skysight-inc/HackerNews huggingface dataset:
Google employs thousands of developers. They can't be that strict about who they hire as a 5-people startup. So they sure have lot of less-than-spectacular developers and they don't care. You need talented people as architects (or whatever), not your code monkeys.
I like it! I scroll through until I find an interesting picture, then read the part of the text that goes with it. In the end I read most-but-not-all of the article, in a haphazard sequence.
Thanks for sharing such an informative source.
Lego CEO breaks out in song and dance over record breaking fiscal year profits
As an OS X Yosemite user I'd love to go back to Firefox from Safari, but the memory usage just isn't good enough. i get over an hour more battery life with Safari compared to Firefox. Please do something about this.
Signal 2.0 was tagged on github 3 days ago and will bring the textsecure protocol to iOS whenever apple is done reviewing it.
What if you start out with functional languages because non-functional ones are too difficult for you for variety of reasons?
I appreciate what you did there. :)
A better article in terms of details (but without video)[1]

[1] http://www.telegraph.co.uk/finance/newsbysector/retailandcon...
> True, we produce more vegetables than we did 45 years ago. But are we eating more produce? In absolute terms, probably a bit. But as a percent of calories? Not at all.

I could be misunderstanding something here, but my gut tells me that "as a percent of calories" is not a metric to measure produce intake. You can eat as many heads of broccoli as you want, and that portion of steak is still going to be most of your calorie intake.
Lionsgate invests in Telltale Games to create a TV show / video game hybrid
Absurd Automated Notices Illustrate Abuse of DMCA Takedown Process
Yeah, you are probably right. I mostly used managed languages for the last ten years or so and slowly start forgetting what unrestricted access to the entire address space even means. In a managed context not everything is lost if you have malicious code in your process, but then again it would probably be quite hard to make use of manual address space mappings there. So I retreat my position to making life a bit harder for malicious code if you avoid handing out pointers into your private data.
Startups pitching from an ice-hole. Live
Basically, but outside of tourist areas you're not so likely to meet one who speaks English.

And outside the centres of big cities you can have more...outgoing waiters, especially if you are a regular.

But the American thing of having the waiter share his or her life story, snatch your plate away as soon as you take the last bite, shove the bill on you immediately....you can be amused by the absence of those habits anywhere. If the restaurant doesn't do those things in the US they are rude; in most places if they do do those things they are rude. Different strokes and all...
The main thing is that if you are earning decent money, you want to be a contractor because it is tax efficient.
Generate your own fonts
Nice video :)
No I had not. Thanks for the link, checking.
This article does not mention the Telephone Preference Service. It's a useful step to take.

The article doesn't mention the fact that most mobile providers in the UK have free numbers that you can forward spam texts to.

There's also a problem with a gap in the law that allows "genuine market researcher" to contact you to -- this loophole is used by some companies as lead generation.
Announcing JSConf China 2015
the state-funded BBC

The BBC is not funded by the state. It's funded by the people in the UK who pay for a TV licence, plus some income from selling its products outside the UK.

Its definition of ROI is different to that of a purely commercial player.
It's a commercial business, they are afraid of loosing sales.

The statement made is pretty much a text book declaration of damage control. Personally I'm not buying their claims, but only they can proof it happened and they never will as the market will loose complete faith in buying from them.
hey boy improve ux if they are thoughtful and make sense, but I take your overall point
You can try nut : https://github.com/jingweno/nut
In AU, once you factor in tax and benefits, contractors typically earn 50% more than full time employees. For a $100k full time role, the same might go to a contractor for $800+/day ($180k/year).
We don't have a legitimate direct marketing industry. We just have a direct marketing lobby, hence the verbiage appeasing them.
It's also annoying that the arrows disappear the instant that you click on them. If the up/downvote was just highlighted after a click, you could then let users click again to correct their choice.
It does say 98% of private key transfers are not between the SIM supplier (Gemalto) and the carrier. It explicitly says those could be hacked more easily but are out of their hands. I have little doubt that many governments already monitor thier own people's phone use anyway, making the issue of surveillance irrelevant.

