skysight-inc/HackerNews huggingface dataset:
This should be free. They're either passing up on the money restaurants would pay to bump numbers on slow nights or getting you coming and going, as it were. (There's certainly the possibility that they want to stay ethically clean, but the cynic in me says a random startup I know nothing about is, well, a cash strapped startup).

This isn't to say that they shouldn't take restaurant money, there's certainly precedent for it and people love Yelp. Being transparent (or simply keeping quality up) would be a good check.
That's true if you're trying to save money by putting a ton of domains behind a single wildcard cert using a single private key. But there are security advantages to using multiple wildcard certs based on different private keys. One of them is that you can develop a nearly infinite number of sites without exposing the domain name via the certificate, so they can't be crawled or pentested until they are deployed publicly. The number of certs you buy should be based on the number of private keys you can securely deploy.
I really respect Sam as a CEO. Anytime I've seen him talk about the music industry, it has been fresh and his ideas could really fix it. I used grooveshark for as long as I could, but moved to Spotify about a year ago.
There's a few nationwide pager networks out there; they're quite easy to build without the task of making communication two way. Just set up a hundred or so watt UHF transmitter at an antenna farm, feed it with PSK or FSK from a satellite receiver, and boom! You just covered most of a large city.
Great article. I remember going out and buying a PS2 the day FF 10 part 2 came out. (I had played all of them up to this point, just didn't have my own PS2)

That was the biggest piece of shit. They took some of the original places in 10, and added shitty boring minigames to do. That was the entire game. Oh, i guess the girls could all change into different swimsuits or something, but the plot was they were going to be rock star girls or something.

Final Fantasy took a nose dive right after 10 imo.
deprecation of v1 info: https://developers.facebook.com/docs/apps/api-v1-deprecation
>My favorite was a visiting professor from MGU (Moscow State University) teaching 5th graders how to translate Babylonian Cuneiform, including how to infer meaning of writing that no spoken reference exists for. Not really useful right now, but is the very definition of cool when you are a kid!

Not just when you're a kid. I'm 34 and that sounds awesome.
I've been using Linux for many many years and do it for a living but I've somehow always glossed over BSD and never spent much time learning about it so I'm genuinely wondering... Those of you who'd prefer BSD over Linux, why?
Indeed. There are whole third party presidential candidates whose "real" goal is to do this with their platforms.
Spotify uses Chromium Embedded Framework to serve a lot of UI elements via HTML/CSS/JavaScript[0]. Anecdotally, there seem to be a number of desktop apps moving in this direction.

[0] http://www.quora.com/What-is-the-technology-behind-the-Spoti...
The Real Issue with Valve (And No, It’s Not Paid Mods)
Link seems broken to me
There is actually statistical theory on the best methods for fitting a circle to data. Here's an open-access paper:

https://projecteuclid.org/euclid.ejs/1251119958

I believe this website is using what the paper calls the geometric fit, which is considered one of the better methods, but the paper develops an even better method.

(I had to use this, strangely, in a physics lab course. I was measuring the Zeeman effect by looking at the diameter of rings of light projected by an interferometer; I took webcam images of the ring and used the algorithm to fit circles to the ring and hence measure its diameter.)
My sentiments exactly. I'm 30.
I imagine a lot of Haskellers would tell you yes. They love an opportunity to tell people who great Haskell is for anything. I'm not saying it's not in this case (I really have no idea) but I'm sure many would.
De-extinction: a novel and remarkable case of bio-objectification
A Hobson's choice is still a choice isn't it? Says so in the name anyway.
coffee for sure, several cups a day - black, no sugar or cream sometimes add a shot of espresso.

Tea - once a month
Yes. Just email the self-signed certificate to yourself, then open it up on the iOS device. You can also create a personal CA and install it the same way, if you plan on connecting to more than one host.

