skysight-inc/HackerNews huggingface dataset:
And what is the exact Pantone color for the Minion Yellow?
I do actually find their monetization strategy laudable.

Selling your product to users is, in my view, a far more ethical monetization strategy than selling your users to advertisers, and tends to result in far less potential conflicts of interest.

That said, I also believe communication in general is too important to be left to proprietary software, which is why I won't be using WhatsApp anytime soon.
ARMv8 comes with the AES instruction set as well, and Linux supports it. The newer Android phones like the Nexus 9 are already using it.
That is not CSS anymore, it's "CSS + autoprefixer". Which, I agree, is great, but it's worth mentioning. Vanilla CSS requires the prefixes, "CSS + autoprefixer" doesn't, but it requires other things like an extra build step (and a build process, at all). Worse, it could be mutually exclusive with other tools.

When you advocate an add-on to an existing solution, you're changing the solution. It's like people who recommend typescript in reply to JS's lack of types, or Coffeescript to its ugly syntax: you can't have both, they change the original thing. Or vimperator with firefox, or vim-mode emacs, or... it's all not the same thing anymore. You push the carpet down in one place, it comes up in another.

CSS still requires the vendor prefixes. If autoprefixer is the perfect solution to that, let's stop people everywhere from using vanilla CSS and switch them over to "CSS + autoprefixer". Turns out it's not that easy, which gives the original "but it requires prefixes" argument more meat.
I used to use Google Talk, but I find Hangouts sometimes unreliable. Nowadays I only use Hangouts with my mother (because she doesn't want to switch to other services).

I dislike to use something closed source like Whatsapp, but it's not like Hangouts, Telegram or Line are much better (almost no one I know is connecting to Google's servers with XMPP, and Telegram doesn't have an open source server implementation)

I started to use Telegram recently, thanks to my Ubuntu phone, but I don't like the fact that it's storing the messages unencrypted server-side. Whatsapp is much better on this front, since everything is encrypted by default, and usage across multiple devices (i.e. desktop) is handled wonderfully by the webapp.

OTOH, neither Whatsapp nor Telegram afaik give you any way to verify the identify of the other person, and E2E encryption without identity verification is of dubious utility... TextSecure is nice, but it has only barely more users than Telegram
Revolutionary war, not civil war. And the French joke is about France being quickly overrun in WWII, followed by being kicked out of a colony by the natives (Vietnam) at a time when the US war machine was seeing victory everywhere. That the US was kicked out by the same ex-colony is generally forgotten amongst the general projection of power they otherwise enjoyed around the globe.
Something that concerns me is that the major browser manufacturers seem to be able to dictate what HTTPS certificates are OK, and therefore what sites non-technical people will have access to.

I'd say that's more about censorship than tracking/privacy, which is also a very important issue to consider. For things like banking (this has to be the most widely mentioned use-case for SSL) it is arguably a centralised entity we're interacting with so it somewhat makes sense, but the Internet is more than that - much more.
The minions pictured on the very same page are clearly a darker shade of yellow. When I grap the pantone color with a color picker I get #f8e763, while a minion gives me #fad24e.
Subsidies should go to electric cars and new nuclear power plants instead.
Safari is also the native browser for iOS. I don't know where you got 4% from but Safari (both for OS X and iOS) is more than 4% market share.
Visualising core load on the Pi 2
"Remember, when advertising is involved you the user are the product." == "When advertising is not involved, your information is the product."
I actually used StartSSL. It took, literally, days to figure out how to create the certificate. The next year I renewed it; it took, literally, days to figure out how to renew the certificate.

The next year I just paid someone to do it for me.

I would never recommend StartSSL to anybody.
That's how I felt until I discovered low therapeutic doses of extended-release amphetamine.

Now I'm 26 and take a pill 1-3 days each week I'm working. If you experiment, I wouldn't take more than 20mg of Adderall XR or 50mg of Vyvanse, and I'd start lower than that.

Best thing to happen to me.

