skysight-inc/HackerNews huggingface dataset:
A lot of continental inner-cities (Paris, most Italian towns) were already too expensive way before "immigration waves" were even possible. In that sense, newcomers never got a chance. Any town that has existed since Roman times has had two thousand years in which to solidify the link between location and social status, to a point that will likely survive anything bar catastrophic events.
The main benefit to me is that I can avoid homebrew and macports, which are utter garbage.

There are many other benefits in pkgsrc, including, but not limited to, stable releases instead of rolling release, cross platform support, corporate interest in making the platforms stable, because it's used as a basic building block in Joyent's SmartMachines etc.

But all this pales in comparison to the advantage of avoiding homebrew and macports.
$42 wildcard ssl - http://community.spiceworks.com/topic/539962-wildcard-ssl-fo...
They can't buy and configure an HTTPS proxy? Those things do exist after all.
How to Write with Substance
Curated free-to-use space photography
Bitcoin is 100 times More Powerful than Google
'53. It got a very short initial run resultantly, and there was a lot of talk in the papers about the "controversy" of witchcraft, in order to shift the debate away from the contemporary context.

Sure, it may not have resulted in book-burning (do allow me some hyperbole!), but I stand by my point that had that passage remained, this would not be a staple of American youth reading today, and the book would have ended up either obscure or "controversial".
I'm aware that there is a proposed service to simplify the acquisition of SSL certificates for websites but at this point getting SSL and HTTPS ready is both a costly and complex exercise for many webmasters. Managing several websites for generally small audiences (1000-5000 people) and with limited revenue to pay the costs associated with getting a cert makes me reluctant to support an outright ban on the use of plain HTTP especially when the content is not of a personal or indeed personally identifiable nature. How does the proposal address the ease of access to certificates and the current state of affairs in certifying authorities?
Science Says You Should Ignore Internet Trolls – TIME
Even if the bill/subsidies are returned , i don't see how corn-based sugars could compete with proterro which claims to make(using biotech) sucrose at 1/3 of the cost of sugar made from sugar cane.

Maybe if celluse based ethanol was viable there was a way ,but it isn't as far as i know.
Why is HTTP very useful? You can still mirror using HTTPS, even locally (using apt-mirror).

That said, Linux distributions don't usually use browsers to pull packages, so the point is moot.
What about confidentiality of the package downloads though?
e.g. Snoop the traffic, notice they are downloading a fix, they probably don't have it, automatically attack them before they apply it.
The people participating in the Google hashcode contest for any school do not have graduated from that school yet.
getting a certificate issued for someone else's domains is far from difficult

Is it? Please provide a cert for ycombinator.com. Thanks.
Introducing the Symfony Demo application
That would be the safest solution, of course ;) but I have a windows machine and I can't switch to another OS.

In the media, Kaspersky seems to be always up-to-date and they seem to provide a good solution. Is it just PR or do they really offer a good solution (I'm thinking about the Internet Security Suite and not just the Antivirus).
Not really, since javascript loaded into an image tag shouldn't run and I was already following an unknown link to an unknown location coming from an unknown server. The risk that it was intercepted by you is low, and the consequences seem to be low too.

You're also skipping straight over the risk that it happens at all, which is a fairly important part of a risk assessment.
Bitcoin regulation around the world: current state
Very cool. I love seeing these home made operating systems. Nice to see an in-house C implementation! The feature list is very impressive. Screen shot of GCC running in the terminal is straight up smooth!
Scientists Are Using Electrodes to Remote-Control People
HERE COMES A REAL AND HONEST ONLINE SPELL CASTER CALLED DR INSTANT DEATH. THIS GREAT SERVANT OF THE DEMONS OF DEATH IS INDEED A GREAT DEATH SPELL CASTER. THIS GREAT MAN HELPED ME CAST A STRONG DEATH SPELL ON MY WICKED MOTHER IN-LAW AND JUST WITHIN 24HOURS THE WITCH WAS CONFIRMED DEAD. NOW AM FULLY HAPPY AND RELAX IN MY MARRIAGE. IF YOU NEED AN URGENT DEATH SPELL ON ANYONE ASAP THEN CONTACT THIS GREAT MAN IMMEDIATELY VIA EMAIL ADDRESS, quickrevengespell@yahoo. com
jhourcle has addressed this for his type of data with an https side channel for checksums of files available for download. See the response to the comments (also explains why rsync is not appropriate in their system for a specific class of file).

