim he's wrong and if he is, it could be a honest mistake; he's trusting SF, which I understand), and he mentions that you can also download Filezilla from their own website, without the SF installer.

That seems pretty reasonable to me, but again: at first I got the impression they (FileZilla's owners) simply didn't care.

I hate what SF has been doing, and I refuse to use their installers (although I'm primarily a Linux-user so I don't have to worry about these installers, thankfully), but I don't really feel like the FileZilla owners should be avoided as it looks like they're simply trusting SourceForge, nothing more. I hope I'm right. ;)
The actual phrase is:

A jack of all trades
Master of none
Is still better
Than a master of one

Worth keeping in mind when looking for a metaphor.
The Language thing is unnecessary. Since they record all calls they can find someone to translate later. But maybe you're right and that is too much trouble for them.
Q&A: Meredith Perry, Founder, UBeam
This also depends on where you are in your career. I would not call myself a One Trick Pony, but I am specialized enough in legacy systems that I face the same danger.

However, I can play this to my advantage -- as more and more of my colleagues have moved on to greener pastures, I have specialized in modernizing these old system to Web-based UIs, as well as doing consulting projects to migrate the applications to new platforms or simply shut down the old systems. As time goes on, the rates for these projects are increasing. I am also old enough to have a nest egg built up, while leading a simple life with a smaller monthly "burn rate" in my personal life than most other people I know.

For me, I can ride this tech until it dies. It will be the end of my tech career. But then comes a semi-retirement where I can get by with the residual income I get from a couple of my side projects and my little hobby farm.

So the real lesson is that being a one trick pony can be a terrible thing... or you can be aware of your situation, and be prepared for it. If I had no nest egg, no residual income, and no plan to change my lifestyle when the meteor hits, I'd be in trouble. Instead, I'm actually kind of looking forward to it.
For me, I had trouble when I thought those on the otherside were there to judge me and my performance as a speaker. But when I realised they are just there to listen and that it's ok if I F up, things got easier. It might help if you start with a smile and look through the eyes of each and every individual and see that they are smiling back at you. And also it's just like speaking in one-on-one situation.
A bit more on this:

Android licencing means that no company is allowed to ship both Google Android and non-Google Android. This means that to ship Google Android on the phone they (Amazon) would have to ship Google Android on all Fire tablets too.

In addition under the licence Google apps need to be both installed (you have to have all of them, you can't pick and choose) and placed in particular prominent locations (so the Play Store needs to be on the first home screen). This would almost certainly mean that Google's store(s) would be have as good if not better positions than Amazon's own stores on the device. More than that there are restrictions around app stores which compete with Google play which would, at the very least, restrict Amazon's ability to pre-install and operate their own app store.

Given that Amazon's reason for making these devices in the first place is to sell content - videos, music, books and apps - stock Android is to all intents and purposes a non-starter for them.

See here: https://www.theinformation.com/Google-s-Confidential-Android... for more information.
There is something about technology that gives law enforcement a tingle. Look at Vance's high profile cases http://manhattanda.org/press-release : arson, multiple cases of embezzlement, securities fraud, sexual assault... Not one case that needs to break encryption to convict.

The lesson is that as soon as they realize they can't do anything about it, it will cease to be a hot button issue. Just like the rest of the limitations on law enforcement. Encryption should be pervasive and routine. Then it will be ignored.
Ask HN: Whats the most challenging book you have ever read?
I just finished "The Origin of Consciousness in the Breakdown of the Bicameral Mind" by Julian Jaynes.

It's one of those books that constantly leaves you uneasy and unsure whether you understand what you are reading but what an amazing read.
From last time around:

https://news.ycombinator.com/item?id=2555349
Also for unbound methods to make them usable as functions.

Python:

func = Foo.method

JavaScript:

var func = Function.prototype.call.bind(Foo.prototype.method);
He is no doubt perfectly entitled to rant. I'm also fairly confident that phk has contributed to more important projects vital to the tech ecosystem than I ever will. I simply argue that there are more constructive and productive ways to go about pointing out a protocol's flaws.

Phk has had issues with the process for quite some time, and I feel that his embitterment about the process has jaded his view of the protocol. Phk on SPDY/HTTP/2.0 http://lists.w3.org/Archives/Public/ietf-http-wg/2014AprJun/...
unfortunately I haven't. For the most part, I'm a Windows user, so I've been using Explorer for plain FTP to my phone (which, while not great, does do the job more-than-well-enough for my uses)
If the world were 100 people
OK, my argument against Lockhart shouldn't have included the words "playfulness", because now everyone has latched on to that and portrayed me into the Grinch who Stole Math. As a personal anecdote, I hated the way math was taught in elementary and high school, as a dry series of formulas to be memorized (particularly geometry, which I took in the 7th grade). Math should be fun, but for many students, it shouldn't be a series of abstract problems unconnected to the real world.

My main complaint here is about learning in the abstract vs learning in specifics. That's my sole argument against Lockhart's piece. I regret ever using the word "playfulness", because that has nothing to do with my main argument (and if you re-read my top comment, I think you'll understand this). My concern is about abstract-to-specific versus specific-to-abstract learning.

But let's quote a little more from the preface of "Concrete Mathematics":

"Abstract mathematics is a wonderful subject, and there's nothing wrong with it: It's beautiful, general, and useful. But its adherents had become deluded that the rest of mathematics was inferior and no longer worth of attention. The goal of generalization had become so fashionable that a generation of mathematicians had become unable to relish beauty in the particular, to enjoy the challenge of solving quantitative problems, or to appreciate the value of technique. Abstract mathematics was becoming inbred and losing touch with reality; mathematical education needed a concrete counterweight in order to restore a healthy balance".

