skysight-inc/HackerNews huggingface dataset:
"It intrigues me how , NSA pulls the best of the hackers To accomplish this task and who is behind the architecture and direction of this ?"

They don't need to be the best of the hackers.

The fascist(collusion between private companies and State) laws that were created after 11-9 let them have access to the source code of hardware and software.

With source code, doing this is not that hard. I believe most of them do not need to be stars.

I don't know about the specific NSA, but normally secret agencies have lots of ways of finding who is good at hacking-cracking(the stars). For example who is behind the release of the crack to a software protection.

As simple as "recording the web" for unique documents upload, and analyzing which dark web page was the first to upload the document. Follow all the proxies and who is really behind is not that hard if you have resources.

Once you know who is the target you want to hire you study her with social connections in facebook-twitter-whatsapp- gmail-smartphone, very easy for the NSA.

You study her weaknesses, she probably needs money, you give her(first one's is free, so you give her lots of money for her first easy job so she believes she could be rich easily). She is lonely, you give her a partner. Needs sex? And so on.

The rest is easy, once they take the bait maintaining them hooked requires them much less energy(money, resources or coercion). They can destroy you life with the pinky finger.

Life is good if you do exactly what they ask you. If your vice is thinking for yourself or ethical scruples(and most hackers have those vices) your life could be hell.

If you help them, you are a patriot, if you don't, you are a traitor. You are with me or against me is their favorite motto.

Stars know personally other stars, and they know who is good at it at a glance. So you make one of her jobs to hire other hackers crackers.
Guarding patrons' library activities is considered a core value of the profession, written into the ALA's code of ethics: "We protect each library user's right to privacy and confidentiality with respect to information sought or received and resources consulted, borrowed, acquired or transmitted."

Over the years, the U.S. government has tested the limits of how far librarians will go to defend that code. Near the end of the Cold War, FBI agents asked New York City librarians to watch for patrons who might be diplomats from foreign hostile powers trying to recruit intelligence agents or gathering intelligence.

http://boingboing.net/2014/10/12/librarians-on-the-vanguard-...

http://www.washingtonpost.com/blogs/the-switch/wp/2014/10/03...
Compare OS X to Windows. Embarrassing. :(
Does anyone have more information? I lived in Galway for several years and it sounds interesting.

> recover land previously used for growing and harvesting non-native trees and restore native trees to Derrydonnell Forest

Sad to hear that. There are not that many trees in Ireland.
I actually thought that, but you'd still end up with things like 2014.12-r7 because you end up creating different versions when you backport fixes.
I did read that somewhere, but I'd forgotten.. Good catch!

Hardware write protection is harder to find than you think..
It's great that people are cognizant of the value we _really_ provide to a company! We improve your product tremendously - we're not just code monkeys! Now that we're on the same page, can we also get a salary that is more in-line with the value we provide?
Shouldn't it work both ways then? If you're not culpable for offenses, why are you proud of achievments that you have nothing to do with?
That is the plan (it will be Internet-connected).
Some projects also have terrible project layouts. I have to poke around for several minutes just to find the source folder.
Still waiting for the Apple datacenter in the Swiss Alps.
There are some de-militarized Bunkers available.
And it's cold as it gets up at 3000m...
it's great to find like-minded people here. We start our day with meditation. We form habits. I have something to share about meditation with regards to the issues you mentioned. Please let me know if you find this helpful.

Meditation is a mind training. The goal of this training is to be mindful in every aspect of our lives. Before I elaborate on this, I would like to touch on a few other key words such as dwelling, wandering, and tug of war.

Our mind wanders all the time. For example, I might be programming in front of my computer and yet my mind wandered to think about e.g. pornography. Here I see that our mind is pulled to temptation.

Our mind dwells on issues all the time. For example, my partner might accuse me of being indecisive. And I feel unjust about this statement. I'm angry and upset about this matter. I'm angry and upset because my mind dwells on it. My mind keeps thinking about it. Then when I'm hungry all I think about is finding food to eat and I consume the food. Following this, I might realised that I am no longer angry and upset. Why? It's because our mind doesn't dwell on the issue anymore. Instead our mind focus on finding food, and consuming it.

