skysight-inc/HackerNews huggingface dataset:
>It doesn't satisfy the needs of the larger community.

Do you think there is a "need" missing in the larger TV watching community that must be addressed regarding the pace of releases? Should there be a vote after each TV show on how many days people need to think about the episode before the next one comes out?
This spent less than 30 minutes on the "newest" page, I wonder how many people saw it. No responses, and falling fast. Is HN a good place to recruit partners or colleagues? Not this time, it would seem.
This does not mean that SSL is available for the app. It means that the app currently happens to have an HTTPS endpoint that appears to work. This could be an accident on the BBC's part. As in, the app team requested HTTP and got a confirmation of HTTP, and due to a deployment quirk, also got HTTPS, but can't rely on that since next deploy might "fix" it.

Possibly.
Hey, this is Richard, the author of the post. All the feedback here is great, but if you've got thoughts on whether we should pursue this strategy or not, please comment on the mozilla.dev.platform list.

https://lists.mozilla.org/listinfo/dev-platform

https://groups.google.com/forum/#!forum/mozilla.dev.platform
I kind of checked out on this article once it lumped Go in the same category as OCaml. I mean, they're both less kludgy tools than PHP, but... they're still so far different in approach and philosophy and style and everything that I had a hard time taking the article seriously after that.
I agree it isn't, however it has been noted here that Valve has used Squirrel in some of their games including L4D2 and Portal 2. Also it has been used in FF Crystal Chronicles: My Life As A King as well. So much like Lua, it is used in video game development as an embedded scripting language.
It will just make it easier to create walled gardens, and charge companies and individuals for certificates. It will also pretty much get rid of privacy, since to get the cert you will need to provide someone with your detailed information. Using self-signed certs will become harder.
Yes, it's a good idea to use https _almost_ everywhere, but forcing everyone to use it is a terrible, stupid idea.
Even if you decide that you are okay with some leaks, you still want to know which employees / partners / journalists you can't trust.
not trying to discount this or my perceived intent of it, but i was wondering if any women could share specific examples when they were being mentored/coached differently than men. i understand that every individual, man or woman, responds to better to different communication styles.

i'm asking because i specifically want to know what unintended biases/habits I may have that i didn't realize.

thanks!
When I worked for an IT consulting firm I saw medium sized institutions (colleges, hospitals, hotels) save huge amounts of bandwidth by implementing transparent HTTP caches.

I totally am for securing POSTs, HTML, etc with SSL, but images and CSS, etc really make little sense.
Speaking as a former film/tv editor, one frame here or there can definitely affect the pacing and feel of a scene. Yes, sometimes external constraints—broadcast formats, licensing issues—can force compromises, but it's still an artistic decision where to cut a frame and where to keep one.

Much better to adjust coloring slightly in central but low entropy parts of occasional, appropriate frames, sort of like Omron rings[1], but designed specifically to be visually inconspicuous while surviving encoding.

The newish CineFence supposedly does something like this. In any case it wouldn't be hard to improve on the horrible Deluxe code.[2]

[1] http://en.wikipedia.org/wiki/EURion_constellation

[2] http://en.wikipedia.org/wiki/Coded_Anti-Piracy
Perfecto! Very well done. :D
HBO spins this into a marketing activity. Every news outlet seem to report about this leak. Remember some year ago, some HBO executive said that GoT was the most pirated show in the world and that it was better than getting an Emmy.

Not saying that HBO did leak the episodes, but they do benefit from all the free marketing...
Socket.IO also gives you things like cross-everything callbacks:

// server
io.emit('event', function (msg) { console.log('Client responded!', msg) })

// client
io.on('event', function (cb) { cb('This is my response') })

And it also provides socket namespacing, and "rooms" (a bit like chat rooms), and broadcasts, and a bunch of things that I don't use.

