skysight-inc/HackerNews huggingface dataset:
Your speculations about what "would have been" – book burnings! imprisonment! – are ahistoric to the point of paranoid nuttyness.

The specific passages left out were a few slight intensifications of one theme. Leaving them out didn't 'obfuscate' anything. As the literary critics consulted by the WSJ suggest, the cuts arguably improved the book's narrative flow and timelessness.

Also note that by 1962, when Wrinkle in Time was published, the country was already 8 years past the peak of McCarthyism, with McCarthy discredited and dead. Even at the height of McCarthy's investigations, in the early 50s, the only metaphorical "book burning" that happened was the State Department pulling some books from its overseas outreach libraries.

That's an embarrassment, of course, but not the kind of persecution you're implying that L'Engle would've faced.

For cultural context, The Twilight Zone's original TV run was 1959-1964. It often featured the exact same kind of allegorical criticism of conformity and paranoia. A few extra words in Wrinkle in Time – about how even in democracies, "the sick longing for security is a dangerous thing" – would've been zero risk to the book's popularity or author.
So if I intercepted kittens.gif and altered the content type to be 'text/javascript' and the body to be a javascript payload that tries to exploit your browser, you're not overly concerned?
Why would that sound zealous? It really would be nice if crypto were part of the foundations of the Internet, rather than applied as window-dressing.

It'd require some hard thought about what guarantees are possible and desirable, but that'd be a good thing.
Drchrono is looking for iOS and Django Developers
In general how have you found working on oDesk? How did you choose your specialism?
Just to put this into perspective, 100,000 facts is a tiny amount for a databases. If you use it for a blog having 250 users with 20 articles per user and 20 comments per article you have already reached 100,000 comments. If you add the date of and the user writing the comment you are at 300,000 facts. And we haven't yet stored any information about the users or articles.
I'd contend that these aren't problems with HTML/CSS/JS, but with their categorical misuse under the guise of simplicity. Things like jQuery are orders of magnitude slower than both alternatives and native implementations, and using many of these bloated libraries will only multiply the inefficiencies.
Personas: Crafting Great User Experience
On the other hand when you see those ridiculous spreadsheets that Deutsche Bank uses for 2-step authentication to the e-banking you feel like in a shite 60s spy movie. When you actually log in it feels like the 90s though. And 80% of German people seem to go with tradition/history even when it is not really rational. Really makes me wonder how the two core components of the German value system - Tradition and Pragmatism - conflict each other in such situations and how they are becoming less and less compatible with every passing day.
RAID Architecture explained in layman terms
Who determine "sensitive" data?

You consider abortion non-sensitive and you should read legal (or whatever) information with HTTP. You are comfortable with that. Someone else is not, and would want to use HTTPS.
TimeBuddy Video App Review
The hyper-regionalization is an odd construction; makes you wonder just how much there is to save by printing a bunch of different (sub-)region versions compared to just bundling most on one “English” printing.

Especially in the age of Amazon.
ACLU Comment on HTTPS-Only Standard [pdf]
Nobody cares about your code
Thanks for the share. Really appreciate it!
As a norwegian station that need to close on the FM band, we're very clear that this will damage the commercial radio sector in Norway.

First of all: Commercial radio will die, however in Norway they will die first. Commercial radio is not able to sell big data on conventional FM, DAB and AM services.

Facebook and other services using the Google PREF are able to give exact personal commercials on a very specific local level. Conventional broadcast radio can't beat this. UNLESS the broadcasters goes pure play. Broadcast radio do send unicast streams, and have still not made it possible to create revenue from it, even you can track what the listener looks like and know his needs are.
I'd think you should use flexbox for what it's good at --calculating and distributing the available space on it's children-- and grid for what it's good at --enforcing strict and precise layout outlines--.
Except CPU designs from three years ago are no longer considered current, and robots are built around CPUs (that is, if it lacks a CPU, it is not a robot), so three years is long enough to obsolete a vital component.
Conventions, not rules, better every time. Though a rule that public services should at least state that the data is not sensitive and not needing https is probably a good idea to force people to at least think about it.

