skysight-inc/HackerNews huggingface dataset:
SpaceX Launch livestream (starts at 12:50PDT)
What is it about this submission?

https://news.ycombinator.com/item?id=9363321 by awwstn2

https://news.ycombinator.com/item?id=9363938 by awwstn2

https://news.ycombinator.com/item?id=9364069 by awwstn2

https://news.ycombinator.com/item?id=9364378 by awwstn2

https://news.ycombinator.com/item?id=9369221 by readthisthing

https://news.ycombinator.com/item?id=9370196 by readthisthing
Looks like the devs jumped in on the comments on the PR and want to do it.
I assumed it would. But I'm thinking socket.io would provide better client support and have been looking at meteor as a way to get something built fast. Going Roth a prototype first as I have a lot less time to do this stuff these days. I'm about equally proficient in both go and node which is to say I can stumble my way to a solution with both.
I like this puzzle because it's the same train of thought as this old joke:

Three logicians walk into a bar. The bartender asks "Do you each want a drink?"

The first logician says "I don't know."

The second says "I don't know."

The third logician says "Yes!"
It may be that, while you're telling women to drop this aggressive narrative and play nice, they may reply by telling you that being nice hasn't worked out so well so far, so it's time to try a different approach.
Windytan is one of the coolest hackers I've ever met.
Friends, two of us dreamt about creating a startup in 2012. We were young at that time - just 22 and 23 years of age, and we came from two different countries - NewZealand and India. We have built something that we believe is one of the most data intensive yet powerfully collaborative. Can't wait to share it with the community here. Do read and let me know how do you feel. Show us some love if you got a hint what we have built.
Why am I getting this strong deja vu feeling? Hmm. Oh, now I know! These were exactly the type of problems we were attacking, and solving, 25 years ago when we were creating Erlang. How you build concurrent, fault-tolerant and non-blocking systems with low-latency. And about 10 years ago there came implementations of Erlang which handled multi-core transparently and provided things like load balancing automatically.

I would say you would have to have really extreme requirements to handle those type of things yourself.
Hi,

I went to BattleHack Austin two years ago (and then to the world finals in San Jose), and really enjoyed it.

I would say that it doesn't fit into any of those categories - it's not a business pitch-a-thon, PayPal doesn't own your code, and it's not a recruiting deal either. BattleHack is still the best hackathon I've ever been to.

They're doing the BattleHack hackathons to raise awareness of their developer programs with coders, for a company like PayPal, it's not a lot of money to spend.
> other conversion sites out there

Was going to say...

But yeah, it looks much nicer. I'm mostly using slim these days - on personal projects at least.
Interesting, thanks. My sources are no better than yours; it was news to me to hear that there is disagreement over this.
I still need to be convinced that those two methods can produce enough to even reach a point of surplus to be stored given our energy needs and projected future needs.
If utilities install these batteries near the last mile, would that also cut down on power outages during storms?
'Softwarization' of Everything: Preschool Resources as a Service
The output of KC is not necessarily completely random. It can contain some metadata. Like "encrypted with KC4096bits, initialization vector is 490282348992489, length of ciphertext is 26728 bytes".

When you pass this through a bad cipher it may create a characteristic fingerprint.
Larry Fink letter to CEOs
I think that most people who look inside the tank and spend a few seconds analysing what happens when you flush have a pretty good idea how that part works. But it's the other end that's more opaque (literally.) What makes the bottom half of the toilet work, where the real magic happens? I think that's the part that most people would struggle with since few of us have transparent toilets and the internal structure isn't always obvious from the external shape of the stool.
yeah we indeed share some checkpoints with GPS (because we're using it, and YSlow too)

