skysight-inc/HackerNews huggingface dataset:
>Every day we're bombarded with stories and images from the developing world of men, women and children trying to make a living.

I bet you are. I've actually lived much of my life in countries you would consider 'poor'. There is plenty of prejudice to go around.

>Look at the tech sectors in Europe and India and Asia--they don't have all these hang-ups and prejudices and misconceptions about how women's brains 'work differently' or what the biological differences might be or all that pseudo-scientific bull-crap.

Sounds like you have a lot of the world left to see.
I think every SSD I've owned, from three manufacturers, recommended firmware updates. Not nearly as rare as such updates were ten years ago.
I like the practice bit. And if you enjoy something, and live it every day and do it all the time, you'll get good at it.

If you hate something, and you have to force yourself to do it, I wouldn't bother, and I'd look for something else to do.

That, and our whole system of fractional reserve banking is deeply flawed and is killing us, to the benefit of a greedy few.
I would run some underground conduit to a box in the ground by the road with ~10m of extra extension cable in the box.
They're all in computer vision, machine learning, ect... I doubt they helped for more than the visual search engine.
Keepass 2.x handles merges for you just fine. The mono version of Keepass 2.x is ugly and a little clunky compared to KeepassX or the windows version of 2.x, but it's good enough.
> One risk of the integrated architect model is that an architect can get preoccupied by implementation.

Nailed it. In the same way that ex-engineers often struggle to let go of the code when they switch into management, I've seen the same thing happen to those switching to architect roles. They find it hard to step back and trust others to take care of the implementation, and this often leads to the worse kind of micro-management tendencies manifesting early on in this transition period.

The best architect I ever worked with was a terrible programmer (by his own admission, and I can confirm because I worked on fixing his code). But he was able to bring to bare tremendous technical improvements on any project he worked on. It's a different mindset, more focused on the design of the implementation rather than the actualization, and it's really not suited for every ex-engineer (just like management).
Terms of use, Rights you license[1] (emphasis mine)

"In order for us to provide you with our file transfer service we require you to grant us licences in respect of the files
you wish to transfer. Specifically, when you upload a file to our site, you grant us a perpetual, worldwide, nonexclusive,
royalty-free, transferable licence to use, reproduce, distribute, and perform that file to enable us to
transfer and store your file; and the right to sublicense this right to third parties. We claim no ownership or
knowledge of content of your files as we only require what is necessary to facilitate your file transfer."

Sounds sketchy to me

[1] https://poetic.io/legal/poetic_terms_of_service.pdf
Given developers can usually narrow it down after a bit of trial and error I see no reason to obfuscate this. By its nature all the source is available to anyone asking, so let's just stop making CORS debugging such a pain.
Not much likely, but I think the idea that Snowden was just the guy who pulled the switch and not the one who caused the fire might be gaining ground. That might bring a change ultimately in to how people view things. Then, at some point, a political figure might be ready to exploit that view, for gaining more votes and there you have it... Democracy at it's best ;-)
This law mostly applies to usability bugs. If a driver isn't working, somebody is going to notice. Security bugs on the other hand are often invisible during all forms of standard use. Heartbleed for example will never disrupt the user experience. The only way to find that problem is to be actively looking for it.

Generally speaking, 'eyeballs' aren't actively looking for problems. They're passively using software and noticing when something seems out of place. Many security bugs will never seem out of place, and are only discoverable when someone is intentionally probing for security bugs.
"Problems on the ground" can include things like how much sun the location gets, which direction it comes from, how cold the place is in winter and how many feet of snow it averages. An architect who ignores all these local details will be lucky to design a building that lasts a year.
>Browser vendors need to rethink the mostly blind eye they've been turning toward corporate DPI and silent MITM.

This kind of inspection is becoming more and more important for companies with every very public and expensive hack that occurs. Google, Microsoft and Apple all produce closed source software that they do not want leaked. They all have secrets and embarrassing private issues that have happened. I doubt you'll see cooperation from them in removing the ability to inspect traffic that leaves their networks or machines.

>Firefox is still one of the hardest-to-configure parts of the software for non-technical users

I'd agree that it's difficult for a non-technical user to configure, but that lack of easier configurability is a sign that Mozilla isn't really beholden to these organizations. If they were they'd just use the standard OS CA certificate stores like Safari, Chrome and Internet Explorer do.

>There may be a legal difference between corporate DPI and Privdog, but we should stop pretending that there's a huge technical or ethical distinction between Privdog and browser vendors turning a blind eye to silent DPI against someone who does not get a say in it, and often does not even know about it.

