skysight-inc/HackerNews huggingface dataset:
> Use a pre-existing cryptography package that has been written properly instead.

Okay, name one that has been written properly that the average web developer is going to encounter.

I'm going to focus on PHP because that's what I know best, it has an enormous market share, and I'm not a fan of blowing smoke (which I would be if I tried to speak to, e.g. Perl development).

PGP? OTR? Axolotl? These aren't part of your standard dev environment.

Mcrypt? Hasn't been touched since 2007. There is at least a patch for a bug in the 64-bit implementation of CAST-256 that has been sitting, unmerged, for six years.

Libsodium is the best we have, and you need PECL access to install it.

OpenSSL is labyrinthine. http://stackoverflow.com/a/29331937/2224584

It's still messy, despite the past year of attention from the security industry, but it's getting better.

This library offloads its underlying cryptography to OpenSSL because it's the best we got:

https://github.com/defuse/php-encryption/

Maybe Python, Ruby, and Node developers have better options available to them. But 83% of the Internet runs PHP, and having a properly written cryptography package just isn't a trivial bar to leap over.
Also, your bug is going to be with the stuff they announced at the last WWDC, and there's a fair chance that they just came out with a bunch of new stuff that obsoletes it.
I completely agree. I've used Slim in lieu of Laravel for a number of small API projects. I'm excited about porting them over to Lumen.
> (why isn't this a separate npm module, btw?)

It is[0]. It's a dependency of browserify.

If you don't use it, part of the concat+minification step prunes dead code.

> To make my own privately held modules and install them properly, I have to run a npm server? This seems like an awful lot of work for something as basic as this. Ok, so now I can use the cloud for this, but come on, I should be able to do this just from within the filesystem, like e.g. git does it.

If you don't care about having your package published somewhere other than your local machine, you can use npm link[1], or `npm install <directory>`[2].

0. https://github.com/substack/http-browserify/

1. https://docs.npmjs.com/cli/link

2. https://docs.npmjs.com/cli/install
Does anyone remember DotComGuy? (not to be confused by the similarly named Kim of recent fame) A man with the audacious goal of staying inside for a whole year and just ordering whatever he wanted off the internet.

Perhaps not so impressive now, but in 2000 it seemed pretty futuristic. I wonder what crazy social experiments are happening today that will seem normal in 15 years.
That's not their sole responsibility. They also have laws to obey, and as the article points out, this behavior seems to violate their own ToS.
Republicans seek fast-track repeal of net neutrality
Nope, anasthetic. People without any background in medicine frequently confuse the two.
They don't have money. Remember that nobody wants to employ them?

The only inherent character of a market that gets very narrow is that it's narrow. The amount of wealth created depends on, well, how much wealth is produced, not on how many people are available to buy it. If you don't need people to produce wealth, those two things may have no relation at all.

People are making a huge effort here to assure that no, there's no problem. Yet, both Economis and History say otherwise.
Currency is the intermediate trade good. Currency is only worth what you can buy with it.

If nobody makes anything, no amount of money can buy anything.

If the only people making things are the rich folks who own production capital, they can only trade with each other. If they are not producing the things that rich people want, they can't trade.

Imagine a degenerate world where there are two rich factory owners and 7 billion unemployed people. One rich owner produces food with robots, enough to feed the whole world at $0.01 per meal. The other produces potable water with robots, enough to supply the whole world at $0.01 per cubic meter. Every day, one richie trades a day's worth of meals to the other, who trades a day's worth of water back.

The 7 billion povs can produce food and water, but they cannot compete on price. Even the cheapest pov-made food or drink trades much more expensively than the factory goods. Their problem is that very little that the povs make is worth anything to the factory owners. They, too, would prefer to get their goods from the factories.

Every last pov is relegated to subsistence production, for personal use. The only way out is to produce a trade good or service that a richie would prefer to richie-made goods and services.

In this degenerate world, the most commonly sold service is likely going to be "not murdering you in your sleep and taking control of your factory the next day".

