skysight-inc/HackerNews huggingface dataset:
Well, it's basically impossible in some cases to MITM while showing the same certificate without re-building a browser. So your best bet would be to modify existing browsers. That said, if content modification isn't required -- and all you want to do is snoop on SSL, you can use SSLKEYLOGFILE in NSS-based browsers like Firefox and Chrome. If legitimate, I'd prefer going the extension route: people want you in their browser, so you can walk them through whatever it takes to install you, or provide pre-made profiles with you enabled. The point of encryption is to avoid spying and while most users (as evidenced here) don't actually check that the HTTPS website certificate is what it claims to be, pretending to be the same site is about all you can do to modify content and MITM. I'd also point out that the problem here isn't so much that they're MITMing as that they're doing it really, really poorly. Of course, any backdoor could be used by others -- even your SSLKEYLOGFILE. ;-)
This is all part of the initial haul. They're checking all the documents one by one to make sure they don't reveal information that would make intelligence agents and others at risk. They've partnered with quite a few media organizations to spread the workload. Amusingly enough, you could say that Greenwald et al. are doing the OpSec the NSA should have been doing in the first place. :)
npm stands for "no problem meatbag", not "node package manager" ;)

It's the package manager for javascript and will continue to be. The module system in io.js is not going to be changing anytime soon.
Sony is no longer an electronics company
Have you considered making it interactive? i.e. an input box to enter a Twitter name or a log-in form to see my own connections
In that hypothetical it might be a reasonable conclusion, but it would still be an unscientific one, since it would depend purely on your understanding of a concept rather than empirical evidence. And this distinction would only matter to a philosopher, since the conclusion would have no practical implications either way.
CoffeeScript doesn't follow "Semantic" versioning. Most projects that claim to follow "Semantic" versioning actually don't.

Take, for example, the other news at the top of the front page, Io.js 1.3.0 — a minor version bump that should include zero breaking changes to the public API.

And yet, 1.3.0 "broke" the way that urls are resolved with regards to trailing slashes: https://github.com/iojs/io.js/pull/278

If you follow SemVer — and I don't think that Io.js should, or have to pretend to — this must be yanked, and re-released as Io.js 2.0.

Ironically, the behavior being complained about in this post relates to how CoffeeScript decides to name internal compiler variables. This is not something that has ever been part of the public API — and is something we can (and might) change at any point. We've changed it in the past.

Breaking changes in your API are a good thing — when the new way is better than the old. But this isn't one of them.

For more on SemVer, and why you should resist giving in to its fascist attempt at world version domination, see: https://gist.github.com/jashkenas/cbd2b088e20279ae2c8e

I get that SemVer is an attempt to address dependency pain — but it's woefully inadequate, reductive and dangerous. We can do better.
If GR and QM can be derived from string theory, but the base theory doesn't provide any extra prediction of its own or simplifies the other two theories, then what good does it serve? Can we at that point say it's a "correct description of reality" or just a clever mathematical trick?
Out of interest, did you define some kind of measure by which you can test how well the chosen method performs?

(There are a lot of suggestions here, so it would be nice if at least you could choose the "best" one)
In what way does Amazon own the Internet?

Yes, they own some of the computers that make up the Internet, but by far not all of them.
Thank you for changing the Twitter permissions. I signed up.

This has potential. How does it work? My guess: a better RSS reader. This would be a slick design for that.

Can I add sources other than the ones you've chosen?

I like the short summaries, but where do they come from? I thought it might just be the first paragraph, but for "Feature Friday: Accept Bitcoin With Stripe", the summary comes from the middle of the article. Is it in fact from RSS?

Also, I'd like to be able to mark my favorite articles, and view a list of my favorites.
Germany's investigation found that it likely didn't happen and that the documents saying it did were possibly forgeries.

http://mobile.reuters.com/article/idUSKBN0JP1QG20141211?irpc...

> "the document presented in public as proof of an actual tapping of the mobile phone is not an authentic surveillance order by the NSA. It does not come from the NSA database.