I agree, but I also recognize the importance of this feature to companies, big or small. While Chrome and Internet Explorer both have consumer and enterprise versions/configurations for their browsers, they could split security features with the user in mind too. I'd say Safari could do more in general but I feel like Apple has such a love/hate relationship with enterprise customers that it would be hit or miss in execution.
My average morning (I work as a UX architect at a creative agency in London):

7:00 - Wake up light gradually fades in
7:30 - Alarm goes off
if I didn't already wake up by now, start getting dressed
7:31 - Start preparing coffee (grind beans, prepare moka pot)
7:35 - Finish getting dressed, wake up snoozing wife
7:40 - Have coffee with some light breakfast
8:00 - Kiss wife as she goes to work
8:05 - Quick dishes after breakfast
Good time to reflect or listen to podcasts etc.
8:20 - Pack bag, coat etc. to leave
8:25 - Walk to work
8:50 - Arrive at work, plunder breakfast buffet if still hungry
9:00 - Wake up over coffee and email at my desk

On some mornings I'll naturally wake up at 7:00 and start everything earlier. On other mornings we'll reverse the roles and I snooze while my wife gets up before (but making coffee is still my job).
I do use that, but I like having the fields pre-filled, like Firefox does, so I can just press login.
Government-Linked Certificate Authorities in OS X
Ask HN: How do you memorize the tons of commands related to rails?
I am currently learning rails. I used to programming in .NET and Java ecosystem and I got good GUI tools/IDEs such as VS and Eclipse.
However, when I had come into rails, I found there are tons of commands are needed to memorize before you can use rails efficiently, e.g. rvm commands related to gemsets, rails commands for generating controller and models, rake commands for managing databases, etc. I found it's a bit difficult for me. Do you guys have any tricks or tools for this hard job?
A Market Lesson for Photo Storage Startups
Not to worry. Soon you'll be able to buy a Librem laptop with a CPU that accepts unsigned microcode updates as well.
We're not of the opposite opinion then ;-) I think Silver is also what HaXe should have been!
The Spy Cables: A glimpse into the world of espionage
Betalist refused to feature my sex-tech startup as it's “Explicit” – Thoughts?
Looking for some advice! I'm building Blindfold Club http://blindfold.club/ - We deliver monthly audio foreplay scenarios that give couples new ideas to try in the bedroom.

Betalist recently refused to feature the startup because, quoting Marc, "I'm not comfortable featuring a product that's as explicit as yours."

I've copied in the emails I received from Marc for reference. I hope it possibly helps future Sex Tech companies understand some of the challenges they might face launching their products.

But what do you think? I guess I'm going to be hitting hurdles like this constantly as I push the business forward. Do you think the name conjures up explicit thoughts that are inappropriate to most people?

I don't blame Marc from Betalist for not featuring us. Ultimately it's his decision and his company! But it's a shame that he decided not to share it because he was worried about his audience retweeting it + viewing it in the office VS the value of sharing a legit startup try to make peoples lives just a little better. Unfortunately, that's the state of the world right now. Even though sex is universal, our society is atrociously bad at having open and honest discussions about it. It scares and offends. It's an emotional topic!

What do you think?

I'd love feedback on the name..? I'm also using 'Pillow Talk' for another project - maybe this is a softer and more approachable name than Blindfold Club?

Any insights / thoughts / ideas greatly appreciated!
—
Hi Darren,

Unfortunately I won't be able to feature Blindfold Club on the site. Although we're relatively flexible in what we allow on the site, I'm not comfortable featuring a product that's as explicit as yours.

This is not a value judgement, but rather a practical consideration. Many people in our audience read the website at their office, and some people even automatically share the startups we feature. I feel like many wouldn't feel comfortable doing that with Blindfold Club hence us choosing not to feature it.

I hope you understand. I've issued a full refund which should appear on your bank statement within 5-10 business days depending on your bank.

Marc

—

Hi Darren,

The primary reason for me not feeling comfortable featuring it, is because we have a large group of people automatically retweeting our posts. This means we don’t just have to consider what WE find appropriate, but also what we believe our audience would feel appropriate sharing with their followers.

I realise how frustrating it must be to have totally legit product many people could benefit from and then not getting the visibility you deserve due to an (outdated) taboo, but I hope you also understand where I’m coming from.

I’m sure you’ll find plenty of other publications that are happy to feature you though (have you considered podcasts sponsorships including an audio fragment?). Wish you the best of luck and if there’s anything else I can help you with don’t hesitate to let me know.

Marc
Getting brigaded by left-wing extremists probably painting me as a racist unknown to them of my Shia kurd background. The same people getting butchered by ISIS, same ISIS (and their apologists) who constantly retweet Glenn on Twitter.

Islamic Arab imperialism is never spoken of. Just the evil 'west'.

12 year sold as ISIS slave, she didn't know what rape meant only that she woke up bleeding http://www.nbcnews.com/nightly-news/video/yazidi-women-sold-...