Thanks for this great feedback, and thanks for your point of view about registration, that's very valuable for us to have both sides, that's a difficult choice (anyway, inorder to offer the free monitoring,we need an email address!)
Random idea, if batteries are cheap enough could we charge them up and ship them on trains back forth instead of building high voltage transmission lines?
That's a good one, since it makes enumeration from the start prohibitive.
Well, the ability to call a set of functions (really, to overwrite a vtable pointer with a constrained set of values - which is a table of function pointers your C++ compiler emits to handle virtual function calls) is the underlying vulnerability. The article describes a proof of concept exploit - an approach of turning this into a concrete security problem (arbitrary command execution/calling libc).
We all know that ideas are important. As they say, ideas are like bulletproof. But we believe that ideas come in all forms and they are better when collective/collaborative.
Can't wait to share it with the community here.
> there are a few people who do this for a living somewhere on HN.

And Daeken would still be right.

You skipped over daeken's point, which would stand on HN or crypto.stackexchange.com where there are undoubtedly people more qualified to talk about crypto than HN.

Crypto is impossible to know if you got it right. Read that again. It's impossible to know that you got it right.

If you get it really wrong it'll be obvious to a competent cryptoanalyst, but if you get it a tiny bit wrong, and this is computer security related, so 'tiny bit wrong' is likely bad enough to render your protocol unusable, then it won't come out at first or second glance, and may even stand up to some fairly rigorous scrutiny.

Even RSA which has stood the test of time since 1977, is only considered 'safe' in so far as there's no algorithm better than brute force for factoring products of large primes - if someone came out with an algorithm tomorrow that trivialized factoring numbers, RSA would quickly get moved to the 'unsafe' list. And that's just on the crypto primitive.

There's all sorts of manner of other attacks against an implementation of a protocol to be considered too.
Are you just attempting to argue the pedantic point that some theoretical subset of homebrew crypto applications may actually be secure? Because taken as practical advice your position requires a lot of awfully strong assumptions.
I am not sure where you are getting this from, though it is very probably I wasn't completely clear. To clarify:

I believe all content (banks, GMail, XKCD) should be served over HTTPS and protected by a trusted certificate. Self-signed certs are not trusted and should not be (the problem of "should GMail give me a self-signed cert?" cannot be solved; you need some type of external trust).

Notice, I am not saying trusted and signed by a CA. We can replace the trust model and do something different to fix the currently broken CA system. However, I never argued and am not arguing that some content is OK to be served over plain HTTP.
If what you're saying is true, then where was the source of the "leak"?

Perhaps you won't say, exactly, without the OP's permission?
They could also have used a real encryption method like AES.
Bingo.

At that point you've hit on the essential purpose/elegance of static types and a compiler :)
Maybe so. The paper mentions that they then used the CD-ROM The Way Things Work 2.0 to give their test subjects a more accurate view of how these things work. I actually gave one of my nephews a book from that series (The New Way Things Work) a few years ago, though it mostly covered the mechanics of things.

If the confusion was over things like "how does the siphon work" or maybe "why does the water swirl when it flushes", I think that'd be more understandable.
>This leads to what seems to be a paradoxical situation. A battery that is more expensive than the average price of grid electricity can nonetheless arbitrage the grid and save one money. That’s math.

Missing in the math is logic. If enough people do this, the price will even out and the arbitrage opportunity will vanish.

It's like an arbitrage trading a model that makes money when paper trading but loses money when live because the effects of live trades on the market wasn't considered.
I believe he meant the race tracks, not audio tracks.

I read somewhere that WipEout XL used a similar data format as the original WipEout, but Wipeout 3 looked like it had a completely new game engine.
Agreed: Jose Valim does an incredible amount of work responding to people and engaging with the community. I am amazed at all the different levels of questions he takes the time to address.
Here's a RadioLab piece about cats falling out of high rise windows
https://www.wnyc.org/radio/#/ondemand/94843
and the wikipedia article on High-rise syndrome
http://en.wikipedia.org/wiki/High-rise_syndrome
colmmacc - I was thinking more of a case where the attacker is doing a MITM on your DNS info, i.e. getting between you and the DNS server authoritative for the domain you want to connect to in order to redirect you to another site. My use of "modified in transit" was to the DNS query.