And that is why it is important to care about what people can trade.
Is it a herd mentality if smart people on file systems say HFS+ sucks, and other people believe them? Because that's pretty much the case. If the herd follows the experts, that's a good thing, right?
I've done something similar using Haskell: https://github.com/agrafix/yahoo-finance-conduit
I tried to do this using a streaming approach (conduits), but the data is delayed and there is no real streaming api.
To fight income inequality, tell your friends how much you make
There's a big difference, calling someone "boy" or "girl" instead of "man" or "woman" is demeaning. How often do you honestly refer to male engineers as "boys"?

> don't care enough to pay attention

Surprisingly, it doesn't matter how much you care.
Calling something pedantic typically comes with a negative connotation. The above comment raises a fairly reasonable point, pedantic or otherwise.
Interesting, I'd heard it mentioned a number of times and I just assumed it was true.
The biggest advantage I've found to attending is the total focus that being there brings.

In other years I've watched the videos, but it's just not the same as going. When you're there, you're committed and (at least for me) it's about soaking in a semester's worth of information in a week.

Plus, you make stronger connections with developers you've maybe only talked with online. And the party is fun.
It's nice that Isaac doesn't want to, but what if the VCs decide he should? Do we know what the ownership breakdown is at this point?
"performed list" on the BIOS? How did that work, exactly?

In the very early days of the IBM PC, it wasn't so easy, alas. I guess they could have used DEBUG.COM to get a dump, but this isn't quite "performing a list":

http://www.mess.org/dumping/dump_bios_using_debug
Do I just not get the scale? For this investment to make sense, they would have to get to $100s of million dollars, but by charging a few thousand companies $7?

And I'd say there's a 50/50 chance node will completely collapse within 10 years or so. And that's being generous, javascript is a controversial language and the standards committee moves very slowly. I honestly can't see it staying king once browsers can support other languages. You only have to see how fast Ruby was a darling and even now might be regarded on its swan song, less than 10 years later. Tech changes, the next big language will hit soon.

Congratulations to them and all that, and great product, I'm just wondering if someone can explain the sense in investing so much money into something like this? As this seems an incredibly risky venture?
IBM partners with Apple and Johnson and Johnson as it pushes Watson into medicine
I would like to ask you: why?

Why does this make you feel annoyed and accused?

Do you take the time to check your behaviors, talk to women (with humility), ask their stories, and see if you have done the wrong things (even accidentally)?

When I read something like this, it doesn't make me feel accused at all.

It makes me feel sympathetic to anyone who'd be compelled to write this.

It also makes me think, "I'm glad I have already gotten over my defensive posturing, because there was a time when I was more ignorant about others' struggles, and would have taken offense at this."
1. Why? An unqualified blanket statement does not prove anything. SPF, DKIM, DMARC provide strong cryptographical ties to a specific, real, and verified account holder. DNSSEC provides domain level certification. So, with all four items, there is a very strong assurance level of the validity of the email account holder. Do you honestly disagree?

2. Can DNSSEC be re-directed to incorrect public keys? Sure. But DNS can be pointed anywhere anyway. DNSSEC does no extra damage. And exploitation of DNSSEC enabled domain records is very easily discoverable by the domain holder, since the public key will no longer match the domain's private key... which is still very much in the domain owner's control.

3. Much of cryptography dates to the 1950s. This '90s cryptography stuff is pure nonsense.

4. Only if you don't value the hard work by many smart people over a long time.

5. OK. Denial of service is a bad thing. If you have a worldwide network, you are going to have denial of service. Mitigation is possible... maybe instead of throwing out other people's work, some resources could be used to improve what's already out there... ah... but then back #4.

6. Yes it is.

7. Revealing hostnames is only a problem if a domain is seeking to hide hosts. So, this particular issue is domain level dependent -- why not let a domain owner speak for him/her self?

