skysight-inc/HackerNews huggingface dataset:
Here ya go: https://github.com/robertdavidgraham/masscan

@collinrm I just took masscan, changed the HTTP request,
then tweeked the code to generate a small TTL.

Source: https://twitter.com/ErrataRob/status/583433175302479872
The cost of water for residential use in California is already pretty ridiculous in many areas. As already mentioned many, many times, the problem is basically that there are multiple systems in place which subsidize water use in agriculture and it is, more or less, going to be a disaster for everyone else in the state.

About the only things I could do to reduce my own water use at this point would be to drain the pool (or maybe build a structure around it to reduce evaporation), replace the hot water heater, and reduce personal hygiene to nearly-unacceptable levels. The best part, though, is that none of that would reduce my water bill by a significant amount for at least six months (because most of the bill is a calculated charge for sewage treatment based on the previous year's water use), and the city will probably still find a way to justify power-washing the trolley station every other week.

Even better, though, is that most of the agriculture in California is certainly not local in any sense of the word (other than the sense that it happens here). The majority of the agriculture is for export, either to the rest of the U.S. or the rest of the world, because you can't import climate, but you can import water (or force everyone else to do so while the corporate farms suck up the groundwater) and labor.
You need to find open source projects that suit your interest and you have a genuine passion in seeing them succeed. Look beyond the highly successful ones, and look for projects that have a reasonable community + momentum but are not very famous. There is a lot to be done for such projects

Try https://github.com/explore

Plug: Checkout our project https://github.com/frappe/erpnext
Even early adopters expect the products they use to do the thing advertised. I don't believe there are many paying customers who'd be happy with, say, a lighting system that only works half the time.

The main difference from my perspective is that the bar for 'Minimal' and 'Viable' in hardware is much higher than for software.
Vegetable sources of Omega-3 are usually ALA, not EPA or DHA like in Fish Oil (they get converted into those by the body though)
I have been popping these coke like tasting candies as a replacement, I don't think its helping me at all. :<
> How do they plan to get users ?

Cheap phones for users who don't particularly care, I assume.

> and Play Services and the compatibility libraries only improve that

I haven't yet looked at the developer side of FFOS, but guessing from the store entries of all the apps I cannot install, it doesn't have an equivalent to those.
URX (YC S13) is hiring search, platform and JavaScript engineers to bring context to mobile
How are they multi-national?
No, I find that pretty damn hard to believe. Especially considering where it's coming from.

You don't accidentally do anything with an unconstrained CA key chained from the public root: that is a serious piece of data that can MITM anyone worldwide so at the very least should be under lock and key at all times! [It definitely shouldn't be plugged into any network: it should be locked in a Faraday-caged safe, on a dedicated hardware device, ideally under armed guard. You sign your operational CAs with that.]

CNNIC fundamentally broke their CPS: it has no intermediate programme, yet it intentionally misissued (at least!) one CA anyway. That is easily enough to get them pulled from everywhere, in line with current practice.

It's a pretty good demonstration of why we need something like CT, and (IMO) a public list of all intermediaries ever issued from any active CA.
There are a few ways to be clever on going about it. One as you mentioned is to do a two phase scan one to move and one to correct the bins.

Also instead of a square shaped range you can get a hexagonal range by dividing corner boxes diagonally to two and then checking which half of square the boid is. :)
Quick googled + calculator estimates:

Cow milk seems to be around 1000 gallons per gallon.
Soy milk comes in around 130 gallons per gallon.
Almond milk, around 400 gallons per gallon.
Peanut milk is less popular than I thought, but should come in somewhere close to soy.
Development activity in LibreOffice and OpenOffice
I don't get how it's ridiculous. How do I know that Bank of America's website is actually Bank of America? At least I know _somebody_ checked that it was BoA who is controlling the domain.

It's obviously far from 100%, but the web of trust has to start somewhere. Distributed web-of-trust works for individuals, but am I supposed to go see Jeff Beezos in meatspace before going to amazon.com?