One ‘slave' tried to kill herself 7 times. Some of the girls isis rapes & enslaves are 8. http://www.huffingtonpost.com/2015/02/10/isis-women-angelina...

Yazidi girls, aged 12 & 19, bought & sold, raped & beaten for months by their ISIS captors http://www.nbcnews.com/watch/nbc-news/yazidi-woman-isis-capt...

ISIS militants prefer the young female "slaves," according to those who made it out. http://www.amnestyusa.org/research/reports/escape-from-hell-...

Syria activists claim that kidnapped Yazidi women are frequently victimized with non-consensual, brutalizing rape: http://www.raqqa-sl.com/en/?p=589

Kurdish Yezidi girls speak of how ISIS raped & sold girls as young as 10 years; youtube.com/watch?v=pFB882…
FYI : Heroku and dropbox are not big corps.
Where to look for open source project contributors these days
I'm working on a little open source OS X app (http://www.hammerspoon.org/) and right now I have more ideas than hours, so I'm trying to attract more developers to help out.

What I'm wondering, is, are there any resources the HN community knows of, where developers are looking for projects that could use a hand (maybe students looking to exchange their copious spare time for a richer commit history in their GitHub stats?)

(Edit: I mean, obviously aside from just letting people discover the project and decide to help out organically, which is usually the best way long-term, I'm just attempting to give the project a shot in the arm)
Very cool. First thought was: let's build a mobile lockpicker with a raspberry pi, but it doesn't have a firewire port :)
Thanks guys, I'm super happy to discuss the terms of use so I can work on this with the lawyer who wrote the documents.

So, the "sublicense this right to third parties" I think is because we are storing the files on S3. I see, this phrase doesn't look good .. do you think it would be better to explain sublicense to amazon for the storage, or even better get rid of this ?

About the "perpetual", if would be "10 days" , which is the expiration time for every transfer, would it better?

Cheers
I can't understand how someone who understands CAs enough to build a dynamic one doesn't also understand that you should build the CA certificate and private key dynamically at the point of installation, not when you compile. That would have changed these publicly embarrassing situations from dangerous to simply controversial.

Edit: And they should know that it needs to be smart enough to deal with an invalid certificate appropriately, regardless of Subject Alternative Names or any other extensions.
I also made a Chrome extension for 1Password on Linux a while back: https://github.com/robbiev/multipass-chrome

The native component is written in Go.
Sounds good enough to me, there is also Pass [1] if you want something that is just slightly more heavy weight.

[1]: http://www.passwordstore.org/
You can format the time like this:

https://www.youtube.com/watch?v=dhDpncTDDvI#t=14m52s
I doubt the investors really knew about the MITM attacks with the universal private key either. I think Superfish and Komodia did something bad, but the buck should stop with them.
Downloads are so slow that I decided to host it on my own server, no bandwidth limit, should be faster. Enjoy!

http://www.pilgrimbreak.com/citizenfour-hd-high-speed-downlo...
Ask HN: Wich of the current AR Glasses would you consider to start developing
Hi everyone. I want to start learning to developmet on Augmented Reality Glasses so I'm considering to buy the device first to start playing with it. I'm interested in full-angle-of-vision glasses, not cards-in-frame things like Google Glass, because one of my businesscases of interest is remote instruction.

Last week Sony Glasses were announced. They seem pretty basic to me in the visual section, but more stylish than Epson Moverio and other alternatives.

Features like colour or screen resolution are not critical to me, better times will come... I think developer API and manufacturer support and continuity are much more important as developer.

Which of the current AR Glasses do you consider is more suitable to start learning?

Thanks and regards.
In situations like that, much like in real life, it's prudent to have evidence (comments, emails, server logs, whatever) to protect your reputation and show the facts, but that isn't necessarily the same as having these things aired publicly.
Agreed! I uploaded the movie on my own server with a very short post to explain what it's all about. Download should be quite fast depending on your location.

http://www.pilgrimbreak.com/citizenfour-hd-high-speed-downlo...
Domain name suggestion tools
The question is what do the brain behind the eyeballs do?

Do they in fact register the bug, ignore it, file a report, solve it? Without source code we are left to trust the vendor that they actually fins and solve bugs. The vendor and/or its staff might be under pressure to leave bugs in place. We just don't know.
usually only in the first weeks of a project

If you assume these are only needed in the first weeks of a project then it sounds like the classic waterfall fallacy. Preserving architectural consistency and evolving tech choices and adapting dev processes is a continuous process as a project grows and its easy to generate waste by front-loading too much of this.

My feedback on the list is that some of these qualities like handling risk, reuse, company/customer knowledge etc. should be expected of all senior devs. Other items like decision making, design diagrams, identifying standards etc. should be treated as tasks just like design, development and testing. They will regularly arise during a project and can be delegated across the team.