Sure, you can bolt all of that on in probably a few hundred lines, but socket.io also doesn't just do sockets and events :)

(And it also does it in less than 61000 lines. You still need the "ws" module to do WebSocket stuff in Node, even if you don't use socket.io)
Modern devops with docker
Best 10 Unicorns to Work For
HTTPS has never guaranteed that you were speaking directly to a given entity. In the case of a corporation, what does that really mean, anyhow? Your web request is being handled by the CEO him- or herself?

It only means you are speaking to a device or set of devices that the certificate-holding entity has authorized to speak for them. No certificate technology can prevent a company from delegating authority to another entity's devices.

It isn't that this isn't necessarily a problem... it is that there is no way in which certificates ever solved it, nor a way in which it can solve it, and there's no choice. Whenever you're talking to X.com, you are almost certainly also talking to a third-party web stack, for instance, which means that trust has been delegated by the certificate holder to some other party's software. There's hardly a website around that doesn't have a whackload (technical term) of third parties already in the connection anyhow.

The certificate-holding entity is ultimately responsible for what they do with your trust. But the certificate can do nothing to constrain those actions. It's just a glorified number with some other glorified numbers attached to it.

It does seem to me though that HTTP2 should actually make it easier to do without a CDN in the end, though. Initial HTTP2 support will just be "HTTP1, but on HTTP2!" which really provides minimal advantages over HTTP1, but over time as we see web frameworks start to take direct advantage of being able to push down resources preemptively, the advantages of CDNs for all but the largest sites start to fade. (Perhaps not "eliminated", but certainly lessened.)

(Incidentally, as people will presumably start releasing HTTP2 benchmarks soon, keep on eye on the details. Embedding HTTP1 inside HTTP2 is not the interesting performance question and will never have big gains... the correct question to investigate is what are the gains to be had from fully using HTTP2 natively. Many SPDY benchmarks had the same problem... of course SPDY isn't faster if it's still essentially speaking HTTP1 to the target website.)
As a further observation, it makes the GitHub attack an interesting case study. You now have to further route on the GET target, and if traffic is encrypted, the routing decision is moved to a later stage.

In order to protect latency to other GET targets, you're going to have to start doing interesting things.

One future solution I can see is multipath-tcp the anomalous traffic, and closing the original connection. But at that point you have to refilter based on genuine vs malicious traffic, and then there's the encrypted state you have to share for the proper stream handover. Ooof... what a nightmare.

At least it's an interesting one. :)
Author is plain wrong here. The big visible watermark is there for the psychological effect, not to trace the leaks. There's always a plenty of hidden ones. (Missing frames etc)

HBO will definitely know who they sent the episodes to, but that doesn't necessarily mean they know who leaked them.
The use of HTTPS doesn't destroy cacheability, it just requires that one of the legitimate endpoints authorize the cache to be there.
This is an Amazing idea. Great!! (y)
Not everything needs to be encrypted. It's not that hard to grasp.
Man Says He Can Make 20-Year-Old Rum in 6 Days
I recently set up a self-signed cert for a development site, and Chrome remembered it until I told it to forget it (so I could install a CA-signed cert).
The Obsessive Curator of the Internet
This Company Fought to Keep Your Taxes Complicated – And Won
Nate Silver to Vox: Stop stealing our charts
Forget Net Neutrality, What Americans Need Is Net Competition
Google also makes you actually smarter than you actually are, at least when used right...
In order for this to really take off a campaign with the popular basic plug and play hosting providers to install free/cheap SSL would be needed.
200 days at current usage. If the supply was cut off, of course, prices would go up and usage would go down. Prices going up would re-open a huge amount of U.S. production that is currently shut-in.
> $120 phone at minimum

Uhh, no. I've paid $50 for this (non-contract):

http://www.gsmarena.com/zte_blade-3391.php

And that was new and in 2010. There are tons of amazing phones well below $70, in particular in "developing" markets (like India) where they get some exclusive low end phones that are a bargain for the spec.

If you go look on Airtel's website right now, go mobile offers, buy now, then uncheck the filter at the top and organise Low->High.

They have a 4.5" Android Quad Core, Lollipop phone for $87. If you can live with KitKat then they start at $31.95. If you want a "nice" Kitkat phone then $65.65 will buy you one.