The solution is, of course, delegation. But the end result is you end up with exactly the same CA system as today!
Wow. This is really a shame. I use uMatrix in particular enough that I would've gladly chipped in on a Patreon for continued development.
What about all the over-hyping that goes on? Or outright false/misleading advertising? Sometimes you only find out you're an 'early adopter' when the product's in your hands.
> Chrome OS is instantly comparable to Linux and Windows if it can run native apps.

Oh, because if you add an OS made for touch/small screens on a notebook equipped with a keyboard, that immediately makes it as good as regular desktop OS ?
I will have a look.

The value initializes as 60, so it will show as 60 until it gets updated for the first time. Would that be what you are talking about?

The initial few seconds performance is not at optimum so that is a problem. Are you on a laptop or a mobile/tablet device?
Trustworthy entities (e.g, Mr Schneier and Krebs and whoever they trust) could just offer a signed list of pub-key - identity pairs which can be stored in the block chain.

The amount of work needed should be pretty low, they start with the current certificate tree and they just need to update in case of a certificate incident (they probably get this info fast and the update should be easy to do via software). Probably they could sustain this service via donations.
>I can pay Layer3 or HE $0.50 per mbps and get 200mbps to my server for the same price.

I find this unlikely, or at the very least, exaggerated

If you buy several gigabits from he.net, you can get around $0.50 per mbps.

As of last year, for the same quantities, you are looking at about 6x that for Level3 (I assume you mean Level3, not Layer3)

Level3 is probably the most expensive major bandiwdth provider you are likely to encounter (they also have the largest network... if I was going to spend three bucks a megabit, and to be clear, I'm not, I'd spend it with Level3.) He.net is one of the cheapest, and only approaches "largest network" if you are counting IPv6 peers.

If your provider is charging you the same for both, most likely they have a he.net link for normal traffic, and then a burstable Level3 link, and they only use the latter as a backup.

(Also note, the pricing I'm talking about is only valid for the "one to five gigabits" level... bandwidth is one of those things that gets dramatically cheaper as you buy more. Dramatically.)

Also interestingly, if you want comcast in the datacenter... their pricing is closer to Level3 than it is to He.net. Even if you want to do 'paid peering' and only want to send data to/from comcast over the link. (Of course, no sane person would send traffic other than the traffic to/from comcast customers out said comcast link.)

(Of course, none of this has anything to do with your point, but someone was wrong on the internet, etc...)
>uuid field

This one is good.

I kind of wish it were default for primary keys, since the number of times I got burned by having databases I couldn't easily merge (which UUIDs help a lot with) way exceeds the number of times I had performance/memory issues caused by actually using UUIDs.
And the binaries aren't modified?
Have you used django-pipeline? It's damned good. I wouldn't start a new project without it. Almost wish it was part of core.
There are about 30 different US trademarks for "Route 66", in different categories - beer, tobacco, etc. Tempting Brands owns many categories. The question is whether they have products in them.

You can register a US trademark with an "intent to use" it, but normally you have to submit a statement of use with an image of the trademark being used on some product within six months. Here, though, Tempting Brands filed in another country first, which gives them a pass on that initial requirement.

Between 5 and 6 years after initial registration, though, the trademark owner, even if non-US, must submit a statement with an image of the trademark being used on some product to the USPTO. Some of their trademarks, such as #79975044, just passed that point. There's a six month grace period after year 6 during which renewal is still possible with a double fee ($100 per class registered), and that's now timing out.
Rather than copy their suggestions for SSL configuration, I think you can probably find better (and more well-maintained) advice on the Mozilla wiki:

https://wiki.mozilla.org/Security/Server_Side_TLS
People have been hand-converting cars to electric power since the 70s, but the lead-acid battery technology of the time was miserable. Too heavy, plus poor deep cycle performance. As the Tesla story trending on HN right now says, the modern electric car is a battery story.
Good point - it is implemented with a salt! However, the way that's done depends on the implemetation. The underlying KDF doesn't require nor generate a salt, so if you're implementing it client side, you'd need to ensure salting works.
Your browser, or trusted cert provider, should just have a clear policy that once trust is broken, according to well defined rules, the cert is auto-revoked with no appeal. Then it is only a matter of executing the policy, not an ex post facto political game.