A bit surprising they promote security by obscurity though:

"Security is even higher for mobile operators who work with Gemalto to embed custom algorithms in their SIM cards. The variety and fragmentation of algorithmic technologies used by our customers increases the complexity and cost to deploy massive global surveillance systems."
I'm pretty sure that they had a report still lying around from that period - which, for pretty obvious reasons, they wouldn't publish to the public until today, and even then only referring to it in a press release to reassure everyone that probably nothing happened.
I think it is a bit like reading a "glossy magazine". It is not the same expectation as an encyclopedia, but it is pleasant to read (at least for me).
What Kind of Man Joins the Men's Rights Movement?
>As an independent contractor you are responsible for 100% of your FICA tax (social security and medicare tax).

You can deduct half of the self-employment tax from the gross income on your income tax. So, for example, if your income tax rate were 25%, you would effectively pay 87.5% of FICA, not 100%. There may also be deductions on state taxes.
Ostensibly, they've sold it back years ago.

But that just means they don't need to officially own it anymore: Alex Mandl, Gemalto's current chairman, is among others a former board member of intQtel, which presents its mission on its web page as:

We identify, adapt, and deliver innovative technology solutions to support the missions of the Central Intelligence Agency and broader U.S. Intelligence Community.

So the news that nobody wants spread is: nobody cares about how much the NSA stole from Gemalto: whatever Gemalto has and NSA wants, the NSA is most likely to get by simply asking NSA affiliates installed at every interesting node in Gemalto's hierarchy.

Incidentally, it's rather easy to find sources about this in French (Gemplus used to be a French company, before the fusion with Axalto which was forced by intQtel and TPG), but surprisingly hard to find in English.
Meet Trevor. A hybrid mobile App that brings Travis CI to your phone/tablet.
Yeah I have no idea what is happening to HN lately, a lot of posts that add information are being downvoted. I personally feel like getting rid of the downvote button altogether would be a great step forward, since we already have the flag button.
The NSLs and secret courts are great for justifying what's done to companies and individuals based in the USA.

If you're based in the Netherlands, no such justification is necessary.
He means that you can do alot in 1400 lines of python, and if interfacing with GPG needs that much to be "not rock solid" there is something wrong.
> After several of its most plaintiff-friendly judges retired.

Got a cite for that? Defendants have been winning as much on average as plaintiffs since around 2006 or so, which is well before the retirements. There is considerable year to year variation, of course. Defendants did particularly well in 2013 in jury verdicts, for example, but then plaintiffs did well in 2014 so that they were in balance for the two years.
Yes, Carvalho, is the same thing. At your time, the discussion was the same with different context. The music (I believe Axé with bands like É o Tchan!) was criticized the same way as been too much explicit about sex and the conservatives of your generation behaved the same way as you today. Even saying that the guilty was the lefties. And no, we don't have two lost generations. I'm from the previous and I bet with you: we are saving this doomed country, that your generation left to us.
Is spoofing an email and sending a PDF/Office exploit really considered sophisticated?

Maybe. I'd say a targeted email, using a believable, researched sender address and relevant contents, would be fairly sophisticated. It would certainly be way more effective than the bulk 'please pay this generic invoice' exploits that I get spammed with.
Why small software consultancies fail to become product-based companies
The Knowledge That Will Double Your Hourly Rate as a Web Designer
Even if you ignore Whatsapp and Cyanogenmod, you have 500,000 - 1,000,000 Textsecure installs according to the Play Store. That is on order of magnitude more than the GPG estimate of 50,000. In less than 20 years.
Machine learning is way easier than it looks
It would be good if you could get a mobile hotspot that was locked to a vpn. That way you could give people an easy way to connect and only use internal URLs to share things.
seems overkill. still great to live now for doing that kind of analysis.
Ask HN: A recent graduate, how do I get over regret of not doing internships?
I have just graduated with a PhD in CS from a top world university. I never did any internships during my studies because I always thought the PhD should take priority. Now I'm beginning to realise that this was a mistake. My friends who did internships with the likes of Google/Microsoft are now walking into top notch, high-paying jobs, while I am being rejected at every turn. This is probably because I have little interview experience and also because I just don't look as good as someone with top name brands on their CV. I feel I'm being left behind in the dust.