If the reactions of "Just do it" and "Just be more disciplined" and "Just try this one weird trick" feel worthless to you, it's because they are. Everyone seem to has a judgmental opinion on this subject.
If it's a retainer, then they pay you up front for a certain number of hours you'll be available. This can be at a higher fee than the other work.

Another alternative is to just have an on-demand hourly rate that is higher than your normal rate. You could have pre-scheduled "office hours" at the regular rate, but if they want you at other times, they get to decide to pay you a little more.
Great post! Tons of useful information in an easy to digest format without too many words.
> the actual AI can wait

Scaling such services is hard.

I want to hear back from "Magic", "Cloe", "Luka", "Path Talk", "Rabbits", "Jarvis" - a post mortem, what went right, what went wrong.

How do they bootstrap - with a few friends or with outsource partners from Asia?

Magic (59 days ago): https://news.ycombinator.com/item?id=9087819, Jarvis (266 days ago): https://news.ycombinator.com/item?id=8094351 . The creator of Magic wrote a response 3 days ago on PH: http://www.producthunt.com/posts/magic#comment-89372
Plastics, tiny penises, and human evolution
Why not? I'm not trying to be snarky, what specifically don't you like?
If you're using Xscreensaver instead of xlock:

#!/usr/bin/env bash
set -e
while true; do
sleep 20m
xscreensaver-command -activate
sleep 20s
xscreensaver-command -deactivate
done

This presumes that xscreensaver is configured to have a delay before it is locked (and thus requiring a password to unlock - as would happen if we used `xscreensaver-command -lock`).
Sure, because requiring a complex receiver and using separate bandwidth for each customer makes more sense than a single allocation of approximately 200kHz for all clients (FM bandwidth) because of marketing and big data.

DAB is a good replacement for what radio essentially is, not for "listening music" which, while is a use case of Radio, it's not related to the technology.
At a tech networking event.
Elon Musk Had a Deal to Sell Tesla to Google in 2013
Highways occupy startling amounts of space. For instance, the entire city of Florence takes up the same amount of space as a single cloverleaf interchange in Atlanta: http://www.treehugger.com/urban-design/you-cant-set-shop-sid...

The very presence of freeways drives people away because they are noisy eyesores and impediments to local travel. In Seattle, I-5 cuts across the street grid and separates downtown from Capital Hill and First Hill, while the Alaskan Way Viaduct cuts downtown off from the waterfront. If both of these were removed (I-5 could take a bypass route around the Seattle city center using what is now I-405), downtown Seattle would be much more livable and would have better traffic on account of being able to reconnect the street grid.
When is Android to iOS end-to-end encryption coming? Since they aren't relying on ads, then they shouldn't need to rely on data-mining private conversations either.
> There definitely are use-cases where HTTP would be faster/cheaper/easier/simpler/etc, but the move to ban HTTP takes all that in to account, and argues that banning it is still a good idea because the implications for privacy are simply more important than any of those issues.

Where are these arguments? I haven't seen any argument that acknowledges that we are losing a big part of what made the web initially great; that it was dead simple to create your own website.

I'd respect the https-only crowd if they would acknowledge this as a legitimate big loss. But instead they seem to ignore it. I think they are just ignorant to the needs of anyone but their large corporate employers.
>> Cryptography cannot be separated from authentication

> Frequently repeated but still wrong.

> The shared secret implies authenticity.

Just checking: are you aware of the concept of authenticated encryption (https://en.wikipedia.org/wiki/Authenticated_encryption) and its importance?
How the Cloud Was Born
> Every request is sensitive in the sense that it's another piece of data that can be used to build a tracking profile of the computer that sent it.

HTTPS does not solve this problem. SNI leaks the hostname of the requested resource, the timestamp of the request and, if not used in conjunction with an anonymizing proxy/VPN/TOR, the identity and possible location of the requesting machine. In case of static IPs even HTTPS-only allows a fair share of tracking and profile-building by ISP or other snoops.
Show HN: Hangouts Arcade, play games in a Google Hangout (looking for collab)
Flexbox is nice and makes some things easier, but its still (IMHO) a half assed solution compared to something like QML's anchors.