If your trusted source does not have such a policy, drop them.
Amsterdam | Front End (JavaScript) Developer @ Booking.com
We are hiring experienced javascript developers to join our Front end team in Amsterdam(an expensive relocation package, including visa support, is provided). If you have 3+ years of expereince with js,jquery,html/css, knowledge of a/b testing and e-commerce expereince, apply here: http://grnh.se/a0pkqe
Not sure that's quite right. From the docs:

>In order to achieve its outstanding performance, Redis works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log.
I just had an epiphany , when thinking about what role are those big companies playing now in our democracy, in the most general sense.

I think what google is doing there is a kind of "fact checking" ( this text on this page is really coming from this site), which means they're playing the role of a media counter power (in the sense of judiciary power, political power, and media). What's funny is that they don't need google news to play that role. Only a browser and a security policy is enough.
Facebook disabled users' accounts for violating WhatsApp TOS 3 years ago
I don't use my FB account anymore and it was disabled 3 weeks ago, it was strange since generally no use = no abuse.

Then my friend's account was also disabled, we both released the inner workings of WA protocol along with API PoC a while ago (https://github.com/venomous0x/WhatsAPI) and it got popular, so we suspected that as the only relevant common thing.
Today, Tarek (https://twitter.com/tgalal/status/583508825329819648) who also built unofficial sort of WA clients, confirmed it's the WhatsApp thing.

This makes me think of the rationale of:
1) Disabling someone's account for allegedly violating another service's terms.
2) Three years ago.
3) At time where WhatsApp was an independent company.
4) And whether this practise will expand to Instagram? Parse? future acquisitions?
CNNIC has responded: http://www1.cnnic.cn/AU/MediaC/Announcement/201504/t20150402...

> 1. The decision that Google has made is unacceptable and unintelligible to CNNIC, and meanwhile CNNIC sincerely urge that Google would take users’ rights and interests into full consideration.

> 2. For the users that CNNIC has already issued the certificates to, we guarantee that your lawful rights and interests will not be affected.
Right, their users are the ones who purchase certs, not browsers.
Seriously, the article was about almonds. That's why the discussion is more focused on almonds than meat and dairy, or even some of the crops people are more aware of in California's agriculture, like strawberries, grapes, or avocados.

If agriculture receives almost no restrictions on water use from the state while residential use is slashed, it puts the burden on the people with the least impact. Sure, go around and cite people for watering their lawns and washing their cars, but I'm paying through the nose for water that was imported across state lines and they're planning to implement toilet-to-tap while the corporate farmers are sucking up the groundwater and using it to grow cash crops for export.
Taleo?
That's because in most cases the app functionality is duplicated on the desktop, either as a web app or native desktop app. On my phone for example such apps include Gmail, Skype, Kindle, The Economist, Google Calendar, YouTube, my banking app, Facebook, Spotify, Photos, Maps.

But in future the simplest way for a developer to provide the same functionality on both desktop and Android smartphone will be to create a single Android app.
Hasnt' Louis Pouzin invented the Internet?
AMD to Face Securities Fraud Lawsuit
> I'm in favor of the state doing whatever it can to make a more peaceful society.