8. Again with the 'old' is bad 'new' is better? Got anything else?

9. Wrong. SSH public keys, Email public keys, DKIM public keys... check your email headers from Google... they all have "unprotected key" because Google doesn't use DNSSEC -- the large provider host hiding problem is most likely why.

However, for a small domain, DNSSEC is terrific.
Saying "it's the wrong tool for the job" and hating on it are two different things.
The dollar sign usually only bothers me after I've gone away and written a little Python. Actually, has anyone ever tried a 'CoffeeScript for PHP' that removed the dollar sign, replaced the `->` with dot syntax, and smoothed over the various other syntax features that people complain about? Not that I'd think there'd be much point really, apart from being a fun project.
Big Code: Developer Infrastructure at Facebook's Scale
You are totally right and this article is plain wrong. Troll face was actually stolen from the Cool Face comic on Deviant Art (he says so in the description). Anyone who was on the /b/ around 2008 knows this. When the word got around that Troll Face was in fact Cool Face, someone decided to make a new Troll Face : http://i.imgur.com/47dh8SQ.jpg

Source : me and http://knowyourmeme.com/memes/trollface-coolface-problem
Get Jon Duckett's books.
http://www.amazon.com/Jon-Duckett/e/B001IR3Q7I
What level are you looking for? There are a lot of ways to define that stream. Last trade, book data, etc. What degree of latency is tolerable for your application?
CliqMeet is a video conferencing product. Twilio is offering an API to allow you to build your own products with WebRTC functionality built-in.
What level of an event would have to happen for people to stop using facebook?

I'm just curious to the community's impression of the level of tolerance the general public has on these matters of privacy.
Ok, I get it. What about 500 startups?

But you're right Being in Boston or Boulder can be quite different.
Gawker's gonna Gawk
SpaceX may well land a rocket on a small barge in literally a few hours. ULA may test similar technology in 3-5 years.
Considering that nowadays every tab is basically an independent application (in Chrome, literally), if you have 20 tabs open is equivalent of having 20 separate applications open, it's kind of pointless complaining about RAM usage of the "web browser".
Nobody is asking your embedded systems to support unnecessary functionality. At worst, you are going to have to one time go to about:config and change enable_plain_http from 0 to 1. Then for you life goes on as before. Is that too much to ask for much greater security for everyone involved?
SSL. Also, all ISPs can do this.
Slava, CEO @ Rethink here. There are two aspects that you should consider.

Firstly, as Daniel pointed out, RethinkDB is licensed under AGPL. An acquirer wouldn't have the legal means to close the source code, and with over 700 forks on GitHub they also couldn't do it practically.

But beyond licensing, consider our personal motivations. We've been working on RethinkDB for five years, and had quite a few opportunities to sell the company. We turned them all down because we really believe in the product. The world is clearly moving towards realtime apps, and we feel it's extremely important for open realtime infrastructure to exist. It's easy for people to make promises about the future, but consider this from a game-theoretic point of view. If we wanted to sell, we could have done it long ago. I know it's not a guarantee, but hopefully it's a strong signal to help with your decision.

(Also, there are lots of really interesting companies building products on RethinkDB that we can't talk publicly about yet. It would be silly to sell given that momentum)
That makes sense intuitively, but you can't approach cryptography intuitively. There are many cases where the intuitive answer is "well, the worst case is that it's just as good as without our custom wrapper... so let's do it." But under cryptographic analysis it is revealed that the custom wrapper renders whatever other good, accepted cryptography that is in play completely useless.
I think this a good place to say thank you for you're work on the Go Rethink driver.
This is a clear written easy to follow and effective peace of code.
Lightning on wheels: the insane electric racing of Formula E
PHP makes for fast development, even if there are languages out there that offer faster execution.