jhourcle is not against https, but he/she wants the ability to use http where an exception is needed. The cost of the certificate is negligible, but the ability to keep a fragmented, heterogeneous (age wise) environment is part and parcel of the job, and NO additional funding is being provided to accomplish or operate this under https.

From reading the original and the response to other comments, it is apparent to me that jhourcle has thought this through and is only asking for an exception process that they can file for. Just as they do today for systems that are not in compliance (not related to https) for various reasons (ref: comment response).
We are living in the future ,Ladies and gentlemen!

Call of Duty Advanced Warfare

https://www.youtube.com/watch?v=idphc8MlwDs
Interesting. I was going to write a similar article myself, tho showing how C++ can be more efficient for even 8 and 16 bit processors than even C.

The combination of templates, an optimising compiler that inlines code nicely and avoiding virtual functions means you end up with extremely efficient code while still allowing nice abstractions where necessary.

Part of the trick is to also avoid dynamic code as much as possible; it is critical in embedded systems to avoid including any code that is wasted in a single-application system. This means no dynamic-memory allocation, statically allocate everything and use templates for drivers so addresses can be inlined straight into the code allowing the compiler to remove any overhead.
Doing this means, startup time (and importantly, wake-up-from-deep-sleep time) is minimised all the while allowing for nicely decoupled code through the use of C++.
Global Web Developer Survey
What Do American Football and Start Ups Have in Common? Everything
I'll fix that, and add nodejs-0.12 too. 0.10.36 was current at the time that pkgsrc-2015Q1 was frozen for release, but I can build them from our separate pkgsrc-joyent repository.

Thanks for the heads up.
It's also messed up that we have to pay for domain names. Why can't we have them for free? I want Google.com please. You can get free certs now, and more ways to obtain them are coming this summer. In either case, let's solve our immediate problem now, then add different authentication methods to browsers after.
Go-getter: Like “go get”, but different
This seems to make two wrong assumptions:

1. HTTPS does not only guarantee that data is secret, it also guarantees that data is not manipulated. And in this sense scientific data is very sensitive - it matters that you know your data is the correct data.

2. As so many do, it vastly exaggerates the performance costs of HTTPS. They are really minimal. If you really care I suggest you benchmark before you make any claims regarding your servers can't handle it.
Yes, and what I'm saying is that other cities will likely lack "investors who previously got rich from startups themselves" with an angel attitude, so there is no point in trying to hunt them down.

The beauty of SV is that you can find capital at pretty much any level: from bootstrapping angel to big-time VC to exit deal. Other districts will likely lack some or most of that, at some or most levels, and will have to compensate some other way.
Every time someone mentions Box, I find myself obligated to quote one of the funniest passages in recent tech history: the Risk Factors chapter from their S-1 IPO filing:

## Risks Related to Our Business and Our Industry ##

### We have a history of cumulative losses, and we do not
expect to be profitable for the foreseeable future. ###

We have incurred significant losses in each period since
our inception in 2005. We incurred net losses of $50.3
million in our fiscal year ended December 31, 2011, $112.6
million in our fiscal year ended January 31, 2013, and
$168.6 million in our fiscal year ended January 31, 2014.
As of January 31, 2014, we had an accumulated deficit of
$361.2 million. These losses and accumulated deficit
reflect the substantial investments we made to acquire new
customers and develop our services. We intend to continue
scaling our business to increase our number of users and
paying organizations and to meet the increasingly complex
needs of our customers. We have invested, and expect to
continue to invest, in our sales and marketing
organizations to sell our services around the world and in
our development organization to deliver additional features
and capabilities of our cloud services to address our
customers’ evolving needs. We also expect to continue to
make significant investments in our datacenter
infrastructure and in our professional service organization
as we focus on customer success. As a result of our
continuing investments to scale our business in each of
these areas, we do not expect to be profitable for the
foreseeable future. Furthermore, to the extent we are
successful in increasing our customer base, we will also
incur increased losses due to upfront costs associated with
acquiring new customers, particularly as a result of the
limited free trial version of our service and the nature of
subscription revenue, which is generally recognized ratably
over the term of the subscription period, which is
typically one year, although we also offer our services for
terms ranging between one month to three years or more. We
cannot assure you that we will achieve profitability in the
future or that, if we do become profitable, we will sustain
profitability.

http://www.sec.gov/Archives/edgar/data/1372612/0001193125141...
A Pressing Business: Inside a Czech Vinyl Plant
Be more productive without breaking flow
Google Wallet funds are now FDIC insured
No myths, no buzzwords, no methodologies. This is good, solid advice.
This is still much less than they get in other developed countries. The alternatives of no support...well...you just have to come to China to see how that works out.
All Pokemon lovers want Brock in real life.. here it is
For example, "Google Admits it Hires Too Many White Dudes" or "Amazon’s Diversity Report Is Another White-Male-Dominated Tech Story".

http://techcrunch.com/2014/05/28/google-admits-it-hires-too-...

http://techcrunch.com/2014/11/03/amazon-diversity-2014/

(Both reports show that Asians are overrepresented, white people represented, and others underrepresented.)
Until there's a free, easy, maintainable, and actually existent solution to SSL certs, enforcing HTTPS-only is just downright extortion.

Referring to solutions that are under construction doesn't cut it. If you're that passionate about it, contribute to the SSL cert solution yourself instead of to the endless calls for HTTPS-only.

The 'Semantic Web' movement promises that if everyone would just publish their websites in XHTML with RDF annotations, we'd magically achieve world peace and end hunger. (I exaggerate slightly.) Should we ban non-semantic websites?

Physical snailmail and the spoken word are unencrypted. Both are frequently used to transfer data more sensitive than cat pics. If I'm surfing a website in a coffee shop, yes, there's a danger someone could intercept the data to spy on me. But they could just as well look over my shoulder, and HTTPS-everywhere isn't gonna do anything about that.
AIUI a lot of the private investment is sovereign wealth funds and wealthy individuals; some of it is large pension types but those are increasingly just indexing.

Note how few hedge funds exploded in the 2008-9 crisis. Rather what we've seen from the hedge funds is several years of underwhelming returns. I wonder if part of that is slowly meting out the losses that they never declared back in '09.

Banks are hopefully doing less of the big private investments? (I don't actually know). In that case this might be the kind of bubble, like the Tokyo property bubble of the late '80s, that never actually pops, just slowly deflates.
I would certainly include "the war was between the US and Britain" as one of those myths. Many historians see the American revolutionary war as an extension of the 7 year war between France and Britain -- France supplied the navy, the material, the money, and the leadership (Lafayette). America provided the cannon fodder. France spent so much on the American revolutionary war that they bankrupted themselves, leading to their own revolution a few years later.

It's funny. Whenever France is mentioned in a political thread, inevitably a joke is made about the ineffectiveness of the French military. Most commenters don't realize that joke is grounded in American insecurity about their own founding myth.
I know the web is not print, pages are not static, user screens vary and one shouldn't try to control everything bla bla bla, but it seems all my layout woes ultimately boil down to difficulty in lining things up.

That's what 'layout' means after all, isn't it? Aligning one thing with another, to show they're related. I'm not a classically trained graphic designer, but doesn't any explication of visual fundamentals include 'alignment' somewhere up near its top?

