skysight-inc/HackerNews huggingface dataset:
>Being burned by two FirefoxOS phones (mostly burned by not being to upgrade to anything latest and stuck to some version).

Which ones? I had the same experience with the ZTE Open C but found great community updates for this and other phones. Open C updates are this way: http://builds.firefoxos.mozfr.org/doc/en/devices/zte-open-c
No, It’s Not Just You: Enterprise Security Really Is Hard
Thanks. Appreciated.
Fixing the 'Blank Text' Problem
Mono support is important for us and I prefer the syntax. It's also handy to be able to serve up ancillary pages like documentation alongside the API.
Weren't they aiming for 7 TeV?
We certainly agree about awareness; acceptance (which is a nice way of saying 'giving up') is the first step towards losing _all_ of your rights, not just some.
Started Cross-Fit. Some of the 'good' side effects from my cross-fitting
1) I now drink more water than I used to (at least immediately after the exercise)

2) I'm forced to do more cardio work (I generally hated cardio work) and I've found I'm no longer as tired as I used to be.

3) I'm able to do more work-outs. By this, I mean - when I used to go to the gym on my own, I would quit when I got tired; at crossfit, there are folks who are encouraging me to finish the exercise

4) I can easily 'disperse' any 'frustration' from work during the workout which leaves me all refreshed and ready to handle the rest of my day.

However, I still make sure that I do the cross-fit in moderation.
Engineering a fast feedback infrastructure
Note that it's quite important to specify the server version. The output differs significantly. Compare nginx 1.0 and nginx 1.4, for instance.
BitTorrent's Maelstrom browser enters open beta
I use it quite a bit for data analysis, in particular for user-defined functions with python. Being able to explore your data (via SQL and it's powerful syntax) in addition to functions and aggregators that I define, is REALLY useful. You could do the whole thing in python (and data imports), but adding the SQL part in is so much easier than building dictionaries and filtering, sorting etc...
Can you provide some details about your setup? Also, do you work remotely or onsite?
So cool :D
Ofcourse they aren't asking for it, they just didn't buy the phones. Why would they ask for it when they are using Android?
The Economics of Being Nice
Misunderstandings about Numbers Distort Debate Over Digital Music Royalties
man thats horrible... never really hear much about Kerala in the news, its obscure in comparison to the rest of India. Thats where my parents came from so I was happy to see Kerala come up on HN, not happy at all after reading the article. Damn
This is exactly what I ended up doing to kill time. I watched some standup comedies. Thank you.
ISIS Cyberattack disables 11 French TV channels, takes over social media sites
Pep8squad, check how Pythonic your code is with dropbox
I strongly recommend Keto. I started Keto 4 months ago and a couple of my coworkers have joined in as well. Not a lot of research has been done, but you can find some interesting information over at http://www.reddit.com/r/ketoscience

Current research being done with the Keto diet: ALS, multiple sclerosis, Alzheimer's, and just about anything else that involves the brain like brain cancer. It's been proven to help type 1 & 2 diabetics, certain types of seizures and it's a great weight loss diet for most people.
Is it safe to reuse the same Diffie-Hellman parameter across multiple domains with different certificates/keys?

Not that this generator does it but if you host more than one site, it's more convenient to specify ssl_dhparam (also stapling, ssl_ciphers, etc.) in http{}, and only add certificate/key in server{}.
Thank you all for great comments!
Very good catch! Thanks for bringing it up. I had reverted the first one but missed the two others.

Unfortunately, mediawiki only support two levels of access control: fully locked or fully open, so I need to manually police changes as they happen...
The same could be said for real estate agents
The latest version of Eclipse IDE (Luna) is actually quite good and possibly better than IntelliJ for Java development.
mathematica and/or the ＂wolfram language"

proprierary and slow (bad) but it has a huge, convenient, well documented standard library so it's convenient for prototyping stuff

plus it's really satisfying to implement complicated thing in a single line of code
I'm also a particle layman, this article seems informative of whats possible at 6.5 http://scroll.in/article/713144/What-will-we-find-next-insid...?
Perhaps this is obvious but if you aren't running your own server, your web app (and Hangfire along with it) can stop running during a period of inactivity. Obviously this is not a problem with Azure scheduler.