But we should encourage more public data not less, not add another potential step that might delay/discourage people from making data available. Making https/ssl/tls easier and easier will make this a non issue eventually.

(I had to stop myself from spamming the github issue with a link to the seven red lines video.... :)
https://www.youtube.com/watch?v=BKorP55Aqvg )
I'm concerned about building profiles of internet users, probably more than the average person is, but I see the HTTP/HTTPS question as fairly marginal for that particular issue. Building profiles of users' browsing behavior is primarily done via methods that HTTPS lets pass through, such as the Facebook "like" button, Google AdSense ads, etc. Much of this data (though probably not Google's) can then be bought and cross-correlated into databases.
A very major reason on why Wordpress is so widely used, is how easy it is to install on just about anything above a toaster.

Meanwhile, this is how you install Wagtail: http://spapas.github.io/2014/02/13/wagtail-tutorial/
Of course. The question isn't "do we stop treating schizophrenia", it's "should we, and how can we, transition the patient off of drugs that are potentially harmful in the long term".
I don't think the debt metaphor works, because there's no real or implied creditor. (Except maybe time or entropy?)

Technical mass might be better. The code keeps accreting, developer efforts orbit around it in ever-decreasing circles, and at some point it becomes impossible to escape from it.

But is this really a technical problem, or a documentation and specification problem? If there's no separate formal model for the project, the code is the documentation, and that's never a good place to be.
Which Web Framework Should I Use?
> Cryptography cannot be separated from authentication

Frequently repeated but still wrong. Cryptography requires one of the following:
1. Two key pairs, or
2. A shared secret.

The shared secret implies authenticity. But there are entire classes of cryptosystems based on not knowing with whom you are communicating. Crypto establishes a channel through which Alice and Bob can then negotiate authenticity. (To put it in simple terms: it's better to be phished over secure transport than to be phished over plaintext.)

For some reason, a large number of people seem to have completely skipped over this basic advantage of unauthenticated channels: you have now isolated the communication to you and your prospective phisher. This is a gain, this is an advantage, and it borders on absurd that people go to such lengths to deny this.
There are actually more coworking spaces, even state-supported (socialist style) ones. And the two that you mean (Soho/betahaus) are actually overpriced trendy wastes of money. Also I think that incubators/cw-spaces/angel investors and the other trends that appeared with the boom are vastly overrated.
Simply banning any kind of legacy protocol is not exactly in good spirit. People should have freedom of choice when it comes to running THEIR OWN infrastructure.
I have done R&D to find Django CMS and e-commerce like OpenCart and I spotted Wagtail but I felt it's still growing and didn't reach the level Wordpress.
PHP web apps are mature than Django Apps and we need to support this.

Please give me guideline on who to contribute or even how to use it and I'll do my best to help.
Paracetamol/acetaminophen does appear to have synergistic effect with codeine as far as I'm aware, and the combination is often prescribed for severe pain (the prescription-only variation - at least in the UK - has a far higher codeine to paracetamol ratio), but the requirement that they are combined is clearly to deter abuse of the codeine.

The irony is that paracetamol overdoses are far harder to treat and far more likely to lead to death or severe long term damage than opioid overdoses...

In the UK, codeine on it's own is still a controlled substance to the point where if you extracted the codeine from a single pill (possibly two, not sure of the exact limit) of the combination products, possession ould get you arrested, while you can go and buy packets with a total of 64 pills (32 each of ibuprofen and paracetamol combined with codeine) at the time from your local pharmacy no questions asked.

Basically there seems to be a bizarre belief that addicts will act as rational actors when faced with the knowledge of this mix, despite the fact that most other drug policy is based on the assumption that drug users - addicts or not - are incapable of making decisions about harm on their own.