I guess I'm just looking for some motivation here.

I don't really have a portfolio, but I have expertise. Unfortunately that expertise is not taken into account when trying to get a foot in the door of one of these tech companies. But having one of the big names on your CV acts as a springboard to a great career.
There's also the Hawthorne effect you can enjoy just by being vocal about your (random) methodology http://en.wikipedia.org/wiki/Hawthorne_effect
Take a look how reactjs is growing
Sad Server :(
SexyBot EA
When I imagine a world with an easy to use encrypted email system such that anyone could transparently use, I cant avoid imagining either a world sunken in spam, or a world where each individual no matter their computer skills" would have to maintain anti-spam systems. So we are back to square one regarding mass adoption...
If this is true, it's awesome. I've tried making contact between Signal on iOS with TextSecure on Android before, without luck.
Swedish heavily ad-funded tabloid Aftonbladet is also experimenting with immersive stories.
http://story.aftonbladet.se/spice/2 (This about the drug trade with "Spice".)

I think the news industry is basically trying everything to see how to capture the increasingly mobile user base. Hopefully this is a step away from advertisors' impression frenzy.
Well, as a UK citizen who pays their license fee I thought this worked rather well - I'm quite happy for the BBC to try things like this.
I belong to the TPS, and I still get a dozen cold calls a day. When I ask where they got my details from they simply say it came up on their system. When I ask for their details they hang up. When I call 1471 it's an unlisted number.

Currently there is no viable way to prevent these calls, or to get off their lists.
Also: "estimates of its mass are poorly constrained, but range from 5 to 30 times that of the Sun". Amazing for having on the order of 16 billion times its volume.
While this is interesting, I try to remind myself that I am by no means an ultra marathoner, so in my case I would likely not see any difference between one water protocol vs another.
Worth noting that the Mediterranean dried up (or got close to drying up) a few times in, at least in geological terms, the fairly recent past:

http://en.wikipedia.org/wiki/Messinian_salinity_crisis
> In the real world, if I manipulate a sheet of paper by swiping it with my finger, I expect it to move directly with my finger.

I challenge you to do this without "2D Waggle" happening (which just amounts to some rotation depending on where you drag and which direction). I'll wait! :)

Really though, that's the point of 2D Waggle. You say "I would rather an object did directly what I told it" — when you swiped the paper and it rotated a little, was it not doing directly what you told it to do?

To use an actual example in an actual app, have you ever used Tweetbot? I encourage you to find someone who has it: a couple releases ago, they added some new "physics-based" swiping animations for dismissing images. They pretty much amount to 2D Waggle, but if you flick something super fast, you can really send it spinning.

When I first saw a GIF of that behavior in the release notes, I, too, thought it was pretty excessive. Then I actually used it, and wondered why swiping anything would behave any differently. It felt as natural as swiping a real piece of paper...which is exactly the point.

> 'Compose modal' makes the new modal box slide on screen rather than just appear.

Picturing what this would look like (the whole screen just instantly changes?) – that wouldn't just look "boring" or whatever...it would look broken. Every single app I just tried on my phone with a compose button slides the new view into place because to do otherwise would be jarring. I honestly believe it's aiding one's brain in doing less work processing what the heck just happened, not adding extra work. Research into this would indeed be pretty interesting.
Yes, they are running various internal testing suites in google, check here for example: https://code.google.com/p/chromium/issues/detail?id=360298
Cheap Rubbish Removal Sydney
How a series of waves with increasing frequencies adds up to give a square wave
I agree, and this attitude is one of the things that's holding progress in crypto back.