I use Hangfire and then simply have Azure Scheduler ping my site regularly.
When the IETF renames things, everyone is going to have a bad time. See also URI and IRI.
After the discovery of the higgs, CERN shut down the LHC and doubled its operating power.

For finer detail of discovery, we need more and more power in the accelerator.
Wordpress WYSIWYG (TinyMCE) is notorious for bugs - I experienced them first hand - and it's not a website, it's a software people install. Big difference.

I had forgotten about Gmail, so I guess this is the exception to the rules. On the other hand, markdown is supported on Reddit, Stack Overflow, Github, and many more.
From what I read, yes. Your libssl already comes with a built-in one that's reused almost everywhere. If you want to generate your own, you can make it public, but realistically, if you don't trust your libssl to provide a good dhparam, why trust it to do anything else?
Live somewhere where you can safely bike to work. I bike all year around in Stockholm's climate, and that way I get at least 1h physical activity every workday.
I am not sure of that at all. My experience is that early negative opinions of the next level up don't readily get updated for a very long time, if ever. And the longer you spend holding on to your opinion, the harder it becomes to learn better.
On remote servers: VIM since it is extremely likely to be installed.

On desktop: Emacs in EVIL (VIM) mode. Love the quick key-navigation capabilities I get from VIM backed by the expressive power of Emacs.
Show HN: We made T Combinator, in case YC reject us today
"Still, it's the poor areas, rather than the areas where whites have self-segregated, that get the most attention from policymakers, who have sought to ameliorate concentrated poverty in segregated areas by moving families from black, urban areas to white suburbs. Beginning in 1989"

It's not just whites that have 'self-segregated', it's anyone that wants to live and raise their kids in an area that isn't full of illegal drugs, criminals, gangs, and people that can't or won't take care of their own property.

I refused to subject my family to these areas and I don't care if it looks like I'm "self-segregating". I'm not going to allow someone's poor life choices to dictate my life path.

I lived in a neighborhood where this happened (government subsidy allowed the poor to move into a middle-class neighborhood at a fraction of the cost).

Skin color didn't matter. 9 times out of 10, the house ended up trashed with garbage or kids toys all over the lawn. It was un-kept and none of the rules of the neighborhood were almost ever followed.

We shouldn't be blaming anyone for actually having a nice home, following rules, being successful, and generally being a good citizen.
The price of Project Ara Phones – defining factors and estimation
This sounds awesome, going to check it out. Looks like something I would use...
You can reuse the same diffie-hellman parameter. It's a public value anyway.
Actually you've walked back some of your hyperbole.

The fact is that battery life that satisfies the needs of the vast majority of users cannot reasonably be called 'extremely short'.

The Apple watch can clearly be relied on to remain useful for a single 24 hour day. Your statement to the contrary is flatly false, and is contradicted by both Apple's testing and reviewers experience.

I am not convinced at all that not supporting sleep tracking is a valid reason for wanting longer battery life for the Apple watch. It has to be charged at some point, so what happens then?

Sleep tracking is certainly valuable, but why is the watch the right hardware for that? Many people don't like wearing watches in bed, and sleep tracking can be done with much simpler hardware than the Apple Watch. Why not do it using a $30 headless sensor instead?
Feature request: can openssl version and nginx version be dropdowns? For example, I know I'm on latest stable nginx, but I don't know what exact version number it is, and it's not obvious that the configuration will change if you update these values.
The LHC just doubled it's power. While only operating at 50% it discovered several new particles including the Higgs Boson. Now that it's nearing 100% they're hoping to discover physics beyond the Standard Model. That could include things like additional spatial dimensions, Dark Matter, microscopic black holes and more.