According to my Bhante, Buddha notes that our mind is like a monkey trying to grab on to branches and branches. I hope I'm making sense here, because I'm also learning to be mindful through the practice of meditation. I am still learning. On a personal note, I try to meditate every morning right after waking up. And every night before turning in. I try to meditate for 10 mins each session.

Going back to my point on the goal of meditation. The goal is to be mindful in every aspect of our lives. Ultimately, we should see ourselves bringing our mind to the present/awareness (that means not wandering/dwelling like monkey grabbing branches) in a blink of an eye or a snap of a finger. For example, if I am driving, I should focus on driving and not wander/dwell on something else. If my mind wandered I should be able to bring it back to my awareness that I'm driving on the road in a blink of an eye.

===

In my opinion, to iron out the issues you're facing with meditation I recommend that you seek a mentor/teacher. For me, I learnt a lot from and am still learning from my Bhante. He is truly a great teacher. PM me anytime if you have any thing to clarify. jek.bao.choo@gmail.com
> Some of the new features of ES6 - Symbols, proxies, Object.observe, et cetera - seem to make it downright easier to write even more confusing code.

Actually, they're things that actual users of javascript have been asking for (and implementing hacked-up solutions for) for a long time. There's a reason Coffeescript is often referred to as "a better javascript" and Typescript is considered its own thing.

Javascript is a dynamic language, and will never make the transition to a static one. Its users don't want a static language - the people who want a static language are using things like TypeScript.
So? Listed company, locations in TX.

http://www.gemalto.com/companyinfo/offices-locator
The article doesn't really do much more than restate Docker's own guide:
> https://github.com/docker/docker/blob/master/docs/sources/ar...

(Linked in the article)

At the very least, you could add value:
- How to keep this daemon running between reboots
- How to use this tip with boot2docker
- Is this the equivalent to how vagrant caches base images?
- etc.
KDE Wallet seems fine. It has integration with everything including Chrome.
If this guy hadn't thought he was lucky, he would have resigned from Disney early.

So maybe Luck is a belief... and belief is what decisions are made of, good and bad.
One-to-one relationships and subresources in REST APIs
Support would be good. I imagine a lot of people use their ssh config like I do; as a directory of servers that I have various scripts work with.
OpenPassword's Blimey library supports read and write for the Agile Keychain format, written in Python. The GUI is still an early prototype.

https://github.com/openpassword/blimey
EV charging stations would be nice too.
I guess it really comes down to who has the last say. If it's Obama personally then I can see it happening. Being willing to pardon someone who has done you harm because it's the right thing to do is great way to build a nice legacy, especially since you're retiring anyway and it's no longer your problem.
Nah, they just don't have customers. If Seagate's flasher breaks your entire RAID array, you call Seagate support. If the NSA's flasher does, you don't call the NSA.
I skimmed the source and didn't see anything regarding leader election. Am I missing something or is this implementation encapsulating some of the underlying terminology/analogies traditionally used by Raft?
Everyone likes to works on their own ideas than others.

Maybe you can just make your project better,
and developer will come themselves.
Good points. For an architect, maintaining your knowledge set is important so that the correct decision is made. However, I think it would be done in a contextual manner. Ie, if you operate in the world where Cobol is main technology driver, would you have to continue to keep up your knowledge?
Advanced Two Way Binding for React
No, you are probably the first person in the world to get offended when someone made a joke about the subject of passionate debates.
Is the Torah in the public domain
Enabling JSON Document Stores in Relational Systems (2013) [pdf]
Can people outside the USA apply for jobs in silicon based startups?
I have seen alot of job openings through hackernews and i wanted to ask if they accept applications from people outside the states.If yes what is expected of the candidate?
I've always read the expression backwards: With enough eyeballs, the shallow bugs will be found.