This sort of thinking has historically led to a lot of problems. It is also trivially false. For example, the United States would be a perfectly peaceful place if all Americans were dead. Would you implement such a solution?
Introducing the Moni.ai Channel. Customise your personal assistant
I don't. I own nothing I would cry over if I lost it. My wife doesn't own expensive jewelry, all our money is in the bank, and all my work is backed up to external servers, so losing the laptops would only cause me some delay. We are not attached to any object that we own, and we only lock the door for our own protection. If someone wants to burglarize my home, all I ask is that they wait until we're not home to do it.
This sounds great but eggheads have been claiming they've created such devices for years. The article contains very few real numbers. Does anyone know anything more about these supercaps that may legitimize or discredit this research?
Sometimes it works, if you balance the shit levels.
Take Samsung's smartphones: a couple of flagship models, usually great, balanced by a ton of mostly shitty mid-tier phones that carriers are happy to bundle with their equally shitty offers. Works well, if you don't make a misstep like last year's S5.
> Forget security concerns, I'm just appalled that to acceptably do encryption today I need to pay some company! That's wrong.

Well, you don't need to pay anyone to do encryption. You do need to do pay people to do identity verification. That's a more-than-pedantic difference, even though encryption without identity verification is generally meaningless.

First off, you're already paying someone to have a domain name. I sorta understand the distaste on principle, but I've never really understood, as a practical matter, why paying $10+/year for a domain name is totally fine, but paying $5/year on top of that for SSL isn't. (And yes, the race-to-the-bottom has hit $5, see ssls.com. This isn't even counting StartCom and the future Let's Encrypt.)

Second, and related to that, what you're paying them for is the human element in key continuity. If you ever lose your key, you're going to want to be able to regain a key for the same website that you've already published everywhere, that everyone already has localStorage for, etc. And be careful about saying that you don't care: Crypto.cat (which, at this point, definitely knows what they're doing) managed to lock themselves out from SSL by requesting a hardcoded public-key pin and then losing all the public keys they'd pinned. This isn't really a risk that you think is realistic until disaster strikes, and the last thing you want in the middle of a disaster is to have to rename your website and convince everyone that they should use the new site.

And the process of maintaining infrastructure to re-provision certificates to people costs money. It's possible that it could be funded in different ways (just like, e.g., all of the work that goes into the browsers themselves is funded in ways that don't involve charging website owners or users). But there is a thing there that involves humans, there are advantages to it involving humans, and humans need to be paid.
Well, the innovation is really about storing electricity. We've been generating and transmitting electricity for over a century now.

Once we can store electricity (in batteries, for example), then intermittent power sources, like solar panels (and also wind turbines) become much more valuable.

Energy storage is a very inconsequential market right now, but if smart-grid-connected Teslas really take off, then they become important not only to the automotive industry, but also the electricity and energy industries.
Are there "firefox users" upon the HN crowd though (or the intended technical / web dev crowd)?

I'd say that pretty much all of those of article was intended for have 3 or more browsers installed and regularly test things on each. It wouldn't be much for them to check the article in a different browser if they cared for its contents.
Even if you aren't sitting with a cellphone or earphones in the bus, chances are the guy/girl next to you are.
So where can I see a list of Android apps which I can run on my Mac?
7 Must Have Best SEO Tools for Blogging in 2015 (#7 Is New)
Show HN: Poste.io – full featured mail server installed in Docker container
While your advices might be a acceptable for hardware, I don't find it much help with minimum viable software. Proven software is generally out of date, version two can as easily be much worse than version one, and so called proven track records has numerous examples of people milking the good name of a company or product series.

The only thing a consumer can do to protect themselves is to hope that consumer reviews are correct and not gamed, and that they are still relevant at the time of purchase. This then leads to new problems, as a recent article on HN talked about (https://news.ycombinator.com/item?id=9207855). In particular, a product with many happy reviews but with a small set of negative ones produces doubt, the psychological effect of which pushes consumer to buy less reviewed items.
As a user I don't want to be asked what map service I prefer. Make it an option in the settings if you want for those 0.1% who cares.