TLDR: Hopefully opening the door for some mind blowing discoveries.
I use github pretty often.
Marc Andreessen: It's shocking 'how little M&A there's been' in tech
But it will take much less attention to process them.
One more I'll add to the mix that has come in handy several times: CsQuery jQuery port.
https://github.com/jamietre/CsQuery
Heh, if anyone with access to the design document reads this, I get an "access denied" error on the Google Doc mentioned in the mail.
I personally use Java+Spring, JavaScript+Node, and Python+Flask. However, I would recommend against the Spring and Node options as they take a while to master (Spring due to size, and Node due to async programming).

I have not used RoR, but everyone I know who has used it recommends it highly, so it would be a solid choice.

Also, Python+Django is solid for a course. Django is not my choice of framework, but it's well designed, documented, and comprehensive.
This is awesome, thanks for the Linux love!
It seems every competent programmer makes that mistake at least once in their carreer :)
> For instance, gamblers are also quite good at assessing probabilities, and when country fairs hold competitions to see who can guess the weight of a cow, the guesses tend to cluster around the correct answer.

Does each guess submission cost money? If so, then that's a pretty standard market. People who know more about cow weights are more likely to spend money because they have more to gain. Of course, even with free tickets, it could just be that people at rural fairs know a reasonable amount about cow weights.
Free and New GMAT Practice Test Sample Questions and Answers
I interpreted the comment a bit more generously. The admonition wasn't to avoid using higher level tools, but not to try editing the low level output of a high level tool. I prefer writing in C to writing in assembler, but I would never want to modify the assembler produced by a compiler. Similarly, I prefer scheme to C, but I would prefer handwritten C to editing the output of the Chicken-to-C compiler.

That comes back to the complaint about the auto-build tools. Using the tools, by themselves, is perfectly reasonable. On the other hand, writing Makefiles by hand isn't particularly onerous. What is frustrating, however, is when I'm expected to edit a Makefile that was generated by a tool without having access to the script that generated said Makefile.
I've been using it for long time now. Very fast, light, and stable. Thanks Igor!!
See if there is pickup ultimate frisbee in your town/city. It is a super-friendly sport that welcomes beginners.

If you find running / weightlifting torturous (like I do), this is a really fun way to add activity to your life. After a game, you will suddenly realize that you just ran for 1-2 hours without even thinking about it.
There's a Bookmarklet for that
Isn't the ubuntu phone using the RTM archive which has a different version number? :P
Is that code really dead? Tombstones for dead code
It crops up occasionally, the issue has always been the effort of client support, and that it only anchors the validity to that of the document referencing the javascript (or whatever).

These days there's an active spec underway for "Subresource Integrity" at w3: http://www.w3.org/TR/SRI/, which is pretty much exactly that, so hopefully it'll happen eventually.
Not at all. WYSIWYG never has worked well, and it's working even worse when your product is multi-channel or responsive, or mobile-first.

Sure, if you stick to simple things like paragraphs or italicizing text, it kinda sorta works, but people tend to go crazy with WYSIWYG editors trying to design an article layout of a text with them. Not a great idea.
That's pretty cool. Is there anywhere that explains what it all means?
Don't get mislead by the "lite" in sqlite. I can do about 200k sql requests per second with a sqlite inmemory db and node.js
What's the point of the Haproxy entry? It doesn't support SSL by design, and can be coulpled with a dedicated SSL proxy if needed.
I started some basic calculations in Google to find out what do you mean. So I converted 6.5 TeV to about 1 microjoule, then typed '1.21 GW / 1 uJ' to find out the beam intensity in particles/second, and realized that the first link is the Wikipedia entry for 'DeLorean time machine'.
This is one of my big things. I'm pretty into biking, so I go on longer rides during the weekends, but biking 5 miles each way between Mountain View and Palo Alto every day (for 50 miles total a week) can't be discounted.
Hi there - this is Zach from Lyft. Our support team has been responding to your original email to resolve this case.

We take security and personal information seriously, and did not leak credentials. The relevant teams within Lyft, including product/engineering, have been alerted of this case to continue ensuring the community's safety.
They are, as long as their ISPs don't block Baidu.
Amos (my first programming language), Euphoria (It's nice), Erlang (when you understand the erlang way, you seek it in all the rest of languages, something like with lisp).
That's too simplistic, and as expected wrong.