I would consolidate governance in the lead dev role - they are where the buck stops for all decisions, quality, consistency, delivery etc. but they do this by leading a team and delegating unlike an architect role that ring-fences categories of task for themselves.

Hope that helps!
I actually found the opposite when I visited the US for the first time last year. I was slightly nervous about encountering the TSA as I'd read some absolute horror stories online (many through Hacker News). But I've got to say, the TSA agents I encountered were incredibly friendly and helpful, even chatting and joking with my wife and I^.

Of course they did break into my suit case and destroy my pad lock but hey ho, at least they left me a friendly note.

Anyway I think it's important that both sides of the coin are represented here, people are more likely to write about negative experiences in general.

^We were on honeymoon in Orlando which probably accounts for the generally positive reception :)
> Quebec outperforms other Canadian provinces in most math rankings

Given what we have learned here today, I'm wondering if Quebec just has more questions on their exam :P
It probably isn't a bad idea to get a job programming. Depends on the bugs though, and, well, working for free. I'd like to think that won't be the only way to get a job in programming.

I hate this focus on "Show me your Github account etc". Some people work commercial jobs where all their work is done for private companies - the lack of open source work has absolutely no bearing on how good you are. If you choose to do open source work, well, I applaud that, but this kind of thing annoys me.
My favorite management failures
Good work Apple.

To give some balance to a press release...

I wonder what all that tax avoided money could have bought in society, and what the 3 billion 30% cut they took from developers could have done for those developers. Better apps?

Compared to other electronic manufacturers Apple products do seem to have a much longer life. Lots of people seem to use second hand Apple phones, and laptops... but not so much for other brands.

I wonder why they didn't choose colder countries? Both Denmark and Ireland do have some pretty cold parts. Since cooling is the main energy use, choosing colder countries over ones where they pay less tax would have been a better choice for the environment.

Athenry, Ireland is as far west in Europe as you can go. Meaning it is as far away from most Europeans as possible. But I guess closer to the USA. I wonder about why they chose there if they want to serve their communities best.

Viborg, Denmark makes more sense from a power generation point of view. However, since the power generation is inland it is wasting land which could be used for people and food.
Headcount.

Given enough headcount all problems are solved in line with the time plan is the enterprise version of the law. With enough engineers, you can just treat them as replaceable units, just numbers in an Excel sheet. Move them around as needed to meet staffing requirements, or resource allocation requests as they are often called.

(No, I'm not cynic at all.)
- Does releasing early and often lead to more (non-shallow) eyeballs? Not really: see Heartbleed or the OpenSSL RNG bug in Debian.

The existence of those bugs doesn't disprove the claim. You'd need to show that software that is not released early and often doesn't have (even) fewer eyeballs.
> In the same way that ex-engineers often struggle to let go of the code when they switch into management, I've seen the same thing happen to those switching to architect roles

It's not always a choice; where I worked, as architects we sometimes had to put on our hero-capes and wade into code to save the day.

Saying "that's an implementation issue" doesn't work when the implementers don't have the savvy to make it work. Or, worse, throw up their hands and say it's impossible because of the unreasonable demands of those ivory-tower architects . Can't we just save the credit card details to a local database instead of all that integration stuff?

At the end of the project, if it works it's despite the architects and if it fails it's due to the architects... always in the spotlight but never in the limelight.
Very cool. There's a video on the painting in the excellent Smarthistory collection:

https://www.khanacademy.org/humanities/renaissance-reformati...
Godaddy expiring domains in abnormal way
Is email broken?
This is one of the things I really love about PowerShell. Import, manipulation and export of formatted raw data like CSV is dead simple.
Sanderson's law is what I feel. Thanks for pointing it out.

I really enjoyed Karl Schroeders Ventus where the population saw technology as magic:
http://en.wikipedia.org/wiki/Ventus

Nuttails Suffiently Advanced Technology is also a good example:
http://www.amazon.com/Sufficiently-Advanced-Technology-Inver...
Great name! GPL too.

"The world’s forensics experts, governments and three-letter acronym agencies are using similar tools already, so why not?"

I'm not sure I understand that reasoning, but whatever.
I agree with the open source point (but not that it would solve everything - see "Trusting trust"), but shipping with the backdoor by default is is problematic for the attackers, because it makes it public.
"Because in reality, many many bugs are never really found by all those given “eyeballs” in the first place. They are found when someone trips over a problem and is annoyed enough to go searching for the culprit, the reason for the malfunction."

That /someone/ is able to go searching for the culprit instead of having to rely on someone ELSE to look at the source and figure out what is going on is the whole point of the quote, no?