This becomes even more bizarre in places like the UK, where there have been restrictions on the number of paracetamol pills that can be sold per transaction because of the amount of harm caused by accidental or intentional paracetamol overdoses.
On the other hand they sometimes play very very well together - you cannot have a great technological advancement such as ICE - unique in world scale - without both pragmatism and the stability to plan centrally for 30-50 years ahead.
Actually I don't think it's harder to get into than Harvard. They have many, many applicants because they don't put any restriction. You can apply even if you didn't go to high school.

Also, they have no tuition but neither do the public universities in France ("Grandes Écoles"), and the most selective and prestigious schools are public. So while the "no tuition" thing is impressive for a private school and may sound like a dream for Americans, it's not really rare in France considering the choice you have with public schools.

Finally, not really related to the way they teach there, but here's the director (same guy in the picture on the article) spanking a girl in a classroom during off-hours (nsfw). http://www.19h59.com/WTF/10238_Le-directeur-de-lecole-42-don...
Thanks, that makes sense now and I totally agree.
When any society (and the web is a society) starts to sacrifice the freedom for its citizens to act in public if they so choose in the name of "protecting them" from the poor behaviour of a few bad actors, it becomes awfully difficult to characterise that society as "free".
Cryptography without authentication still provides protection against (non-MITM) eavesdroppers, which is very important with public wifi networks nowadays.

Which is why it's strange that self-signed connections are represented to the user as dangerous, while unencrypted connections do not have such a warning even though the former is strictly better.
How to Be as Great as Elon Musk: Advice from His Ex-Wife
Well formatted bug report, with test case to reproduce issue is most helpful.
Does this applies to PPC ads too? what if my website is not mobile friendly and google doesn't show me in organic results. Will they be following same for PPC too?
If you google 'isomorphic Javascript' you'll get a bunch of hits explaining this particular (ab)use of the word, here's a good one: http://nerds.airbnb.com/isomorphic-javascript-future-web-app...
Something that concerns me is that the major browser manufacturers seem to be able to dictate what HTTPS certificates are OK, and therefore what sites non-technical people will have access to.

Surely a move towards centralised control of the web is not good from the tracking/privacy point of view.

The short-term benefits might look nice, but this looks to me like a long-term play. The fact that this movement has been led by Google - who value tracking - would seem to suggest that their tracking is not harmed.
We've known for a long time that anti-psychotic medication is pretty horrible. That's why groups like Hearing Voices Network have been campaigning to educate clinicians and people who hear voices about different causes and different treatment options. There are other groups that campaign against purely medical models of treatment for other illnesses.

A well known tension in mental health treatment teams is between the psychiatrist (who stereotypically will want to medicate everyone) and the psychologists (who stereotypically will want to talk to everyone).

http://www.hearing-voices.org/
.. and while MS itself moves away from MetroUI I have to re-build application that was written in Symfony2 + Bootstrap to nodejs + MetroUI. :)
The perfect job offer
Chargebacks are quicker and easier than trying to drag a vendor through the courts, especially when your only relationship to the vendor is online, the vendor may be in another country and they may have just packed up and disappeared, or for whatever reason it is they just don't have the money.

Further, under UK law, the credit card issuer is a party to the debt and acts as a guarantor - they're on the hook if the merchant does somehow manage to get away with the cash.

>> Doing a chargeback already implies that one of both sides is committing fraud.

Yes, and we have thousands of years of 'Caveat Emptor' shenanigans to point out just how necessary consumer protections are in this space.

>> If an online shop is committing fraud we trust the police to get our money back.

Then you must be prepared to wait a long time and frequently be disappointed.
Free Software includes BSD, always has, and certainly does under the Free Software Definition.

https://www.gnu.org/philosophy/free-sw.html

(This statement is void if the BSD license is old enough to contain the Obnoxious Advertising Clause. No BSD license variants do these days, primarily because it was Obnoxious.

More information:

https://www.gnu.org/philosophy/bsd.html

http://bsd.slashdot.org/story/99/09/02/189210/berkeley-remov...