In QML I can center like this:

anchors.centerIn: parent

(replace parent with id of item you want to center in if not the parent item). You can also do just vertical or horizontal centering, or you can fill another item or you can anchor eg the left of your item the the right of another item and the right of your item someplace else and it resizes/repositions your item as required.

Flexbox still often requires lots of nesting to achieve what should be (and is in QML) relatively simple layouts. I've also hit a few things that I couldn't do at all with Flexbox (although that could just be lack of CSS/flexbox skill on my part - but to that I say that CSS gets very hard quite fast, while complex layouts in QML are pretty easy).
You can't get wildcard certs so you'd have to do this for ever subdomain you want to use.
Why Telegram and not Signal/TextSecure?
It's true that the UI is obtuse, but there are step-by-step guides with pictures like [1][2].

[1] https://www.digitalocean.com/community/tutorials/how-to-set-...

[2] http://www.troyhunt.com/2013/09/the-complete-guide-to-loadin...
It's much older than that: Hardiman [1] was an actual prototype from 1965. And of course in fiction there's a ton of examples, such as Starship Troopers (the novel) from 1959.

https://en.wikipedia.org/wiki/Hardiman
What startups can learn from nature
They don't have a Desktop client.
The Starting Point of All Major Public Hacks – Footprinting
> the user can choose not to trust/view the data if they have even the slightest possible reason to believe their data might be modified maliciously in transit; or tracked for some sort of profiling that they want to avoid.

If every internet user were educated enough to behave in such a way, then I'd say that would be a fair suggestion, but I don't think it's reasonable to expect that the average user is capable of making such judgements.
Well yes, none of them would actually have their own name on said certs. But all of them had API access to make symantec or geotrust issue certs. End result is the same.

Last time I used a RapidSSL reseller, I had to authenticate my domain against a GeoTrust controlled page before the cert was issued. Is this not the case with WebNIC?
You know FreeBSD is not developed on github, or in git (yeah, there is a very new bridge). Its in subversion.
SeoToaster: Most advanced SEO CMS; Free, open source & scalable.
Yes, is there any particular niche this OS is targeting? What are these traditional design mistakes that are being avoided?

If the purpose of creating Sortix is simply the challenge of writing an operating system, that's all good too. Best of luck.
Google Cardboard Umbrella
I'm wondering why did facebook buy WhatsApp? Oh, maybe to get better data from us to sell... yeah, Ads.
Microservice Design Patterns
Holding 30kg in place, precisely, while another worker tack welds it in place.
A published model of hypercapitalism – real code on runnable.com
> Really? Then why not go after banks, energy companies, telecom giants...?

Banks:

http://www.bloomberg.com/news/articles/2014-07-01/europe-ban...

http://europa.eu/rapid/press-release_IP-13-1208_en.htm

Energy companies:

http://en.mercopress.com/2008/10/01/europe-fines-nine-oil-co...

Telecoms giants (incl. Deutsche Telekom):

http://europa.eu/rapid/press-release_IP-13-39_en.htm

http://europa.eu/rapid/press-release_IP-14-1140_en.htm

It seems that the standard response to the EU probing Google is to say it's unfair and "what about European companies" without actually doing any research into the matter.
Your client wants to be able to communicate with you? How dare they!

I'm not sure I understand why this is something you should be compensated for outside of the gig itself. Communication is a basic part of any business relationship.

You are a freelancer. Yes, that means you have the freedom to schedule your day. It does not mean, however, you can completely disappear and ignore your client's team just because you'd rather work at night. That's unprofessional.
I wish I would have had something like this when I first started developing. 90% of what's in here are things I learned over time (and some at great cost).

One I would add is to not throw a fellow dev under the bus when talking with a user. Give praise to specific team members but take the hits as a team. It helps build comradery when you see a colleague take the hit for you and builds a certain trust amongst the team knowing that others have your back.
Twitter CFO’s leaked email to Snapchat CEO reveals insight in monetising mobile
In a country where the first non-native language, which happens to be English, is typically studied for more that 10 years and is completely unable to produce a significant amount of people able to even read it, I fear that a technical document written in such a foreign language will only receive the Stare of False Approval followed by the Shrug of Dismissal.