Yet CSS really, really sucks at lining things up.

Anyone designing a better system might do well to start with the notion of alignment as a basic primitive/operator. To be able to say, item A here ought to line up with item B there (and if not possible, predictable behaviour C results).

My gut feeling is that one could then derive all other types of layouts from there. I admit that might be naive. Also, I realise that I've probably just described constraint-based layout, but as yet I haven't tested one of its implementations such as GSS in a real project.
Ask HN: Ok to ask retainer fee for being avail during office hours?
I'm in the middle of negotiating a nice freelance gig. The client now wants me to be available large parts of the day during office hours so internal developers can run things by me and be more productive.

That's all fine, except that part of the reason I'm freelancing is being able to be flexible in how I schedule my day.

Is it common to negotiate for an upfront retainer fee based on this? After all, I'm committing myself to be available for solely said client during the agreed on hours.

Another way would of course be to try and get a higher hourly wage, but it seems better from a negotiating standpoint to split to two.

Thoughts?

-EDIT-
To be clear, the time that I need to be available for them are billable hours, i.e.: to get the primary job done for which I'm hired.

On top of that I need to be available for internal developers during those hours should the need arise. I therefore have to structure my working hours around the office hours of the client.

Therefore a retainer fee would sit on top of billable hours and would compensate for my lack of flexible working hours NOT incurred opportunity costs.
All of these are running on micro controller or similar embedded platforms that are are significantly slower to change than consumer CPUs. Calling them obsolete is not a realistic stance to take. Some of the hardware has changed over the years, but the changes have been mostly to the sensors used and other peripherals, they are still using the same CPUs they did a few years ago and they're definitely not obsolete.
>As far as MITM and identity go, could we at least modify the
>protocol to allow fingerprint caching, as opposed to certs,
>as a fallback?

We already have that. It's called HTTP Public Key Pinning (HPKP). But not "opposed to certs". In addition. Which is the right thing to do: Don't use it as a replacement for existing security, but add it on top of what we already have.
> If you request a carrot cake recipe but receive a modified recipe that uses arsenic instead of carrots.. Without https, this kind of thing can easily happen

I can easily get struck by lightning when I go outside in the rain. I can easily get eaten by mountain lions who break out of their cages when I go to the zoo.

There being a one in ten million chance of something happening doesn't dismiss all of the valid concerns the linked article raises.

The importance of HTTPS' added security is something for both the host and user to consider. The host can choose not to implement it, and the user can choose not to trust/view the data if they have even the slightest possible reason to believe their data might be modified maliciously in transit; or tracked for some sort of profiling that they want to avoid.

As it stands, I'm weary about accessing any Chinese servers without HTTPS; but I'm not at all concerned about my ISP or government MITM'ing my connections to Ars Technica for nefarious purposes. Nor do I care in the slightest if my ISP knows I read a story there about Norway planning to drop FM radio transmissions.
With 80%+ of corn grown in the US being from Monsanto seeds, you can bet that there is going to be a lot of push back against this. Why are taxpayers subsidizing an already profitable industry? How many millions does Monsanto spend on lobbying every year?

http://ourworld.unu.edu/en/can-we-feed-our-world-without-mon...
> HTTPS is not throwing away HTTP. It just protects it with TLS.

Actually, in the issue that is linked the real problem is that HTTP is to be discarded in the government.
What if they replaced the cat gif with a some objectionable content? e.g. a beheading, surely this could scar you for life?
Anyone looking for L'Engle's views on politics and "security" should be looking in the many passages she _did_ publish. They might start with "A Swiftly Tilting Planet", set on the brink of a nuclear war.

This passage was well cut. The dialogue is clunky and Mr. Murry's views are overblown and poorly thought out. Worse, Meg's stated desire for "security" is completely out of step with her nonconformist character. She gets into fights to protect her brother, she refuses to do math as her teacher prefers because her way is better. She hates that she doesn't fit in, but she never tries to be "girly" or take up the interests of the other kids. This isn't a person with any sympathy for an overwhelming desire for security.