Things like spelling errors in print statements, comments etc gets corrected. By off by one errors, use after free and all kinds of subtle logical problems that only manifests once in a while and after long execution will require a focused effort to find (and more and more, good tools.) Daniels description matches this sentiment.
I studied math in Slovenia. There were about as many female as there were male students. In financial mathematics (and e.g. pharmacy, IIRC), there were more women than men. On the other hand, in computing and physics there were more men than women.

I am very inclined to think this is mainly a matter of preference. On the other hand, maybe the situation in the US is completely different, and Slovenia is just so much more equal when it comes to sex (e.g. the unadjusted gender wage gap is only 2.5% for Slovenia).
You must have goals, but "I'm 40 and I've achieved all I wanted for my life" is the least desirable outcome of your life. Because life doesn't end at 40, and you'll feel a deep void... Stay in motion, don't plan for a plateau in your life.
Could the guys on this thread please stop it with the "pipeline" discussion?! Few women actually cite that to be an issue. It's distracting. Listen more, talk less.
When scanning through the list of CAs on my machine, so many of them sound like unknown entities who I have no idea whether or not to trust. So it's difficult deciding whether I should remove any of them or not.

What would really help in this would be to know if any of these CAs have signed certificates for popular websites. Rightly or wrongly, I'd trust a CA who has certificates in active use by many sites over an obscure foreign (or not?) government CA who doesn't seem to sign any certificates that I'd normally interact with. After all, if suddenly one day ycombinator.com's site appears to be now signed by an obscure CA, I should probably be worried.

So, is there any way to map a given CA to the subset of the top 1000/10000/whatever number of websites that have certificates signed by it? Surely some webcrawlers must have indexed a large number of site certificates and have the data to build such a database.
Facebook's directory – download
Leaving Zombieland – Guide to human-friendly startup
> Note that as of this release, jsdom no longer works with Node.js™, and instead requires io.js. You are still welcome to install a release in the 3.x series if you are stuck on legacy technology like Node.js™.

Ouch.

I'm glad there was a semver update, but I imagine projects with more than a few dependencies will start feeling the effects of this fragmentation soon...
codechef is pretty good for this.
Uhh, are you aware of what the Obama administration was doing to James Risen, one of the greatest investigative journalists from the New York Times?

They have no problems going after very, very big name journalists with huge organizations behind them.
As others have suggested, the best "standardised regex" solution would just be something like:

/.*@.*/

Some people aren't happy with this because it allows invalid emails to be entered. But the alternative - such as what's being attempted here - is a nightmare!

Even if there was a standardised regex for all emails, which would not break when new TLDs are released, or new unicode characters are supported, or whatever, there would still be no guarantee that someemailaddress@domain.com is actually valid!

Your best bet is to simply allow users to enter anything (with perhaps some minor regex check like I did above), perhaps ask them to enter it twice, and perhaps send an account validation email.
I've been using open source for ages, and have rarely taken the time to look at the source.

But, at least its there.

I sometimes wish there wasn't such motivation to hack software. If we were all working towards a common good (in my case I'd like to see us doing a bit of space exploration, renewable energy tech etc), and we wouldn't need to exploit stuff.

But, we're humans. Greedy little scumbags hehe, always looking for the short term gain. All varying forms of politicians.
Here is the list as presented by Apple at their website:
http://support.apple.com/en-us/HT202858
If you want a more extended summary of ES6 features, Axel Rauschmayer's “Using ECMAScript 6 today” is pretty good: https://speakerdeck.com/rauschma/using-ecmascript-6-today
Back in the day, I had Amy Hoy's Rails cheatsheet printed out next to my work desk, and I referred to it pretty constantly for the first few weeks. ~6 years later all of the common stuff is second-nature and the esoteric stuff is either a) somewhere in one of my codebases or b) on Google.
I think most of the "news" is slanted to get people to do or think things. It's only in lesser visited corners of knowledge wrapped up in books or specialized study that the persuasion background noise dies down and real understanding is easier to piece together.