† Notwithstanding the courage of our teachers and all, this country††'s education system is a complete failure, and those that shine do so in spite of it, not thanks to it.

†† I can't even come to terms with calling it "my country" anymore due to recent events regarding mass surveillance, that go against everything I hold forth and cherished about France, inherited since le Siècle des Lumières.
Uber driver shoots man who allegedly shot at group on Logan Square sidewalk
FBI admits flaws in hair analysis over decades
Of all the things that should be using strong encryption by default, router and server management interfaces are at the top of that list. Those interfaces _do not_ have the kinds of high-performance transfer requirements like that of bulk data transfers or streaming video services.

As for bulk data transfers for government-funded scientific research, data integrity for anything having to do with clinical trials or personally-identifiable information is among my highest concerns. And unless we're pumping that data across private fiber, the latency and bandwidth limits of the global Internet far outweigh the overhead caused by encryption/authentication algorithms.

(I would add that I think bulk data transfers ought to be encrypted over private/internal networks as well, but that's an argument for when I'm not on mobile.)
I was just discussing this with someone who installed solar panels on their house about 8 months ago. I think your numbers are a little bit off.

We live in south western ohio and said person took their bill from $300-400/mo to $30/mo (at 13 cents per kWh) with $11k of solar panels. They have a payoff period of about 3 years not including the $4k rebate they got which reduces the payoff cost to a little under 2 years.

Keep in mind this is a place that doesn't get nearly as much sun as much more southern areas/Hawaii.

I do agree that batteries still have a payoff period that is too long to be economical. Here's rooting for Mr. Musk.
Not really answering, but would there be a way to convert odesk earnings into bit coins, thus avoiding, well, to have to declare anything?
"Concierge" is an analogy in this context, I think. That is, it's a starting point for your brain to have something to graft onto. In reality, the service is bound to be very different from a concierge once it hits legit MVP (with enough 'V' to genuinely validate a business) levels of traffic, the concierge analogy will start to be something deep in the identity of the actual product rather than the product.

You might have "classrooms" in your elearning software, but it's relationship to an actual classroom is metaphorical.

Anyway, the actual work is figuring out how to scale this. If scaling means a linear increase in people, you've got a hard problem to solve. It's not impossible. Uber needs another physical car for each simultaneous passenger. But, it's fundamentally different difficulties than "scaling" of a software.

Metaphors are tricky.
Helium app – a floating browser window for OS X
Oh no! Not another scrolling CMS... whitespace seems to be trendy.
Normal professional availability is one thing. A contractual obligation to be responsive at a client's beck and call is another. Charging a my-time-costs-real-money-and-this-is-a-pain-in-the-ass rate for fast service is perfectly reasonable.

It is also reasonable to flat out refuse. A client who doesn't think a designated point of contact is a good way to handle a contract may be a bit if a red flag.

Finally, it is perfectly reasonable to recognize that it is not a service you can provide as a small consultancy and walk away. A high maintenance client can kill the ability to maintain a diverse backlog.

Good luck.
OP never said he/she didn't want to be available for the project, its about committing to be available during office hours thats troubling him/her.
Ask HN: I need to organize a hackathon
I was asked to organize a hackathon for schoolchildren. This hackathon will be held for three days. All children are high school students and winners of Olympiads in Informatics.

I am creating educational program consisting of mobile app development and web app development. I need your advice on selecting actual tools for both parts. We can assume that children has no prior programming experience except of programming in Pascal at school.

For mobile app development I want to use MIT App Inventor. I think that it is right tool for quickly prototype their mobile app. Learning Java and Android SDK for three days is unrealistic.