> "There is no proof at the moment which could lead to charges that Chancellor Merkel's phone connection data was collected or her calls tapped."
She was a druggy after all and got everything she deserved.

The user above may have meant it as sarcasm, but the funny part is, this is in fact pretty much what the cops were saying about her in the weeks after her murder.
Based on someone mentioning his book, I'm thinking Masanobu Fukuoka: http://en.wikipedia.org/wiki/Masanobu_Fukuoka
Totally agree

I suspect the bias currently giving me P(detected|negative)>P(detected|positive) is resulting from my simplification to looking only at 1-grams
Exactly. It's a work machine, used for doing work. I don't do private/personal/secure things on it, as it's not my personal computer. Browsing HN or w/e isn't really a private activity, so I don't mind it being snooped.
We'll have to agree to disagree. In every success case, you'll find a nitpick. Van Gogh was innovative in his use of color, a characteristic clearly developed as an adult, and yet you dismiss it because he drew as a child. McClure has no value because he hit the jackpot once and rode from there. Conrad must surely have written in Polish and French (yet published nothing and left no manuscripts), which surely undermines the excellent storytelling abilities and remarkable prose he developed after he stopped working a full time job. A really old man can only run the marathon in over 6h, three times the world record (I'm a third his age, and I can, maybe, do the marathon walking and beat the 7h mark).

If you do not understand the bias I have presented, central point in my argument that you sidestepped, at least understand this: You can choose to believe you can do anything, or you can choose not to. There's a chance of error in each choice. The loss in the error case, for each option, clearly favours choosing the optimist option. Even if all your steps forward are followed by backward steps, at least you are dancing Cha Cha, not moping your way down to a sad grave.
This is an interesting approach to normalisation - will give it a go :)
The co-op consultancy
Yeah those agencies and consultants. Our school district hired those, because school changes are laced with emotion and the school board was full of cowards. The agency googled some data, made some powerpoint slides and charged $150,000. The data was patently wrong, even to the board members.

But remember, consultants are just a meat shield to protect those that hire them from criticism or accountability. So I guess it worked from the board's point of view.
We're not allowed to joke on HN. It's serious business here.
I agree with your view on China and that we just should get along. That would mean though, that certain nations would just need to start to withdraw their troops from the all over the world.
Ditto. I don't think the CoffeeScript philosophy as it stands will ever have it keeping up with the pace of JavaScript proper at this point. Within the next year, I think our company will be migrating back to the land of curly braces. The charms of CoffeeScript just aren't worth missing out on all the great stuff coming to JavaScript as of late.
Definitely think I should look at using bi-grams and tri-grams

Interesting reflection on society if there are more 1-gram ways of communicating negativity than positivity e.g. I'm more inclined to say 'terrible' for something very bad while it feels more natural to say 'very good' than 'excellent'. If that makes any sense :)
> What do chargebacks have to do with a currency? Chargebacks is something offered by services built on top of the currency, not the currency itself.

Chargebacks have to do with bitcoin because one of the selling points frequently cited for use of bitcoin, a non-legal-tender currency, is that it is a consumer transaction mechanism that is better than legal-tender currencies and the transaction mechanisms provided on top of them by the financial services industry.
This is wrong. There's stories in new at the moment that start with a lowercase letter, and this story has a lowercase word in the title.

There's apparently immense social pressure to capitalize titles, but it isn't enforced by HN.
>It would be a shame to trade major strategic opportunities for the ability to share ripped DVDs.

1. It's not merely the "ability to share ripped DVDs". It's also the ability to have a little privacy, the ability to watch my DVD's on a player/device of my choosing, and probably a few other things I've forgotten.
1. No it wouldn't be a shame. The US is chock-full of rubes waiting to separated from their money, and as long as we have any money left, no growing economy like the ones in Asia are going to leave so many customers on the table.

>It's a sort of damned if you do damned if you don't scenario.