So, yeah, $120 is nowhere ballpark near the minimum. The minimum in the literal sense is $10 and the minimum with Android is $28.81. And that's just buying directly from Airtel, new.
you better decide what you are interested in doing first, then pick a language that suits best. if you want to do kernel/OS, choose C; for big data Java/python is the way to go. C++ thrives in middle-ware systems, like messaging/storage/databases/gaming...
It doesn't always look like King practices the brevity he preaches in his own work, this is one of the points that he's often criticized (in a snickering sort of way in literary circles, see http://en.wikipedia.org/wiki/Stephen_King#Critical_response). As an example I thought the first two volumes of the Dark Tower series, especially the first one was great, but the volumes got thicker and thicker later. However, just now I found a comparison of approx. word counts of the series with other epic series and his books do not seem to be excessively long (http://cesspit.net/drupal/node/1869/).

What I found really neat about King's advice is its practicality. This, I think, makes his points applicable to young writers as well as young entrepreneurs, esp. (1) and (7) can be combined to pg's motto of "Make smt that people want."
Ah, I see. Thanks for the update -- I must have missed the at-part. Thought you were "starting a company", not starting at a company :-)

It'd be interesting to hear which company it is -- I don't really know who uses POWER these days... email in profile in case you're more comfortable sharing that privately. I of course understand if you feel you can't do that.
No, it's a bit of trouble because security takes time to set up. To automate this, you would need a CA that is trusted by your (and the rest of your team's) browser that also creates arbitrary certs upon request. You can see why this is a bad idea.

Secure versions of this exist - and the security requirements they introduce are part of the reason enterprise IT is so much of a pain in the ass.
The Hockey Film Trailer (2015) – The Frozen Playground
You're an interesting dude and it would be cool to hang out with you.
You can get portable air compressors. The thing is, it takes some energy to actually compress that air... which invariably comes from either an electrically powered or gas powered turbine. You could theoretically drive this by wood gas in a renewable fashion. In the building of my workshop, I'm considering air powered tools for this reason. Though, to some extent you could drive an alternator and generate electricity to run electrically powered tools. I'm not sure what a wood gas chainsaw would look like :P
BlueCherry IoT platform opening
Right, it forces the cache to come from the content provider rather than being provided downstream by the client's organization.
Exactly, it's not like they were scoring William Shakespeare versus every other (possibly unknown) playwright alive at the time, nor do they have the training data they'd need for it.
As I understand it, much of the "battery breakthroughs" are generally along the lines of attempting to create a balance between capacity, discharge-recharge rate, safety and cost. The conversion efficiency of most batters is pretty good, it's making a long lasting, high capacity, quickly discharging/recharging and safe battery that's also cheap that is difficult.

While pretty much everything above is related to chemistry/conversion efficiency, I was just trying to define the efforts a bit more along the goals.
In the case of rust, there are a lot of chemical similarities between it and hematite (though contamination with iron hydroxides might be a problem), which might (theoretically at least) make it potentially suitable for smelting into pig iron. I don't think any existing industrial processes do this, though.
But Farmers book solved it in an 'act of god' like manner by using lightning and something akin to a high voltage supercapacitor used to catch the lightning.
> Create a website for free (you have to pay for certificates to use HTTPS)

No you don't. You can get free certificates.

But even if that was true, it's still a misleading argument. You can only make a website for free if you are OK with your website not having a domain name and running it off your personal laptop with electricity paid for by your roommates/parents. For any actual website, there are already a multitude of real costs of which a certificate is just one more.

> Report sensor data from small embedded devices with extremely limited CPU

If your CPU is really so limited then why are you using HTTP at all? Use a custom binary protocol with or without encryption as appropriate.

> Your JS can talk to APIs that don't yet support HTTPS (e.g. NextBus).

Then those APIs suck - avoid them and/or ask the providers to get with the program.