So, that basically sums of my feelings about how I was taught math in college. I'm not going to pretend to know what Knuth or Lockhart believe, but that paragraph describes my personal concerns about math education.

I'm not a professional mathematician, nor even a math major, but I am an educated parent and informed citizen, and so fall directly into Lockhart's intended audience for this piece. I've now read it 5 times, and each time I get more and more the feeling that he wants mathematics to be taught deductively, as an abstraction. I base this interpretation on how much "pure" and "abstract" learning is emphasized in the essay, and how much disdain he has for practical math applications. I'm not going to pull out all the quotes, but if you disagree, then I don't know what to say.

Unfortunately, I honestly can't afford to spend any more time on this argument, so I'll have to read your rebuttal (if any) and stop there.
I would liked to take a moment and laugh at the advice to leave a 10+ year old language in favor of... Another few 10 year old languages.

Your time would be better served learning more programming paradigms than languages; the languages are the easy part, knowing how to best solve a problem with that language is the hard part.
PayPal isn't really that bad. Most of the horror stories are from people breaking the terms of service (donations without getting approval, long preorders etc). Wikileaks was blocked by MasterCard.

We've been in PayPals sights a few times (we had a site bug once that double-charged a bunch of customers, and charged one customer 28 times! We had to do over 1000 chargebacks.) We got a massive rolling hold but the whole time PayPal were willing to talk to us. We've even won some customer card chargeback disputes on digital goods through PayPal.

For a short while we switched to a traditional merchant account but that was hell from day one. Aside from the paperwork to get set up, they hated the fact that 40% of our sales were outside the U.S., that our sales are highly seasonal, etc.

That said, to someone starting today, I'd still probably recommend Stripe instead.
Isn't this the guy that basically refuses to implement SSL/TLS in varnish[1]? The more cynical part of me wonders if that has anything to do with his rejection of HTTPS everywhere.

[1] https://www.varnish-cache.org/docs/trunk/phk/ssl.html
A different kind of pull request.
git push --force is often neglected, but it's rather kinky.
When I learned the simplex methond in my Engineering classes I had to perform it by hand for exams (only a couple steps or to get an updated matrix). The tableau method was easy to write out and learn. Yet for solution computation in the practical world it is very computationally expensive. I would solve in matrix form as the author suggests since linear algebra has come a long way since then.

Another note is that the simplex method is just one aspect of solving optimization problems. Most computation solvers now use a series of heuristics to get a "close enough" solution than perform either a simplex or gradient descent approach to get a final solution. For those that want to know more about this research I highly recommend the field of Operations Research. https://www.or-exchange.org/ is a good Q&A site for detail.
I wonder if we'll see a new Linux version based on this, akin to this one?

http://www.dell.com/us/business/p/xps-13-linux/pd

I have that and love it. Better battery life would be awesome, though.
It sounds more like a SourceForge issue than FileZilla. SourceForge used to provide clean binaries, but I guess they changed that process in the past year or two to bundle apps in the installer wrapper. You need to be extremely careful during the installation process to make sure that you do not accidentally install some extra software. The same happen to uTorrent - they also added tricky question during the install process to include advertisement, change default browser and such. That's a sad way to earn money - the end-users will definitely move on because of that.
GT80 Titan SLI
It would. But like I said, they were using a Samsung S(something). There's no way, aside using a different mainboard, to make the phone have a charge rate of 5C or higher. That's just the details of the phone charging hardware.

I would have believed it more if they used a MediaTek chip based phone. They could have hacked and modified those all they wanted.
Maybe in Danish it's only 6 syllables? Because the English language completely agrees with you.
Unless you say "duh blew duh blew duh blew", you're still using 9 syllables rather than six 6.
DBMS of the year: MongoDB
Most people I know pronounce it dub-dub-dub so I started doing that as well. Maybe a London thing?
sure but when correlations go to 1, you're as badly off as if you only had one position. Diversification engenders false senses of security, and moreover, means everybody has a bit of everything. Therefore mass panic can ensue causing the correl matrix to ramp. See: 2008.

I contend that diversification makes for great maths, but often poor risk management.
Terrific resource!
The Cost of Getting My Stolen Computer Back
I've been a fan of Cyberduck for quite some time now.
You've made a subtle change of meaning there. By going from:

> should be made as generic as possible

To:

> should be made no more generic/abstract than actually neccesary.

You've introduced a subjective judgment call. The result is a tautology, since we could rephrase it to:

> should be made no more generic/abstract than it should

Whether or not we agree with the quotes from Einstein or the parent, at least they're (mostly) objective, and tell us how to proceed: if anyone finds a way to simplify or generalise a result (without sacrificing correctness), they should do it.
I say "triple double u".
I just got a Windows laptop where the power button doesn't do anything unless you hold it. Been throwing me off.
Some WTF moments in Javascript, courtesy of Gary Bernhardt:

var foo = ["10", "10", "10"];
foo.map(parseInt);
// Returns [ 10, NaN, 2 ]

[] + [] // ""
[] + {} // {}
{} + [] // 0
{} + {} // NaN

var a = {};
a[[]] = 2;
alert(a[""]); // alerts 2

alert(Array(16).join("wat" - 1) + " Batman!");

Press F12 and use the Console to verify these if you're skeptical.
IRS Changes That Can Affect Your Business in 2015
There's really no reason to use SourceForge anymore. GitHub can do almost everything SourceForge can do, aside from app reviews I guess. GitHub also doesn't make you feel like you're in 2004.
Actually the fact the the users don't pay for it is not relevant. You're still making a transaction with the user, providing them with a service, in exchange for them putting up with your ads. But in reality the service you say you're providing is false.
Wholegrains, not just porridge, may increase life