No, it's a shitty deal that we'd be fools to accept.
These aren't different things! If you compress data by saying less, you're expending less energy.

It seems like the author is arguing that in order to be lazy about sound production, you need to expend energy picking out which sounds you need and which can be safely left out. That's all well and good, but in the middle of the article, the author herself refers to mumbling as a kind of "strategic laziness"!

Curse these headlines!
Twilio Positions Itself for an IPO After Logging $100M in 2014 Revenue
Google offers support for v8 outside of Chrom(e|ium)? I can't find anywhere that Google lists what their supported versions of v8 are. Can you point me towards that list?

More importantly, has Google shown genuine interest in supporting embedding v8? Their last blog post about this was in 2012.

As for libuv, I would rather use a battle tested version, than stay on the bleeding edge. Threading is hard, and race conditions are rarely caught by tests. I'm happy to let others break their production and identify the regressions before I commit to it.

Wanting to use proven software has no relation to using the "oldest" version. As software is used, bugs are found. The longer you wait to transition to using new features, the fewer bugs you will encounter when you make the transition. What's nonsensical about that?
You don't need passion if it's just a job. It might be boring, but most jobs are boring.
Also, does "less than 10 times smaller" mean e.g. 9 times smaller, or e.g. 11 times smaller? From context I'd guess that TFA intended the latter, but it's horrible writing.
>The advantage of SLBMs is that they are enormously survivable.

Right but their survivability is contingent upon their not being detected.
> Non-exhaustive patterns error was disappointing after being told that "if it compiles it will run".

Yes, it's somewhat strange this is only a compiler warning rather than a compiler error.
Get to know the founder (About getting to know her)
Huh. Kinda looks like astroturfing.
Reweighting sentiment by looking at the number of occurrences of positive and negative words in my assumed neutral corpus is a great idea :)

Will implement and report back

I've looked into using Naive Bayes but my understanding is you need labeled training documents and then I face the problem of scoring documents which introduces subjectivity compared to just counting the 'sentiment words'.

I understand complexity is needed to deal with negation ('not bad' != 'bad') but I'd imagine that the sentiment scoring process would be the same regardless of algorithm which brings us back to the problem of how to correct bias in 'word list' asymmetries
I can't decide if this would have been better or worse if they'd chosen someone to write it who knew more about Japan, but it was interesting. Japanese people have done homestays for some time, though, which is arguably a similar phenomenon, except you're stuck with a foreigner for way longer. That might be something to think about.
More so I haven't heard very convincing reasons for MiTM even in other settings, and certainly in this case that they choose not to be deployed as an add-on - has to do with avoiding detection and removal, which is malicious - and that's not only conjecture, they actually market themselves that way in places:

Komodia’s Watchdog

The Kernel protection watchdog is used to protect Komodia’s Redirector files from being deleted/modified, lsp from being uninstalled and also protects the main process will not be stopped.
A quick intro to NoSQL databases
The only thing that I could imagine is what also limits the size of ground animals - the ability to remove heat from the body. Volume grows with cube of radius, while surface area (and thus heat exchange area) grows only with square of radius - so the bigger you get, the more efficient your heat management mechanisms must be.
There are lots of companies offering those services, you just have to find one who balances a good price, good service and availability for when you really need them. Many of them could offer an integral package, but some others just offer an specialty at a reduced price. E.g. I have a quite specialised service where I review packet captures for you: http://www.netstrikeforce.com
We use ZenDesk as the communications interface (over HTTPS, not over email) due to the nature of the information exchanged.

On the other hand you may want to have a look at managed cloud service providers where you've got a bunch of quite tenured sysads available 24x7.
I really like the emphasis on doing only one course at a time. Good way to prevent getting overwhelmed. In the future, I wonder if it would be useful to have the option to set up multiple courses on a queued playlist, so it's more set-and-forget.
There is a flaw in the chart. For the three listed Lose cases, it clumps two distinct choices into one line item and counts them as such, and thus provides an incorrect count of the possibilities.