Google is in the information business and geographical information is firmly in their business area. If the EU autocrats can't understand this, then Google should use its stores of information offensively.
Hightech startup Eregion nieuw TOP-bedrijf
The Central Valley has never been a fully arid desert as long as there were not farmers there diverting the water. When they created a desert (in the 1800s), the federal government stepped in and diverted water from even further north and east. Of course, the farmers didn't do it all on their own, as lakes were drying up in California before they got here.
Ask HN: Hackership.org in SF/Bay Area – Where to present and who to talk to
With two batches coming up (Summer in Berlin and Autumn in Costa Rica), we are currently traveling the US to spread the word. After a few days in L.A. we arrived in San Francisco yesterday and started looking at meetups and people, who might be interested in Hackership. Are there any meetups or groups specifically about intermediate and experienced coders, who want to switch areas or want to learn new things? Or just generally groups, people or companies, who are interested in these topics and would like to talk to us?

Any tips and hints appreciated. Thank you very much!
Ben

------- About Hackership:
Hackership a hands on, self-directed learning retreat for developers. Unlike many coding schools, hackership doesn't have a set curriculum but instead puts the learner in the driver seat; they decide what they want to learn, at their own pace, while Hackership provides coaches and the welcoming and open environment to make the learning flurish the best.

The retreat typically goes over 9 weeks. The next batches will be taking place in Berlin (Summer) and Costa Rica (Autumn). Applications are open now.
not quite the same article. Better to google the title and click that link which avoids the paywall.
You could easily install a $10 door alarm that chimes when it is opened. They can be ordered online or picked up at stores like Radio Shack, etc.
Yup, this is it. The cnnic.cn end-entity certificate is SHA-1, which would do it. (I believe there's some sadness involved like Windows XP being excessively prevalent in China, or something... I vaguely recall a discussion of this on the cabforum public list, but I can't find it now.)

If you click on the white page icon and go to the "Connection" tab, it'll say "This site is using outdated security settings," which generally (always, in current Chrome versions?) means SHA-1.
Jungggle – Finding, buying, and selling marketing services made easy
Your comment is interesting, but I still downvoted you for irrelevant pedanticism.

A title isn't 'click-baity' just because it's shorter than you think it should be. I think the title was completely fine and the contents of the article were what the title led me to expect, without actually already fully knowing the issue.
A pseudonym that can be changed after every use is anonymous.
Bloomberg does native advertisement but they label it as such.

The whole anti native advertisement movement seems so late it's silly considering news publishers have been basically doing it for years without any disclaimer. PG wrote about this some back in 2005: http://www.paulgraham.com/submarine.html
Perscope got updated. Go, get it
The conglomerate structure is kept by choice in the case of Berkshire Hathaway. There's a pretty good outline of the reasoning by Buffett in the 50th anniversary letter.

3M is often used as an example in Strategic Management, particularly as an example of Mintzberg's views (strategies emerge and are not planned). I think the emerged strategy is usually labeled "working with surface material" or something.

I guess one could argue "battery company" is an emergent strategy for Tesla in that sense but I think there's certainly planning to it and it wasn't just discovered. But you can use that "post-branding" that is typical of Mintzberg and I think the author of the blog does a good job.
Obviously, but you can buy digital goods anonymously.
This is important evidence for our government. It'll be interesting to see how they respond to these attacks -- attacks by a nation state against key United States Internet infrastructure.

It seems a bit of a stretch to say that Github is "key US Internet infrastructure"...
Understanding Vulnerability Half-Life
Interesting...based on that illustration, it seems like #2 is the dominant factor. The areas of previously highest density are the Lower East Side and East Village, formerly working-class immigrant enclaves with more tenements than highrises.
Avoid to do it. It'll make you smartter
A better solution could be viable but there are entire companies based upon the pki infrastructure.
Ah skip to the last paragraph.
It's just the usual "things would be better if only we took away more of people's money by force" article.

Ignore it. It's just pro-tax stupidiy
At first glance, seems similiar to nodered[0].

[0] http://nodered.org