I avoid a lot of mass media (e.g TV) because if I absorb and process the same information everyone else does I'll think thoughts that are similar to everyone else. I guess that's good and bad. It's helpful to at least be aware of what everyone else is thinking.
http://w3techs.com/technologies/overview/ssl_certificate/all
> A lot of people think 10nm is as far as it gets for our existing silicon tech

I'm not really doubting this assertion, but I reckon I've heard this every 5 years about different scales, and then somebody sneezes some cobalt dust on a wafer and off we go again.

What makes the lower bound 10nm rather than, say 6 or 4nm? Or are you saying that 10nm is not a lower bound, but rather the start of a performance plateau?
There's an open bug report about adding the Federal Common Policy CA to Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=478418
06:00 - Alarm goes off & hit snooze
06:09 - Alarm goes off again. Hit snooze again.
06:18 - Alarm goes off again. OK this is ridiculous. I drag myself out of bed and get ready to go to the gym.
06:30 - In the gym for a 60 min workout.
07:40 - Back home & jump straight into the shower.
08:00 - Kiss wife goodbye & off to work
08:45 - Arrive at the office & Prepare breakfast. Read the news.
09:30 - Think about strategy for the year and quarter. Reassess priorities & prepare my to do list for the day.
09:45 - Start working
The OSX trusted root can be viewed with the Keychain Access tool. I've removed a lot of CAs I don't trust.

There is also (at least one) a project that tracks changes in trust stores in OS:es, Java, browsers:

https://github.com/kirei/catt

(I am one of the authors.)
A surprisingly large amount of code still works. If your code is statically linked the syscalls have not changed, due to Linux's backwards compatibility guarantees, and if it was dynamically linked against glibc the glibc compat may work, or you can just use the old glibc and linker.

How much useful code there is that cant be recompiled I dont know, but I am sure people have some, and they probably dont want to run it in an old unsupported distro.
This is not news. The CA system is broken by design. It's been this way from the start. Not just on OSX but on all platforms.

Your browser blindly trusts a list of a few hundred CA's, any of which can impersonate any SSL site you visit at any time (except for the chosen few that use certificate pinning)

Many of the biggest CA's (e.g. Verisign) are under government control.
For Go you don't. I found it quite awesome when I could cross-compile something for my raspberry-pi from a Windows PC.
Internet Explorer has stopped working

Windows is checking for a solution to the problem...

[||||||||||||||||||||||||||||||||||||||||||||||||||]

[ Cancel ]
Presumably some of the people writing these firmwares are reading hacker news. I'm pretty sad that extremely competent software people are building these things for the government - just following orders so to speak.

They must know that it's wrong? Or do they buy the government arguments about the balance between privacy and security; maybe are they just young, talented and excited to be doing something "legally" that most people would be put in jail for?

What to do when governments become untrustworthy actors to such an extent?
Most of the certs listed in the blog post are in Mozilla's trust store[1] and in Windows trust store[2] as well.

[1] https://www.mozilla.org/en-US/about/governance/policies/secu...

[2] (PDF) http://download.microsoft.com/download/1/5/7/157B29AB-F890-4...
Maybe Google's certificate transparency is what you are looking for?
http://www.certificate-transparency.org

A more practical approach: Disable all root certificates, then enable them one by one as you are getting browser warnings.
You will be able to find developers this way and generate sign ups.

I do not know enough about your business to say whether or not you will be able to do so in a cost effective way.
Coillte, the state forest management company, discontinued some less critical operations during the economic crisis. Looking at their website, this was never a particularly large-scale operation.
Targeted: Simple email testing
You have to trust the vendor's interest in making a profit. Nothing wrong with that :-)

Closed source (usually) gives you Ts&Cs, support model and some level of guarantee of fitness for purpose which is why we pay to use it. This is not to say that there aren't bugs that seem to take forever to fix, but usually that is not the case at least not when there is a risk of the product becoming unsalable.