Yes, "cache poisoning".

Agree with your last point. DNSSEC only helps provide integrity validation down to the point of wherever the actual DNSSEC validation occurs. In the most secure form, that validation would occur on your actual device (i.e. the stub resolver) or in your application (some now are building DNSSEC validation in, ex. the Jitsi softphone). I know some folks who run Unbound (or DNSSEC-Trigger) on their laptops to have the validation occurring there.

If you rely on the DNSSEC validation to occur at your ISP (ex. Comcast in the US) your zone of attack exposure is then your local network and the connection to your ISP... so yes, and attacker could potentially inject bogus responses there.

If you rely on DNSSEC validation out at a public server such as Google's Public DNS... well... then your zone of exposure is much greater.

This is where the work going on within the DPRIVE working group within the IETF is so important. They are developing mechanisms to secure the confidentiality and integrity of the connection between your stub resolver / client and the recursive resolver you use. With DPRIVE covering your connection, you could use a DNSSEC-validating resolver that was farther away from you.
Take Control of Your Internet of Things Data with Temboo Streaming
You do need credit though unless you never intend on financing a car or purchasing a house with a mortgage.

While it may be entirely feasible to get along your entire life without financing a car by either purchasing used cars or inexpensive new ones, for 99% of people ( including myself ), it's extraordinarily difficult to purchase a home in a reasonable amount of time ( 10-15+ years saving required for a barebones house most likely ).

You could argue that prices are like this due to the easy availability of credit ( see 2008 or the problems with student loans/college prices ), but that doesn't change the reality that some things are extremely expensive and for nearly all people will require some type of loan. At that point, not having a good credit score will cost you dearly in much higher interest rates.

As for my kitchen, the reason you gave it exactly the reason that I did it. Although I did net an additional 100$ or so in interest over the course of the year as well due to it being in my savings account ( yay!...kinda? ), the primary reason was in the event of an emergency. Any emergency that would require an additional $10,000 is likely to be medical, family, or loss of job related. Since I have insurance, that means that the most likely scenario is family or job related; in either instance, the availability of cash to help a member of my family out or pay my mortgage for 6 months would be more important to me than the costs associated with financing that card for a period of time. In addition, I would still be able to pay the card off by selling a bit of stock, however I wanted the additional liquidity by having cash on hand. I don't make decisions like that lightly; all of those scenarios were considered before I decided to go the 0% card route.
Intel pricing power makes it seem that semi innovation has slowed; not so
Either that or more Gen3+ Nuclear. Why not both I would say.
...one of our organizers is a brilliant female designer (boobs was her suggestion). I will also play my ex-pat card here and say this attitude is definitively british/american (it's honestly not necessary to be so prudish). What it takes to engage female collaborators is an openness to work together...and if you look at our nearly 2 year experience organizing Hackers & Designers you will find we are doing an above average job of doing this... ;-)
Package Atom Shell apps with Gulp (HTML/CSS/JS multi platform apps)
Really nice, I am just needing this ;) Super that it is MIT licensed as well. I was halfway on building something on top of XZ SeekableInput Streams but this is probably a lot saner to use ;)
You're misunderstanding me if you think I'm asking women to play nice.
*we live under a similar type of regime as those we chastise all over the world

We don't, and it's a disservice to all the people stuck under those regimes to pretend that we do.
Consensus is not always good or always bad. When to use it depends on the situation. Here's an article explaining:

- http://sloanreview.mit.edu/article/when-consensus-hurts-the-... [paywalled]

- http://ssrn.com/abstract=2579745 [open access]
IT DRAINS YOU INSIDE WITHOUT YOU REALIZING IT
Taylor Otwell have replied to a similar question here before: https://laracasts.com/discuss/channels/general-discussion/en...