Some of those regions are known for being proud of their language and culture, so in case of similar specs and cost many people will chose a vendor that covers their native (or L2 but local) language instead of one that doesn't. Something to take into account is that e.g. Catalan (or Valencian or Balearic, you name it) represents between ~9M and ~11M native and L2 speakers (depending on sources).
What else... Oh yes, the regions where Catalan is official in Spain are among the wealthiest when considering the average income for its residents. That sounds like a good pond to fish for early adopters. Basques with even less population (and less L1 and L2 speakers, even in % than Catalans) are also among the wealthiest. The use case doesn't seem that narrow anymore, doesn't it?

Every single big company in Spain is able to communicate in any official language. Dude, it means business!

Finally, and I'm leaving a lot of stuff behind, people are usually not very thick skinned and calling the support of these languages "very limited use case" could be considered, well... inconsiderate at least.
This was my attempt to this problem: https://tls.li/. It's only a static page though.

I've started it after ioerror stopped merging important PRs to duraconf.
You are right, all your Reddit traffic should be encrypted, but the reason is not because it's a vulnerability, it's because you have a personal expectation of privacy, which is different from an unexpected or undesired incident in their information system.

Let's not forget that from Reddit's point of view, the browsing of the public content is not confidential, hence no need to hide it. Only your credentials are confidential, hence their transmission is configured to happen through a secure channel by default (if you're lucky). As long as it matches their security policy, it is not a vulnerability, per say. The vulnerability here is that Reddit 1) accepts authentication events sent through HTTP and that 2) Reddit keeps considering accounts as reliable after a successful HTTP authentication. We could also argue on the quite insignificant consequences of your Reddit account being hacked (for most users) in opposition to the disclosure of a password that you have not used anywhere else (isn't it?).

As a user, you believe that the Reddit pages you browse should be private, which led you to conclude Reddit is flawed. I agree that Reddit users' traffic should be kept private. But, we are still in an era where information security is defined by the expectations of corporations, not those of customers/users. The total cost induced by the fact that anyone on the same network as you can see your Reddit traffic remains lower than improving the security of the platform.

If you want Reddit to consider this as a "vulnerability", you need to either convince lots of users to stop using Reddit until they fix this (traffic volume pressure) or convince loud people to start shaming their owners on large audience news sites (shame pressure). These two strategies are the only ones that work, to my knowledge. As long as their business keeps running and there is no shamming, they don't have any real incentive to pull the source code and fix this: it's not a major security vulnerability. (the fact that browsers overwrite https cookies from http responses is a major one, though...)
India: police will use pepper-spraying drones on protesters
experimental email course with daily lessons explained with 5sec GIF's and step-by-step and actionable instructions.

Looking forward getting feedback
Given that the Chinese government could inject malware into any insecure connection you make across the firewall, you may also want to do most of your browsing through a virtual-machine.
Admins changed the URL from "Es" to "Gb". OP's comment was 3 hours earlier than yours...
How to donate to our fundraising campaign
You are ignoring the amount of time saved from motorized travel
Nginx config is missing stapling.
> s/Haskell/today's new JS framework/ ?

Or vim. Any books on neovim yet?
Rexx - http://en.wikipedia.org/wiki/Rexx
Limited weapons testing

That's not a very convincing theory.

For a proof of concept they'd only have to mangle a handful of requests without anyone noticing. There's no need to attract everyone's attention and inform your potential opponents about your capabilities.
Today the Apple Watch Platform Begins Its Evolution
During the programming languages course on Coursera they focused on SML for the first few weeks - while I haven't done too much with it outside of that course I really liked it
Some that I build (and use):

* albacore for cross platform builds with ruby https://github.com/Albacore/albacore/ C++.Net, VB, C#, F#

* suave.io http://suave.io F#

* logary for structured logging and metrics and health-checks http://logary.github.io/ C# and F#

* Chiron for F# JSON parsing

* logibit.hawk for F# API Hawk verification https://github.com/logibit/logibit.hawk/

* Http.fs instead of RestSharp for F#

* FsSql for ADO.Net interaction
How much do you weight? 280 lb squat isn't terrible - what was your bench? You should be aiming for 2x body weight for squat, 1.5x for bench
I started out this way, and eventually got into the sport of powerlifting, which is competition in the three main strength training movements (squat, bench press, deadlift).