Of course there are closed source software or appliances that just are not worth their cost because they fail to mitigate the risks of having us trust what we cannot see, but these usually fail to gain any significant market share.
Google is the latest victim to hacker group Lizard Squad in Vietnam cyber attack
Despite being big and different and having developed some grumpy old forum symptoms, HN is still smart. As such, I think we have a great example of memetic churn and progression here. We start with manifesto-ey essays trying to cut through some habitual thinking and paradigms. The new fundraising model. Bootstrapping. Web based SAAS is an ocean with a lot of paradigm shifts, the tech options, the business models, the development cycle. Those get people excited and defensive and there's fun to be had arguing it out. There's all sorts of pedantic arguing in the fringes pointing out that this things not strictly true. Then there are manifesto busting pieces. Case studies and anecdotes about manifesto-ed approaches going terribly wrong.

I'm not down on this process, it's progress.

Anyway, I think this is a part of it. "Enough eyeballs" is a big hairy hefty concept, part of the big hairy open sourced concept. No one could have predicted open source. The cultural and economic (BTW, economy is a big part part of culture) machinations of open source add up to something big and impressive and unpredictable. "Enough eyeballs" is a (somewhat squishy) big concept trying to make sense of it. This is like trying to boil down 'platform wars' or 'platform openness' into slogans and roes of thumb. You may come up with an interesting, informative and useful way of looking at things. But, underneath it is a big harry tangle of machinations, circumstances and ungodly complexity. Hence the need for rules of thumb and manifestos in the first place.

This post is part of the more mature stage. The audience is expected to be on Linus' side already and the novel part is discovering that the rule of thumb is isn't working in all cases. Diging into the machinations. Who are all these eyeballs? What are these bugs? Are some types of eyeballs more or less effective against some bugs?

I'm not sure where I'm going with this… be excellent to each other?
Why they didn't choose colder countries?

(1) Ambient temperature is not very important. In a data center, you want to cool large arrays of small machines -- for that purpose, whether it's cold or hot outside the building doesn't matter very much. The 10-degree difference in outside air temperature is basically irrelevant you're trying to stop components from overheating.

(2) If you want places that are substantially colder, then you're looking at places that are far more "off-grid" i.e. remote. That may create substantial infrastructural difficulties (internet access, hardware supply, electrical supply, etc.). There's a reason why Google hasn't put all their datacenters on Antarctica.

(3) Denmark and Ireland already have good environmentally sustainable energy sources in place, more so than many other alternative locations. This move is about environmental policy.
Similarly (but less directly), the sympathetic treatment given in the 2011 Richard Linklater film "Bernie" is believed by some to have been instrumental in the release of a convicted murderer from his life sentence.

The film is great, incidentally.

http://en.wikipedia.org/wiki/Bernie_Tiede
http://en.wikipedia.org/wiki/Bernie_(2011_film)
Thanks for the offer. I'm completely pro unix! The problem is more with presenting this in an enterprise palatable way - VMs are a bit of a grey area.
This is what I don't get. People seem to genuinely think ego was involved. I was just blown away by how clueless the rep seemed (at first at least) about what I was asking. The condescension did the rest and I lost it.
A couple years back I got fast tracked for the first time through a TSA line ( France -> Chicago ). Person who was sitting next to me in the flight was just as American as I was but hey her skin was dark (4th generation Indian parents or something?) so she got pulled to the side.

Based off of similar discussions I've had with other people on flights like this, a really good first approximation of the stopping time is "color of skin."
Not necessarily. There is a lot of anecdotal theories that women care more about how they are perceived by their peers. There might also be some research (a minute of Googling brought up this, although I'm quite sceptical of most sociological/psychological research).

> The researchers concluded that women seek to regain a sense of belonging whereas men are more interested in regaining self-esteem.

http://en.wikipedia.org/wiki/Social_rejection#Ball_toss_.2F_...
> Sidenote: A Windows 7 PC has 38 Certificate Authority certificates installed. My Mac OS X Yosemite has 217 Certificate Authority certificates installed.

Windows 7 was released 5 years ago. Might be more relevant to compare to Windows 10 given that Yosemite is updated quite regularly.
Wouldn't that be done by the underlying Raft implementation (goraft)?