Laravel has been ~100% HHVM compatible for a while, so you might not even have to worry about execution speed if you go with Lumen.
Repeating yourself doesn't answer my question as to what makes the statement wrong. The more interesting question to me is why there are so many sources, including many government documents, referring to it as a veterinary tranquilizer going back almost 50 years if it does not have that effect.
You might not have intended or meant to say that, but I parse

"You might have been held back due to gender- I can't possibly know. But I wouldn't consider it a bad thing, probably the extra fight taught you to appreciate what you were learning in the first place."

the same way as your parent comment. Just a heads-up.
It should be out later today. We're working on it now.
To go a step beyond that, saying "amoral company" is redundant. ;)
Not sure how actively maintained it is, but you could try Mammouth: http://mammouth.wamalaka.com/

My only hesitation with it has been that you need Node.js to compile it to regular PHP -- it offers no analogue to coffeescript's eval-in-browser mode for development.
>Shouldn't that make it public domain?

If that were true, wouldn't every copyrighted image or torrent posted to 4chan automatically lose its copyright status? IANAL, but in the US at least, copyright is automatically held by the creator of a work whether or not it's explicitly licensed[0]. Posting something to a forum doesn't affect the rights held by the owner in any way, at best it just ignores them.

>Also, 4chan doesn't keep archives, how do we know he's the original author anyway?
There are a ton of sites which keep archives of 4chan threads.

[0]http://www.nolo.com/legal-encyclopedia/copyright-automatic.h...
I think it is mostly Carbon apps that break with case sensitivity.
Doubtful, as O2 is first and foremost a chemical compound and as such it seems hard to claim any trademark outside of very specific trade areas. Since this engine has no ties to the telecommunications industry, I highly doubt it will be a problem.

In fact, they lost a court battle recently to Hutchinson 3G over a 'bubbles' trademark that O2 holds.

http://news.bbc.co.uk/1/hi/business/7450513.stm

The relevant portion of the trademark (https://inventively.com/search/trademarks/78618164) is as follows:

interactive entertainment services, namely, providing online electronic games services by means of any communications network;
Show HN: SQL to C translator for SQLite
There is a lot of misinformation about this.

I believe it is on purpose for political reasons.

http://www.factcheck.org/2012/06/obamas-77-cent-exaggeration...
Warning Signs of Reading Problems
Fixed formatting a little here:
http://shortText.com/6308c7af
I wanted to engage with this but I'm having a hard time getting past:

the internet almost certainly improved the viability of social economic systems by a factor of 10 or so

Certainly for me, arbitrary, dimensionless quantification of an essentially unmeasurable factor casts the rest of your post in a bad light.

Still, basic income isn't entirely good: it denies people the ability to meet a basic need - that of being valued for their contribution to society or some other enterprise. In other words, it replaces the good feeling of doing honest work with a kind of glorified unemployment benefit. While it would be good culturally (by allowing those of an artistic bent to pursue their craft, for example), it's not going to do much for the mental well-being of most of those laid-off factory workers.

As far as your point on communes, can you elaborate on how rent seeking is going to get comparatively more costly? What particular types of rents were you referring to?
Congrats on the 2.0! It's been interesting to watch as a project.

Do you expect that as you stabilize you'll officially support more drivers? Or are you going to leave that as a community effort?
Show HN: How Zalando's Mobile engineers support 14M customers
How the packaging copy for Panasonic's Eneloops affects sales
You see a lot of people with PhDs and MBAs on the side outside of the typical HN startups space. You might be surprised at how many PhDs also have an MBA, but just don't advertise it since their other credentials are more important.

For example, it's not uncommon for a researcher to come up with some great idea at a lab somewhere, quit, form a company (with him as CEO) and license the tech away from his former employers. In order to give the investors more of a warm fuzzy feeling about the competency of the guy running the company, they'll often have him do an executive MBA program while the company is still early stages.

In megacorp-land, PhDs for senior execs are reasonably common as well, and it's desired that they also have excellent business education -- so you'll see lots of MBAs in executive resumes that they picked up somewhere during their careers.

I haven't usually seen it as part of the education progression, it's treated more like a specialized certificate or accreditation program when people are moving out of researchy roles and into business ones.
Well, look at Palantir. They are a very large privately owned and VC funded company with no plans to pursue an IPO.
If you care about them and want them not to be offended, you'll change your behavior.