Moreover the basic argument is flawed. The knowledge of Monty has no barring on the knowledge of the contestant. If Monty simply presented you with three doors that you were to pick from, but opened an incorrect door before you choose your first door, then what would your odds be? The fact that he opens one after you choose does not matter. Monty has total knowledge of the setup and you still have zero.
I'd step carefully here, because you really don't want to accidentally mention semicolons...
this will put a lot of pressure on other employers, in particular small restaurants and the like who will need to match it or take whose left.
Does coffeescript have a formal spec? In languages with only one implementation it can be very hard to tell whether a feature is officially supported.
> "I don't want to give my CC details and/or my personal information to every merchant. This usually means I either buy from fewer merchants, or pay with bitcoin if allowed. Obviously, if the merchant is going to require my info anyway then it's pointless, so it depends."

This is the entire value of bitcoin in my opinion for the average CC holder in the US. I simply don't trust people with my details. It seems like I get a new CC every few months because of some data breach, which entails me having to change any subscription services etc. Anon transactions may be a big point for some, but you are entirely correct when I will more than likely be providing my address to people who I pay with bitcoin. However, they won't have my CC details. I think it will be a better "payment buffer" than paypal. Hopefully cheaper also.
Android AlarmManager tutorial
Can't recommend Transferwise enough! I've been using them at least once per month for two years now (GBP<->EUR) and they've been brilliant.
Many McGill Education Students Cannot Calculate an Average
Microsoft gives 100GB free OneDrive storage for 2 years; then charging $2/month
npm has a substantial amount of valuable automated tooling that assumes semver. It is the standard of that community.
This update is more recent:

http://highscalability.com/blog/2014/7/21/stackoverflow-upda...
Neat, but unfortunately the equivalent of CADR (second item in list: first-of-rest) is then FRST, which I think would just be too easy to misinterpret as meaning "first" when reading or writing code in a hurry.
I swear I must be the only person in the world that has no problems using submodules and I use them constantly. It puzzles me that people have such problems with it, which I guess illustrates how unreliable anecdotal evidence really is.

I've had detached head issues, but nothing that didn't take a minute or two to solve.

It might be that I'm using SourceTree exclusively, so maybe SourceTree is hiding away the painful bits or something.
I bought my mom a Chromebook under similar circumstances. She absolutely loves it, and had zero difficulty switching, whereas she was previously even uncomfortable turning laptops on or off.
Wow this is great. One request: pre-fill tomorrow's date for me, and/or let me type "tomorrow" in the date box.
I am hoping that there's a screen on both sides of the lid so that I can use it when it's shut.
Anything that isn't JavaScript is a rounding error. But that doesn't mean ClojureScript isn't viable: ~4000 Github stars, ~1200 subscribers to the mailing list, ~100 contributors, ~900 closed issues, ~170 daily lurkers on IRC, and probably the most comprehensive source mapping support of any compile to JavaScript language out there.

People use it happily in production. In the end that's all that really matters.

https://github.com/clojure/clojurescript/wiki/Companies-Usin...
Americans do that quite often. They use the schwa sound to represent/compress vowels.

The schwa sound is a slight uh. So America is pronounced uhMERIKuh, sounds like MERIK, then they link lots of words, so instead of BUS STOP, you will hear BUSTOP. Or instead of "I am going", You will hear, "I'm going", but the I will be compressed to an uh and liked to the m with a y sound. Iyam, "yuhM going"

Chances are that's what your cousin was doing but on a less subtle level.
Maybe semver needs a fourth "Vanity" version, that you can increment when it "feels right". i.e. Backbone 1.43.3.1
Seastar: an open-source C++ framework for high performance on modern hardware
I forget that 2012 is now 3 years old. My MacBook is a mid2012 non-retina MBP (with all the ports on it) and it's still absolutely fine but I know in the fashionable computer world, it's ancient.