> They really aren't similar at all. Forge manages sub-domains, Nginx, Cron jobs, SSL certificates, queue daemons, recipes, etc. Envoyer does none of those things. Envoyer is solely focused on deploying PHP applications to multiple servers with zero downtime.
The Secret of the Web
Apparently, you can look at the source and see all the recommendation without registering.
Weather is 60% "go" ... Lightning and clouds are still a concern

Schedule:

PDT ET GMT BST
* Webcast: 12:50 15:55 19:50 10:50
* Liftoff: 13:10 16:10 20:10 21:10

Please correct me if I'm wrong - it's the best I can do!

NASA webcast: http://www.nasa.gov/multimedia/nasatv/#

Currently live.
Two objections: Questions like this almost certainly do not reflect the work involved with the job you're interviewing for. Not many jobs involve sitting around solving abstract, standalone logic puzzles. Programming, for example, involves logical deduction, but in concert with a variety of other skills, and applied to software, not prose, as part of a complex development process. Maybe these type of hard questions exercise some of the same skills, but why not set tasks that involve exactly the same skills, e.g. programming assignments or some other problem taken directly from the role you're interviewing for.

Second, the circumstances in which you're asking candidates to solve these problems almost certainly do not reflect those in which they will be required to work should they get the job. Nervous anxiety, unfamiliarity, strong time pressure and intense outside observation are not conductive to good performance, and are (hopefully) not part of your everyday working environment, but all are present in an interview. So when you present difficult problems, you're not just selecting for people who can solve them, you're selecting for people who can solve them in conditions that will never otherwise arise.

I was able to solve the logic question in the linked article after about five minutes of head-scratching. But I am 99.9% certain that, in interview conditions, I would never have figured it out. I would have spent those five minutes of head-scratching fighting off a rising tide of panic. And the thing is, having had interviews and given interviews, I am not even particularly nervous during them, relatively speaking.
EU to File Antitrust Charges Against Google ($)
Thanks a lot for your answer. The part about loopholes explains a lot. But I don't quite agree about the asymmetry.

If you use React, doesn't it basically mean that you de facto license all your patents to Facebook whereas Facebook licenses those required strictly for React? With Apache 2.0 or GPLv3, you would only de facto license patent covering the software and the author would de jure license theirs. With BSD, there is no de facto licensing from you, as termination doesn't relate to patent suits. If so, the new grant is okay for people who don't have patents but it seems unsuitable for those who do. Less patent suits overall would certainly be a good thing but this condition seems very one-sided.
YMMV, but everybody I know uses a text editor of some flavor. Some use specialized text editors like Espresso or Coda, but the most common I see is Sublime Text.
I use vim with a few plugins to support newer CSS3/HTML5 related syntax.

https://github.com/othree/html5.vim

https://github.com/hail2u/vim-css3-syntax

Chrome Developer Tools are invaluable in my workflow.

https://developer.chrome.com/devtools

I can't speak to what the majority of designers use. I would guess that Dreamweaver is less popular today than it was before. I might be wrong, though?
That seems ridiculous for 2 reasons.

First, ciphertext is ciphertext. They'd probably be able to determine it's a block cipher and what the block size is, but that's about it. They're not going to be able to tell AES ciphertext from 3DES ciphertext if they're both set to use the same block size. There's no point "obscuring" the fact that you're using AES.

Second, if you're assuming the NSA seriously has the capability to break AES within the next 10 years, then obscuring it with a homebrew cipher is pointless, because they've probably already used their AES decryption capability to find many other ways into your system (through a hosting provider, ISP, domain registrar, DNS provider, admin accounts of coworkers...).

Even quantum algorithms are only able to halve the bits of the key search space (so 2^256 will become 2^128, which is still mostly infeasible even against a government adversary).