Should random software engineers experimenting with crypto claim that they've created a software package worthy of being used by dissidents and whistleblowers?

Absolutely not!

But should we be discouraging random software engineers from experimenting with crypto, and starting open source projects that may gain steam...and eventually, after years of use and audits, gain the standing and reputation to be used by dissidents and whistleblowers?

Again, absolutely not.
Can you post a reference for TPG (which I assume you actually mean Texas Pacific Group) being an "official" CIA proxy, as you say? That is a pretty bold assertion...
You really don't need a package manager for Go. Honestly, the main reason you need them for node, python, etc is because you're deploying source code to your production environment. You don't do that with Go. You deploy a binary, which has everything wrapped up in itself. Think of it as a self-contained virtualenv that requires zero effort on your part :)

In Go, code is packaged via source control repos. If you want a different version, you need a different repo. There are some tools to mitigate this, so that you can get away with a different branch per version (see http://gopkg.in), which can make it a little nicer for the maintainer to deal with multiple branches. To the consumer, it still looks like a different repo (i.e. every different version is a different URL to a repo).

Note that because Go is a compiled language, the only time versioning comes into play is a development time. As long as your developers are using the right version, you never have to worry about versions during deployment.

Now, if you're concerned that your project depends on code repos from external sources, then there are several tools that can insulate you from third parties doing stupid stuff. The most complete and best one is called godep, which basically has two modes - reliable and paranoid. The reliable mode insulates you from changes made to a repo you depend on by recording the exact VCS revision your project is using and always checks out that commit. That way, if an upstream repo checks in a breaking change, it won't affect you (and you control when you update to newer commits in that repo). Paranoid mode actually copies all the code from your dependencies into your own repo. This insulates you from upstream repos getting deleted. And of course, this gives you the ability to test out upstream changes before integrating them into your project. The tool makes it easy to copy all of your dependencies at once with a single command, so it's not a huge hassle to do (which it would be if you had to do it by hand).
Bill Nye Disses “Regular” Software Writers' Science Knowledge
I had a call from someone claiming to be investigating nuisance calls, as we get a lot of nuisance calls I was quite happy to chat to them - then I realised they were actually selling a service that claims to cut down on nuisance calls... so I gave up at that point.
From the title, I thought there might be something insightful about the importance and difficulty of maintaining concentration when working with the large, complex, abstract and mostly invisible structures that software consists of.

Instead it was just another riff on "we're doing it wrong"...
Yes, you can. The URL is the version. If you want a different version, you need a different url.

For example, when I released v1 of my package "lumberjack" you imported it with

import "github.com/natefinch/lumberjack"

When I updated it to v2, I had to change the url. Luckily there's http://gopkg.in to make this easy, so for v2 it's

import "gopkg.in/natefinch/lumberjack.v2"

Note that the above url actually redirects to the v2 branch of the same github repo.
I read this on my iPad this morning and, although I like the idea behind the presentation, I found it really annoying that when I scrolled the line of text I was reading to the top of the screen, it would often start to fade out while it faded in the next section further down the screen - it was like reading with the screen brightness turned right down.

Altough, looking at it again now from desktop Chrome, I can't reproduce this, even at a small screen size.
>>I also wonder if there is a downgrade attack to force 2G, so that those keys are not completely worthless.

You can very cheaply(~$100) buy a 2G/3G/4G jammer from any Chinese wholesaler site(but don't,because it's illegal pretty much everywhere). Most of these jammers have a switch to jam only 3G and 4G, leaving 2G functional - that would force the phone you are attacking to switch to 2G mode as it couldn't find any 3G/4G towers.
TANRI TEYİDİ: SURİYE
I find it hard to believe that any late stage investor doesn't realize the difference between net and gross for marketplaces.

Obviously startup founders talk about gross because it's the bigger figure, but even early stage investors ask what cut the marketplace is going to take.