> Transfer large files at gigabit speeds on consumer-grade hardware

AES-NI can decrypt at 3.5 cycles per byte. With modern consumer grade hardware you will not find symmetric streaming crypto to be a serious bottleneck.
Araji was the source of the NYT article; what I find interesting is the rhetorical trouncing dispensed by Hitchens.

Although the essay was published in 2005 and Hitchens died in 2011, were he alive today, I highly doubt he'd have much to say in the defense of Hillary Clinton, considering he wrote the book "No One Left to Lie To: The Triangulations of William Jefferson Clinton."
WFH doesn't just pay off in productivity, it pays in compensation, too. Our latest survey shows that full-time remote devs get paid 40% more than never remote devs:

http://stackoverflow.com/research/developer-survey-2015#work...

There are probably a few reasons behind this phenomenon, not least of which is richer countries outsourcing to cheaper countries. But even in wealthier countries, remote devs get paid more.

No surprise then that more developers are working remote than ever before. This year 29% of devs told us they work at least part-time remote vs. 21% last year.
An average user doesn't know what an API is.
This is definitely worth a read through. This is a topic that fascinates me endlessly. Thanks :)
yeah I thought this was the case too. no one in the industry, let alone the people distributing one of the most popular and leak-sensitive shows of all time, is going to rely on just a logo in the corner.
How a bacterial cell recognizes its own DNA
In Soviet Russia Siri Questions You
Amazon's service is fantastic; I buy from them even if they're a little more expensive purely for the service.

I have a Paperwhite and I couldn't be happier with it. It's the best manga reading device I own and it does a pretty good job with PDFs.
It's really hard to take anyone seriously when they accuse Apple users of being "believers" or being "brainwash[ed]". Do you honestly believe that there's a large chunk of Apple customers out there (some even imply a majority of them) that only use Apple products out of some religious fervor or slavish devotion to the memory of Steve Jobs or whatever other justification you want to use? If anything, all of the Apple users that I know (and I know a lot) are more prone to be critical of Apple products than anyone I know is of any other company's products.

(edit: That's actually a serious question. I genuinely don't understand why people try to make this argument)
Are you sure?

Probably Baidu thought the same thing about their Javascript. It's a public file, so why use HTTPS? Then they got turned into the Great Cannon and now they're being described as a weapon of the PRC in major newspapers.

It's obvious that governments are systematically weaponising any non-SSLd connections. If you don't use SSL, you're making it easier for them to hack your users and turn your website into a weapon. If you wouldn't let botnets run wild on your servers, you should take the same care to encrypt your website.
Generally, I think this is a bad approach. I think that configurable blocking of HTTP with user-controlled (or, for managed environments, policy-controlled) opt-in to allow HTTP for safe domains makes some sense. But not deploying new features for HTTP and limiting existing features on HTTP does not; true, one could set up a root CA and deploy certificates and manage TLS for internal, including local-box, testing, etc., but it doesn't make sense for browser to require it.

Configurable blocking of HTTP provides all the benefits of HTTP deprecation without the adverse side effects for the situations where HTTPS is an unnecessary headache, so it should be preferred.
> Deescalation of cyber capabilities and activities.

Asking everyone to please stop exploiting vulnerabilities hasn't worked for non-state actors. What's different this time?

The internet community needs to adopt better protocols, hardware, and software. The development of attack capabilities force that to happen.
Yes, but they actually provide a very small amount of current per weight, as it's just a decay pile creating heat which is then fed into a TEC, which have very low efficiency (like really low something well below 10%).
Can we reboot a modern civilization with less consumption, less work but for all, and more free time?
Media Lab Director Joi Ito Wants MIT to Lead the Bitcoin Ecosystem
Except that there are initiatives (Research4Life, HINARI, AGORA, etc) to get free access to researchers in the developing world, especially Africa. If you move to "open access," African scientists won't be able to get published.
Show HN: Find movies worth watching on Netflix, Amazon, iTunes, and HBO
i like this.
Maybe you ought not cite irrelevant statute?
From what I'm seeing, it rarely dips below 50 seconds. So taking an average time, it could be less than a year.