I don't think your suggestion would decrease security, if implemented perfectly (which is unlikely), even if the cipher is insecure and vulnerable to cryptanalysis. But I don't think it would increase security either. And since it wouldn't increase it, yet may decrease it in practice due to an implementation flaw which compromises both ciphers, why bother?
There are a couple misspellings that I've noticed, plus some awkward phrasing. Maybe get someone else to look over the copy on your site? This looks really helpful otherwise.
I'll try to post a comment, but my IP address may be rate limited -- I keep getting "You are posting too fast" errors.

In any case, you've made my case for me much better than I could have made it myself. The problem with the 'redirect DNS' argument is that -- it seems -- most people misunderstand that in order to redirect a DNSSEC signed domain, you need to control the 'root' key AND re-sign every domain under that key.

So, can it be done? Yes.

Is it likely to happen? No.

I would argue that the re-direct DNSSEC argument is nearly vanishingly small. But it can't be claimed to be zero.
Nginx Plus seems like they took a lot of the obvious feature upgrades, some which look fairly easy (remove cached item) and put them in a pay wall. Nothing wrong with that, just feels weird. And the pricing is enough to pay for a Windows license, not that IIS is even close to nginx (it's reverse proxy capability is terrible).

I'm sad to hear about JS; I thought the work with Lua was going well and would be a better candidate. Maybe I misunderstand the situation.

Nginx is one of those great tech that just makes so much more easy in my life.
As someone who has been above and below this mark. I truly hope that more companies and influential individuals follow this and start taking action. Freeing those of stress of things that shouldn't be stressing people in this era.
> Still, imho, it's not helpful to further entrench the gender binary with a narrative about men keeping women from their potential and women having to fend for themselves to get what their due.

I suspect that the degree to which one believes that reinforcing the narrative described is helpful correlates pretty strongly with the degree to which one believes that the narrative described is accurate.
Because it is not "controlled" by the NSA in any meaningful way (with emphasis on meaningful).

Any such argument would be valid for pretty any global PKI system, if the argument is that they control important parts of the Internet infrastructure. The SSL CA system is even more controlled by the NSA as DNSSEC is.

DNSSEC is much harder to circumvent than the SSL CA system, no matter how you look at it.

So I do not mean to refute that the NSA controls the Internet, the CA system, and DNSSEC (even if I don't believe that's an accurate description). It is simply not a meaningful discussion to have. Even if the NSA can break the Internet, there are other use cases and it still carries great value for everyone.
Exactly. With a tiny change you can be spawning those processes to any number of other nodes.
Surveying Tax Foreclosed Properties via Google Street View
This implementation does rely on a lot of memory copying going on there. Rather than copying the original element to the new process, then the new mapped element back to the original process (giving you the original list's worth of memory copied twice), you'll be copying each list element once to every worker you spawn, and then you'll copy the parts of the list worked on to the next worker, on and on, until the full list is finally copied back to the caller.

So instead of copying 2n elements over the processes, you'll be copying roughly 2nlogn (or is it n(n+1)/2 ?) elements around.
I don't think I've ever been disappointed by any BBC Earth material, but that was surprisingly captivating!
Go for both. Some people will be more motivated by doing the right thing, some will be more motivated by making more money. The two are compatible.

Yes, it would be nice if (all, or at least enough) people were motivated by "doing the right thing" to fix things. Human beings being what they are, though, money as a motivator works pretty well.
> If we do get cheap scalable energy storage, it's pretty much game over (in the long run) for everything but solar and wind. We are basically drenched in free energy, but we can't store it cheaply enough. If that's fixed, we're done here.

You still need to get better return on capital before wind and solar are competitive on cost alone. Wind turbines don't last forever (and are hard to recycle well, since they need to be made of tough materials, which leads to some interesting but probably scalability-limited schemes to reuse old blades for things like bus shelters and playground equipment -- look up Wikado Playground in Copenhagen, for instance) and neither do solar panels.

Maybe that's also something they'll fix "in the long run" but it's really not a fundamentally different class of future-problem than improved storage.
Why it’s time for the mortgage industry to take technology seriously