If you don't care about them and don't care if they're offended, keep on doing whatever.
WebRTC needs p2p for group chat, and it'd be unstoppable.

Currently using Hello for one-on-one conferencing, but need something that both scales and doesn't require a centralized server. Considering Skype had this ten years ago, it's obviously doable.
Now that 2.0 is production ready, will we be seeing some RethinkDB providers? A simple Heroku integration would be amazing for quickly prototyping apps with a new database technology.
llvm used to (removed with release 2.8?) include a .net msil backend -- Maybe they could add it back and go full circle -- use LLILC to load your MSIL and compile it back to... MSIL.

https://github.com/llvm-mirror/llvm/tree/svn-tags/RELEASE_27...
Project Tycho, ggplot2 and the shameless stealing of blog ideas
D3_handwriting – Attempt to create 'real' handwriting glyphs using D3.js
The surprising downsides of being clever
FoundationDB was a closed-source database. It was never open-source.

They had only open-sourced the SQL-Layer on top of their key/value store and it's still available on Github. The reason: They build it based on open-source code

When someone deletes a public repository on Github, one fork remains as the new master. (Here's FoundationDB's SQL-Layer: https://github.com/louisrli/sql-layer)

So: RethinkDB will stay, even if someone tries to pull the plug. Just fork them on Github. :)
Exactly, you have to exchange public-keys via another method - which is also potentially vulnerable.
What were you using before? What are the pros and cons of the switch?
You could probably take my stolid inability to get the joke as some sort of commentary on the quality of the humor.

(which sounds really hostile, I'm feeling lazy about phrasing it better, I don't mean it to be hostile, of course humor is subjective, blah, blah, blah)
Thank you very much! I hope to have an update to the Go driver which supports RethinkDB v2.0 within a couple of hours.
They just told you: Bluebird and streams 3. Did you get bored and stop reading?
Fake-ish story; first published in 2012; see Snopes.Com
Why would I use RethinkDB instead of OrientDB?
Ask HN: Career path, technical or management?
I'm currently working as a project manager and there's this opportunity to move to a technical position that will be working with multiple new technologies for me. I currently have no stress in my current position and only work with excel, visual studio and other microsoft technologies. I still don't have one year in my current position but I'm bored almost every day with the stuff I currently do. This other position will have me fully occupied and I know I will learn a lot.

My concern is... I wish to keep growing into a management position but I also want to keep up to date in newer technologies, so if I stay in my current position I will have the opportunity to climb the career ladder, but if I change positions I will be able to learn more.

Any recommendations or similar stories?
Don't give up on your dream
If you treat a credit card the same as cash, then there is literally no difference in how much you should be spending, but you need the discipline to actually do that.

There are a number of benefits to using credit cards that cash doesn't have:

1. Build a credit score

2. Fraud protection

3. Related to 2, but if I lose my card it's not a huge deal, cancel it and get a new one. If I lose 300$ cash, it's just gone.

4. Rewards! ( 1-3% back on 20K spending per year is a few hundred bucks )

5. Extended Warranties. Often times, you can get an extra year or more on warranties through your credit cards. That's why I put my new kitchen appliances on my Amex.

6. Free loans! I re-did my kitchen last year at about a 10K cost. Although I had the cash to do so, I instead signed up for a new card with 18 month 0% interest. That gave me another year and a half of saving before paying that off, so it's less of a hit to my balance at once. IMPORTANT I would not have done this if I did not have the cash to pay this off at any point in time.

It's really, really simple too - just pay off your statement balance in full each month and you'll never pay interest. I can count on one hand both how many times I've paid interest, and how much I've paid in interest. All of them were due to my own screw ups with scheduling payments ( off by a day - oops! ), however I've benefited far more from the cards than I've ever paid out. In most of those cases, the banks waived the fees anyway since there was a track record of 3-5+ years of never missing a payment, always paying in full.
Darpa developing remote wireless sensors that use almost no power