Also, assuming that if it hits 0, the game is over. So it could be over in a week or two once the focus dies down.
Doesn't HTTPS require a dedicated IP address? With the exhaustion of the IPv4 address space, the timing couldn't be worse.
Love this article, but I'm not sure the origin of the sloppy practices described there always originates with the VP/Eng, CTO or CEO. I've worked with plenty of engineers who just don't want to write tests, or tighten up code, or expend the effort to socialize their ideas/accept others. The higher ups might not have the visibility, inclination (or time!) to focus on those issues and encourage best practices, but I don't always detect acts of commission from them to subvert best practices.
The recent disabling of TLS1.0 on so many sites means I'm finally going to have to upgrade my cell-phone, as there aren't any TLS1.1+ supported browsers for PalmOS.
Schools do strange things all the time; they'll want to allow YouTube and block Google Drive and Dropbox (because, heaven forbid a student download an arbitrary .exe onto the school's Windows computers and run it, but for some reason opening notepad to create a .bat file locally is perfectly OK).
Right, that's my thinking...it's probably not a huge deal for most applications.

Even better, if the available power is low, just run things slower. Does web browsing really need all .8KW my desktop can drain out of the wall?
> Our latest survey shows that full-time remote devs get paid 40% more than never remote devs:

Does that prove that WFH pays off in compensation, or does it prove that only the most valuable devs (who could get the highest compensation whether they were on-premises or remote) can get full-time remote gigs?
>* Transfer large files at gigabit speeds on consumer-grade hardware

Can't modern hardware do AES at slightly over a gigabit per second per core even without the pervasive 10x accelerators?
APIMATIC is awesome
Hacking the Performance Evaluation
Could you clarify a little? If you are talking about Github in particular, wasn't Baidu an innocent party who had their scripts man-in-the-middled by the so called "Great Firewall of China" to trick user's browsers into being part of a DDoS?

It is no different than if the Google Analytics script got hijacked in the West.
That's a heck of a lot more complicated than

python3 -m http.server

and then opening http://[::1]:8000/ in your web browser.

But then again, carrier-grade NAT means that anyone who is tinkering like this has to do some sort of NAT-punching to show their work off to a friend, so maybe this could be solved by an automated wrapper ala localtunnel or ngrok.
If the problem (CO2 pollution) is considered serious enough by multiple governments, Government A can join forces with Government C, D, and E and form a trade agreement against B. They can create a trade embargo against B, or have higher customs tax for products from Government B or other kinds of trade sanctions.

Isn't this just international politics 101? EU and US have trade sanctions against Russia at the moment. UN had embargo against South Africa during the apartheid. Environmental issues are no different.
and you can burn 1 cord per acre per year without depleting the forest at all... the trick is to keep consumption to no more than that.
The title is link-baity (but matches the article). Perhaps it would have been more helpful to link to the actual research:

http://www.apa.org/pubs/journals/releases/xge-0000070.pdf

with the better (though I think still not quite getting the point) title Searching for Explanations: How the Internet Inflates Estimates of Internal Knowledge.
The last couple hours I hacked together a chrome ext that notifies you whenever anyone presses the button (oh god) and also can run a robot to press it for you. It works, tho I don't claim there's no bugs.

The github:

https://github.com/humanarity/reddit-thebutton-push-it

And the Webstore:

https://chrome.google.com/webstore/detail/rthebutton-robot/m...

Check it out! :)
No, they fixed that. The hostname is sent before the cert is chosen.
Agreed. Amazingly, some of them are even "technical", but have no concept of technical debt, and zero respect for software engineering practices that don't lead directly to new features. Either they never understood these things in the first place (since this is usually not taught as part of a degree in CS or EE) or they've long since forgotten them.
Imagining Basecamp on Apple Watch
> set ground rules

Oh wow, I wish I could enforce that ;)
IE11 was fairly modern when it came out. It will likely be legacy long before IE12 or whatever they decide to call it comes out. They're not really going to be able to play keep up until they divorce the browser from the OS. Given that this is Microsoft it is kind of funny that this is their problem now.