Still fetches a good resale value though.
Structured Text: A cleaner way to deal with Rich Text
I agree with all your points.

One of my main gripes with Common Lisp is its complexity. When I started learning Lisp, I expected to find a beautiful and elegant language, one without a need for syntax. The way C is almost an elegant assembly. Maybe I should have tried Scheme instead.

Common Lisp is anything but elegant. Instead of a regular syntax, you get all these "mini-languages", like the format syntax e.g.

(format t "~{~a~^, ~}" '(1 2 3))
; prints out
; 1, 2, 3

This works fine for list, but not for vectors, which is a problem, since I needed vectors often (for random access).

The loop macro is also quite powerful and complicated. e.g.

(loop :for i :from 1 :to 1000 :collect (* i i))

will create a list of square of 1 to 1000. The loop macro can become really convoluted, not at all simple.

The fact that Common Lisp is a Lisp-2 makes treating functions as first-class as rather awkward. I could never remember when I needed to prepend a lambda with #'.

This article may be of interest http://xahlee.info/comp/Common_Lisp_quotations.html

I found much of the elegance I was expecting in Haskell. But maybe Scheme is a better lisp.
New accounts created to promote a site? Yeah, I'm staying away. A shame, because it does look interesting.
That seems unlikely, because for that to hold they also need to show that there is nothing better than relativity and QM to describe the known universe. Then, you are back to square one, finding a better unifying theory, or even worse, proving that no such theory exists.
It is broken, probably because HN.
The problem we had when trying to push semantic versioning of our app to the rest of the business internally was mostly the fact that breaking changes necessitated a change in the major version, but the business and marketing side wanted control of when a major version could be released.

I can see their point, because going from, for example, 1.1.0 to 2.0.0, a user might well expect lots of new features, or at least a significant UI change, and not just "it looks and does the same except for one or two breaking changes".

The compromise was to have an architect's vanity number at the front of the Semantic version, so VANITY.MAJOR.MINOR.PATCH
Ouch. "Resource Limit Is Reached. The website is temporarily unable to service your request as it exceeded resource limit. Please try again later."

I guess the Hacker News effect. I used to call it the Slashdot effect back in the days. :)
I've felt for quite a while that we could have had a 4 octet semver that allows for a first octet romantic version while the others are proper semver.

For example: io.js version 1.2.0.0 instead of 1.3.0.

It would still be machine readable, but allows a human component (romantic version) to precede.

Thoughts?
Why, I'm so glad you asked.

In short — true compatibility determined by the test suite, which tells you exactly how compatible two pieces of interdependent software are. We can automate this.

In long:

Compatibility between any two pieces of software — say an app, and its major dependency — is a rich, yet quantifiable thing. It consists of all of the functions you call (or the classes you use) in the dependency, and the way in which you use them. These uses should be covered by tests.

If a library with a large surface area of 100 functions releases a new version ... and that version changes 1 of the lesser-used functions to have different behavior for an edge case, then by SemVer's fiat, it's a Breaking Change, and you bump the version number, and 99.89% of the library users that won't see any trouble in their application won't get the "free" upgrade. That's silly.

In a sanely written library, general backwards-compatibility is always a priority, and it's entirely possible and likely that a well-written app will be able to upgrade without any problems through dozens of "breaking" major revisions. At that point, the "Semantic" version is just a false flag that would be better off ignored. That's silly.

We have robust test suites that tell us exactly what goes wrong, and how, and where. We just need a tool that provisionally upgrades your dependencies (without regard to version) — runs your tests, and tells you what works, and what needs to be updated. If all is well, all is well. The tool can (safely! with assurances!) write the new version in your package.json (or what have you), and you can go merrily on your way. If a test fails, you update your code, or the tool can write into your package.json exactly the version ranges your current code is compatible with.

Why would you ever let a third party — no matter how well intentioned — remotely break your app?

Versions can go back to being for people, not for robots.
I agree, it was a mis-step. But they realized their mistake and fixed it. Windows 10 has no such problems.