The Amazing Disappearing BSD License (or, A License Gets De-Clause-d):

https://urchin.earth.li/~twic/The_Amazing_Disappearing_BSD_L...

)
Equal GET requests will often have different results based on the user doing them

Well, that's very non-REST.
Unfortunately corn is far from best crop for ethanol production. Hemp is twice as good, and if it wasn't for this stupid war on drugs, ethanol may have done us a lot of good. Of course, they promised us switchgrass ethanol with is something like 10x more efficient, but never delivered -- probably b/c from the get go it was all about getting subsidies and only pretending to actually do something about our addiction to oil.
Not really assuming said gif is inside an img tag.
This is interesting.

I've always been okay with dropping HTTP for HTTPS-only as a long-term goal, as long as we get rid of the SSL cert racket first.

As far as MITM and identity go, could we at least modify the protocol to allow fingerprint caching, as opposed to certs, as a fallback? ...SSH does this and it is arguably more important to secure than HTTPS.

Fingerprint caching seems insecure when you think about it, yet we're all okay with maintaining our servers with this in place.

Furthermore, X.509/ASN.1 is the worst thing to happen, ever. I know this because I damn near tore my hair out trying to implement an x.509 certificate validation.
The Valley of Fosforescent Oleanders (dystopian future; 2071; Santa Clara Valley; P2P microstate; lots of fun). http://www.amazon.com/adelfas-fosforescentes-Trilog%C3%ADa-S...
Cig – Check the state of all your Git repos
The(incomplete) Theory of Everything
Personally I'd like to embrace the power of 'and'. :-)

As someone who is going to be trying to make a living from his open source work in the near future, it sure would be nice to be given money by companies. But there's also more work than I can actually do on my own full time and extra labour would be nice too.

The additional problem is that there a lot of small open source projects that get used by don't really have the numbers that donations would give them enough money to live on, so they can't quit the day job. For those people time is actually much shorter than money.

(Disclaimer: I wrote twodaymanifesto.com)
> Every request is sensitive in the sense that it's another piece of data that can be used to build a tracking profile of the computer that sent it.

HTTPS does not protect you from third parties profiling what sites you visit, only the specific URL paths you access (since who you connect to is still in the clear).

In a big organization, a caching HTTP proxy server would provide the caching benefit, where an HTTPS-only Internet cannot. But while a home user has a single IP, all users behind a caching HTTP proxy server effectively share the same IP (or cluster of IPs), and are mix-anonymized (unless the proxy is not configured this way).

So sure - HTTPS ensures that URL paths accessed are private. But there are cases where there is a caching benefit and the real-world privacy-loss isn't as big as you make out in those situations.

If you're bothered about organizations spying on their users, then sure, those users can use HTTPS. My argument is about the cases where users are doing things where they want the caching though.

> Using HTTP takes that choice away.

Users and websites can still have the choice of using HTTPS. If we were talking about banning HTTPS or not requiring HTTPS to be available, then you'd have a point. But we're talking about banning HTTP. That takes choice away by definition, so don't pretend this is about taking choice away from users. In reality what you're arguing for here is to foist your choices about trading cacheability for privacy onto others by taking their choices away. There's nothing wrong with this position, but let's not pretend that it is something that it isn't.

I'm certainly in favor of sites being HTTPS only when they involve directly private information. I also accept that access to anything involves a tracking trail which in aggregate is privacy-sensitive. But where there is a caching benefit (or some other benefit) of not using HTTPS, perhaps users should have the choice to do so. Maybe clients shouldn't do it by default, and maybe it's reasonable for sites to always offer HTTPS as an option. Still, "don't ban HTTP" does have a case in such scenarios.