I train 4x/week, 1.5-2 hours each. Being a weight class athlete keeps my diet in check, and I lean down to six-pack abs for the summer months when I compete.

Pushing eye-popping weights for maximal singles will get you injured (yes, even with perfect form), but I've found that's what it takes to get me off the couch.
The architecture of the Chromebook should allow Google to change their CPU preference at will. If Intel is producing superior price/performance then it would be stupid of them to pass it up. Having that flexibility will keep the pressure on Intel.
A missing point:

It is very common for management fees to follow an 2 and 20 Fee Structure.

Meaning they charge a flat 2% to keeps the lights on and pay outrageous salaries.
Then above a certain threshold an additional 20% of any profits earned.

Why does this matter?

IHMO this motivates funds managers to accumulate large AUM (Assets Under Management) to make that 2% larger. The fund manager is less motivated to make good returns since he knows he will still collect that 2%. So it might be better to remove the 2% flat fee and simple charge a percentage on the profits earned. This motivates the fund manager to actually generate returns before he makes a buck. Even if the market is going down he will still be motivated to outperform.
It is included for higher nginx versions.
The Apple Watch platform’s evolution will really start when Apple opens it to allow independent developers to build native apps later this year and designers master a new kind of app.
Yoga and Raw food diet. Plus I live on the beach in Costa Rica. Pura Vida.
@IgorPartola, sure thing (author of the conf generator here)! Go and and request it here ( https://github.com/mozilla/server-side-tls/issues ) and if you've got a lead on a canonical list of versions to work from that would help.
A 12 year old girl weighs about, what, 80 pounds? But sort of awkward to pick up, so I think it checks out :)
where can one submit bug reports for the generator.. is the code open sourced?

edit: i submitted issue #38 for a ui improvement. https://github.com/mozilla/server-side-tls/issues/38
I have a lifespan fitness TR1200DT machine. Got it off Amazon. I had it in my office for the first couple months, but then moved it home.
I wish. But really, it mess up a lot of thing.

Styles may be wrongly applied, javascript may bind to the wrong dom elements, etc.

Most of the time, everything look really good in the wysiwyg box but breaks in the website. That empty tag might have a padding that adds extra whitespace on the website. Perhaps you added a <h1> or <h2> tag without noticing and this empty tag gets added to your navigation as an empty element.

I worked on a project where the user was using and modifying the same content page for the last 5 years. The page was glitchy as hell. Trust me, it didn't even look like HTML anymore. Hell, at first glance the whole HTML code looked like a big regex.
Limiting Beliefs of Programmers
Some additional ones I haven't seen mentioned so far:

* FluentValidation: excellent validation library, keeps validation rules grouped together and easy to keep track of - https://github.com/JeremySkinner/FluentValidation

* AutoFixture: great for the "Arrange" phase of unit tests. Populates object graphs with test data, highly customizable. There's a bit of a learning curve. Pairs nicely with xUnit but can be used with any TDD library - https://github.com/AutoFixture/AutoFixture

* Shouldly: a different approach to unit test assertions using "Should" that I find more readable. Also had friendlier error messages when assertions failed - https://github.com/shouldly/shouldly

Shameless plug of my own library:

* Regextra: aims to solve some common regex related scenarios. Features a Passphrase Regex Builder to generate a pattern for passphrase criteria, and also supports named templates and a few utility methods - https://github.com/amageed/Regextra
I use sqlite to store all of my small datasets. Minimally, I think of it as a replacement for zipped CSV files. But it also has the added benefit of a relational structure and SQL.

It is super easy to access from julia, R, python, etc, so instead of importing a CSV and manipulating the data, I find it a lot easier to connect to the sqlite database and use SQL for the a lot of the joining and manipulating.