L'Engle may have been experimenting with this passage, maybe looking to balance the book against the possibility that it might be read as an anti-Soviet parable. Whatever the thought behind this passage, the book never needed such balance. It's firstly a wonderful story, with a theme of the dangers of conformities of all kinds.
I have a subreddit[1] and the regular github[2] issue tracker. It works pretty well :)

Reddit has a much lower treshold for people to register themselves than 'big scary' github, leads more often to discussions with users and can be moderated by others from the team as well. Also, no spambots!

Brilliant platform imo :) The users usually come with a suggestion on Reddit, we discuss the pro's and con's right there, and if it's any good and will also benefit other users without introducing months and months of development work, we'll consider implementing the requested feature, create a Github ticket, and link to and from it from Github.

[1] http://www.reddit.com/r/duckietv
[2] http://github.com/schizoduckie/DuckieTV/issues/
Who Doesn't Want to Live Forever? The Cult of Singularity
He probably got downvoted for messing up the technical terms as castell and geococcyxc pointed.
Todoed on chrome
Is anyhthing known about the internals of it, i.e. what code does it use? Something like SetDeviceGammaRamp on Windows? Or does it talk directly to the video card driver (if that is even possible in a generic way)? Or the monitor? Does it still work reasonably if I already have set my display to low brightness etc?

edit also wondering: it cannot know if I'm sitting in a completely dark room, a sunlit room or a room at night with fluorescent lighting. Don't such factors change what the ideal color would be? (not that I am constantly adjusting my display now according to the amount of clouds outside, just wondering what it does exactly. There's like no info whatsoever?)
DIY Ruby CPU Profiling – Part III
"My choice to do something is a freedom that cannot be taken from me" is the same sort of argument people use to carry assault rifles around shopping centres. Sometimes you should be willing to give up a freedom if the result is a benefit for the whole of society, even if you happen to like or benefit from the status quo. That's part of being a member of humanity (or at least, it should be).
Thanks for the feedback. Multi-Screen support has been added.
30 kg is _huge_. People who have kids surely know that carrying around a 10 kg toddler in one's arms for an hour is really taxing on the back.
This is fine, but in my experience, when I try to contribute to open source projects I use at work - the outcome a lot of the times is a few days to weeks (and in one case 2 years) of radio-silence on the PRs/issues that may or may not result in a merge or any response at all. Most of the time it does result in merges, but sometimes just talking to the author and asking if he needs help with something takes time. So it doesn't scale for most projects.

Another approach (we're also doing) is to open-source components of our code that might gain from a small community adoption. A side effect is that it contributes to creativity and the quality of work, and teaches people how to deliver high quality software.
This is an incorrect analogy. Domain names are a finite resource, the cost of signing a certificate approaches zero.
Best Place to Listed Your  Business Online
http://krebsonsecurity.com/2015/02/webnic-registrar-blamed-f...

http://www.zdnet.com/article/revenge-hack-put-5-5-million-do...

http://www.educause.edu/educause-security-breach-and-passwor...

If you're missing my point, these all of these hacked orgs had the capability to issue SSL certs.
> How do you know what user intent is?

I can tell you what it's unlikely to be. It's unlikely to be to fire HTTP requests at the arbitrary keyboard repeat of their particular computer. It's unlikely to be to machine gun off HTTP requests so rapidly that no pages ever get rendered.

Or perhaps I'm wrong. Perhaps there's a reasonable user behavior I'm forgetting. Please, enlighten me.

> If I'm holding the F5 key down, what do you think I want to happen?

At a guess, it would be to refresh the page repeatedly. In which case the ideal browser behavior might be to refresh the page at the maximum possible speed that would still allow some kind of visual feedback. Perhaps it could repeat as soon as the previous requests hits first paint. That would make sense.