I think part of the problem here is that HTTP has spawned a number of use cases larger than any of us can contemplate at once. This is much broader than the general "web app" or "information browsing" use cases for which the HTTPS case is really important. "Ban HTTP" means banning all of these cases. It's very difficult to convince anyone that all use cases have really been genuinely considered on neutral grounds, and much easier to make the decision first and then pretend that workarounds are enough when a new use case is presented.
This is so damn awesome. Do you think Twitter is the best platform for this type of on-demand government?
Even with HTTPS enabled, institutions can censor based on IP or DNS. Blocking based on Deep-Packet-Inspection is a bit complex to set up for normal schools i think.
Scenarios where the attacker is restricted to being a non-MITM eavesdropper are pretty rare, public wifi networks aren't an example of such.
> Early-stage investment is absolutely crucial

Yeah but it's not written in stone that such backing should come from VC companies similar to the ones operating in SV. If capital is not distributed in the same way as in SV, there is no point trying to aggregate and invest it the way SV does.
Windows 8.1 (waiting for W10)

Visual Studio 2013 (waiting for VS2015)
The worst thing about DAB is how stupid the DAB manufacturers have been prioritizing. 95% of all DAB radios you can buy are $50 plastic piece-of-shit-speakers stuff that you have in your kitchen or bathroom. Even if DAB(+) were to offer better sound quality than FM, you wouldn't be able to discern it. Adding insult to injury, a radio in a fixed location with good wifi coverage doesn't need any of the technical innovations in DAB wrt. elimination of multipath interference etc.
I recommend f.lux too. The only problems I've encountered with it are:

- doesn't take into account wacky sun hours in nordic countries during winter, I get around this by setting my location to be somewhere else

- isn't able to automatically detect when I'm playing a fullscreen videogame, when I would prefer it automatically switch off
We could really do with an HTTP referent-integrity specification. Just as you specify the size of a linked image, you could add a hash to specify the expected content of a resource. Particularly useful with large linked non-browser resouces.

http://www.w3.org/TR/SRI/

https://wiki.whatwg.org/wiki/Link_Hashes
I have quite a few friends in Paris who have also told me that 42 is good at teaching most standard CS concepts but they were definitely not a good choice for "mathematical" projects.
The real difference between Epitech and 42 is that Epitech does have a tuition, it is actually rather expensive by French standards.

42 innovated on that, I think it is the only privately-owned school with no tuition. Schools with no tuition (or a very low one that you can pay in one or two months of internship) are not rare in France though, it is actually the norm for the public "Grandes Écoles" and universities.
While this study agrees with everything I know from anecdotal evidence, it's not an enormous sample size. Two groups of 28 people each doesn't provide an enormous amount of statistical evidence.
I'd be more worried about my UA not being able to handle that scenario by just refusing to run that javascript payload.
Look up when "The Crucible" came out. Go on, I'll wait.
There's also a danger in users who will think that because the web is all "encrypted" now that must mean it's "safe", which will simply not be true.

Additionally, it makes website-owners beholden to the CAs (and I know they're already beholden to domain registrars but that's not really a good argument against adding an additional, arguably unnecessary cost to someone who just wants to run a hobby website.)
Except HTTPS does not (currently) solve data integrity issues in real life use cases, getting a certificate issued for someone else's domains is far from difficult... Especially since DNS is still plaintext.
Hey folks. Author here. Happy to expand on anything in the post or answer any questions.
Build your own GitHub request pull bot
That was a very helpful introduction in Wagtail's early days, but setup and installation has become much simpler since then. For Python developers it's as simple as

pip install wagtail
wagtail start mysite

Or you can deploy the demo to Heroku in one click:

https://heroku.com/deploy?template=https://github.com/torchb...
Make Money with ClickBank
>> The whole reason Bitcoin is interesting is that it's not under the control of a company, group, or government.

In reality it's under the control of the lead developers and the people that run the very few large mining pools. As shown by their collusion to fix blockchain forks etc etc.
Laravel itself uses these components. https://github.com/laravel/framework/blob/513960ff768c3bbe9d...
Under Fire in India, Facebook’s Internet.org Launches in Indonesia
The affiliate marketing echo chamber is strong, and seems to focus on memes of success and money. Funny how that ends up working out when you actually reach it. Nice to see some great conclusions at the end.