And for web app development I have no idea. Rails? Django? Flask? NodeJS? First I need to teach them Ruby, Python or JS. Apart from that I have to teach them HTML/CSS/JS and basic concepts of web.
Many universities already require the installation of a root certificate. The primary purpose is to avoid buying commercial certificates for every last internal university site, but it also has the effect you've mentioned.
It's hard to take a lecture on irony seriously, when it's given by someone who can't read past two sentences.
> spam people to o install the app in your name

Any references for this? I've been using Whatsapp for years and never saw them do this. I've spammed people, in person mostly, to install it back when Whatsapp wasn't ubiquitous where I lived yet, but that's it. I assume that's not what you meant.
> That the US was kicked out by the same ex-colony…

Except that we weren't. We won the Vietnam War: when we left, North Vietnam had pledged to allow the people of South Vietnam to decide their destiny.

Then they broke their promise and invaded, the Congress refused to aid South Vietnam, and that was all she wrote.
<insert beating dead horse gif here>
I think we are dramatic agreement?

HTTPS = breaking caching.

User Authentication = returning different results for per-resource queries, which is RESTful.
Interesting. "Sounds too "Ayn Rand"" was exactly what I thought when reading that passage.
> This paperwork has restricted our ability to openly share scientific data with international partners, and has impacted our sharing with an NSF partner that had a foreign-born system administrator.

I'd say their IT policy is not the only broken one...
This point is important, because there is a lot more non-AESNI hardware than the converse. But luckily, it's possible (and likely, I hope) that TLS 1.3 will include the ChaCha20-Poly1305 AEAD ciphersuite, which should improve this matter quite a bit for most users who need software implementations - it's _much_ simpler to implement, and even in software, a heavily optimized can get within the ballpark of AESNI.

Google is already using ChaCha20-Poly1305 inside Chrome to talk to Google servers, if your hardware doesn't support AESNI. It's been doing this since early last year, and Adam reported at that time nearly 40% of all traffic to Google was going through it (including mobile devices IIRC): https://www.imperialviolet.org/2014/02/27/tlssymmetriccrypto...
On /r/startups

It's been 1.5 yrs, have been through hell and back with him, can't imagine a better co-founder. We'll start companies together until we die.

I recognize this is not the recommended way of finding a co-founder; statistically the chances of it turning out like it did are very low. But it worked out, so I don't care.
Ask HN: What's the Future of Code Editors?
Hey HN,

I've been thinking/making lots of different creative tools over the past many years, but the code editor is one that I keep coming back to. I figure this is one of the best groups to poll since there's a mix of tech, design, development, and start-up readers who all likely interact with code at some point.

Q. What do you think the most important next step will be for code editors?

Over the past few years we've started to see lots of cool things (like alternate layouts, realtime syntax highlighting, auto-folding code, collaboration, etc.). But what do you think is next?

From my perspective, the biggest change I'd love to see is the code editor moving beyond plain text. While the code itself must be machine translatable, the meta-level content (comments, links, diagrams, etc.) could be much more informative and useful; even interacting with and highlighting the code/text itself.

I've also been working on a notebook webapp called Sketchwrite and think that could be a way to kickstart the conversation about getting plain text and embedded content to play well together.

Sketchwrite is pretty basic; it just combines sketches and writing. However, the way it keeps images and text in sync is different than what you typically find in text/image hybrid environments (like text editors which use relative anchors or explicit object boxes, and image editors which use absolute positioning for each element or layer); instead Sketchwrite anchors are implicit to what/where you draw on the page and flow with the text.

Clearly Sketkchwrite isn't the answer here (without a whole lot of re-work), but I think something like it that's tuned for code could be pretty cool. For example, here's a quick proof-of-concept of a javascript file with embedded drawings/callouts.

https://sketchwrite.com/n/VNpCzRv5r38 (see comment below for clickable link)
I wouldn't structure it like this. It's more complicated and risks giving the impression that you are nickel and diming them or are too much trouble to deal with.

I would work out a flat rate that is as competitive but still makes it worth your while to accommodate their requests. Later they may even relax the requirement and you'll still be getting the higher rate.
Interview with Chris Hartjes
so who is going to pay for it?