I'm not really sure who the article is aimed at, I would have though that most non-VC late stage rounds are done by the like of investment banks or private equity firms who have a reasonable idea of what they're doing.
Perfect forward secrecy is of course better than not, but I'm not convinced it actually helps a lot for realistic threat models. It means that when you utterly screw up and reveal today's treason you won't also be revealing last week's treason - but for someone who's using crypto for serious reasons, how often is it that last week's message would get you in trouble and today's message is innocuous?

Would a ground-up rewrite of OpenPGP have PFS? Of course. Is the functionality important enough to justify a new protocol? Not on its own, IMO.
Other than slightly brighter-than-normal nights, will there be any adverse effects on Earth?

The wikipedia article on near-Earth supernovae [1] suggests that Betelgeuse will be pretty safe because of its distance. But exactly how safe? What about all the delicate electronics that we've sent up to space? I suppose anything that can withstand a daily dose of solar radiation would probably be okay, but are there any specific wavelengths that could cause an issue?

[1] https://en.wikipedia.org/wiki/Near-Earth_supernova
> It does say 98% of private key transfers are not between the SIM supplier (Gemalto) and the carrier. It explicitly says those could be hacked more easily but are out of their hands.

But that is the problem, they shouldn't really be in a state that could ever be read by a human, they should be on individual HSMs that are distributed around the networks from the SIM manufacturer.

The problem is that there isn't a real standard on how to exchange HSMs between SIM manufacturers and the network operators that use different jury-rigged hacks for everything.

The mass deployment of HSMs would add a huge cost and involves additional hardware development and integration in mobile networks that already work perfectly.

If the SIM manufacturer insisted that the keys would never be given in a plain-text format but only as individual non-dumpable HSMs then that would force the network equipment vendors and mobile operators to deploy the technology.

This isn't going to happen as the SIM company will lose business to a competitor and the mobile network operator will not spend their budget on such a project that adds zero functionality to their existing (and completely operational) network.
Thanks, it's more clear now. I misunderstood Pyston's motives and thought it was just making Python faster rather than writing it from stratch.
Given that the speakers at the Yanni show had a perceptible background hiss, it's obvious that they were not in fact using the best equipment possible. You're working from a single data point and drawing a super-unreasonable conclusion. I have heard amplified and recorded violins that sound exactly as they should.

Without knowing what they were actually using, it's hard to pinpoint why it didn't sound right, but most microphones and speakers don't have flat responses (so the reproduced sound will be different), the signal could have been EQd to hell and back by the sound guy, maybe the actual violin player was sick and they couldn't get a sub so they just put a roadie up on stage, and maybe they weren't using a microphone but rather a piezo transducer and didn't match its impedance with an appropriate preamp. Way too many variables.
Thanks for clarifying :) Yes, I should be more careful about specifying data races vs. race conditions :)
Apple Told by Jury to Pay $532.9M in Patent Trial
Sell on Facebook Just by Sharing a Photo
Any risk of a gamma-ray burst affecting Earth?
There has been a number of studies (http://www.2uo.de/myths-about-urandom ; I don't agree with everything but interesting reading anyway) showing that entropy from Linux random is not better than from urandom (once urandom has been properly seeded). For this reason, I patched my rndlinux.c GnuPG source code file to always use urandom. Makes key generation instantaneous.
When a software is stupid, I don't want to install additional stupid software or comply with stupid instructions; I simply patch it.
Block withheld numbers?
Contracting in the UK typically pays close to double the equivalent permie postion... its much more profitable and there is no way I would go permie again given the choice.

Honestly, quite surprised to hear its the other way around in the states.
Here, contractors tend to laugh at the 'perks'... they're pretty much worthless.
They created at Atari a night shift just for him (he was the only employe of this team) to do the same work than the others. This answers the question.
The book depository is owned by Amazon
Cyber’s Most Wanted
New Proposed FAA Rules for Drones [pdf]