A quick search turned up some more instructions here: https://blog.httpwatch.com/2013/12/12/five-tips-for-using-se...
DIY X-ray backscatter imaging system[video]
You could use some website which you connect to securely (CA signed) which fetches and displays fingerprint C. You can then compare it to A and B and the one which matches C is the "true" one.

Of course the whole thing can be automated by the browser and happen behind the scene - i.e. Firefox connecting to a Mozilla service for each self signed website it sees and comparing the fingerprints. Then it can store information about this self-signed certificate as trusted.
Noooooooooooooooooooooooooo...
I grew up homeschooled in the Phoenix area, and and most of my friends' families had a single income. My dad is an engineer, and even though I have ten siblings we lived just fine on that income. My mom worked briefly as an engineer before she decided to forgo that to homeschool us. It's definitely a cost, and if this article is missing anything it's not clear enough that homeschooling is a large commitment.

Many of my friends' parents weren't engineers, and some would fall into the "poorer families" category, but they still decided that forgoing an extra salary to homeschool their kids was worth it. It's a very real trade-off, but given most people's level of spending, it's not that hard to cut down quite a bit while maintaining an excellent quality of life, if you have a good enough motivation.
Yes I am aware of key pairs. But my understanding is that RSA key pairs are often (and unless im mistaken, required to be) the same number of bits.
I'm really not sure what the point of referencing Rust is. This was about programming languages in general, and the post I was referring to was about C#. Also, importing is an example, another example would be accidentally declaring a second variable in the same module (should not happen, but people make errors), or a number of other situations where two identifiers that are identical except for case end up in the same scope.
The headline implies there is a connection between the two events. Just like the headlines in your 6 examples. For example, the 6 died because of the standoff, due to gunshot wounds caused by the standoff. It is rare for a headline to use after solely as a temporal relation.
Old School Viral – The Lost Art of Street Teams
It seems Kickstarter should allow people to set a maximum number of donations and cut it off after that. It they could have handled building/wanted to build 50 machines, but not 5000, they should be able to set an upper limit on the number of backers to their project to prevent runaways like this.
'hihi' or 'hi hi' is another, fairly rare, written variant that is used as laughter in morse code, and has migrated to written text by people that commonly use morse code.

I'm not sure the exact reason, but it does make all the letter dits. 'ha' is spelled .... .-, but 'hi' is spelled .... ..
I have enough Latin American Facebook friends that "jejeje" is starting to seem like the canonical e-laugh.
Likewise, I only use "Haha" for things that are truly funny. "lol" is reserved primarially to lend a degree of self-awareness to a particularly absurd or stupid statement that I say or recieve.
PiinPoint (YC W14) Is Hiring a Head of Marketing in Waterloo, Canada
Maybe it was a cheap shot (or maybe Mongo's just an easy target ;-), but I actually think this is very cool.

Hopefully it will give people who like the simplicity of interfacing with Mongo a safer, more reliable option.
Plynd: Empowering HTML5 developers to build great multiplayer games
Technically I think the requirement Digicert is referring to only forbids issuance for "reserved" IP addresses.

https://cabforum.org/internal-names/

The PDF document defines "Reserved IP Address" as "An IPv4
or IPv6 address that the IANA has marked as reserved".
Say the owner of a website with a self-signed cert fears it might have been compromised, and decides to create a new cert. How is the user supposed to distinguish that from a MITM?
Yes, enforcing case strictly via style guidelines that prevent mixing of upper- and lowercase is another way of avoiding that problem (underscores can still trip you up in a similar fashion, of course, e.g. signon vs. sign_on). I'm still not sure how the discussion got sidetracked into discussing Rust, though.
If you don't have an external backup, don't complain about losing data.

Services like Grooveshark are no exception.
If you're running Chrome instead, you still do; they have similar plans.
Another 'haha'er here. I can't stand LOL, though this TED [1] talk gives an interesting look at its use.

[1]http://www.ted.com/talks/john_mcwhorter_txtng_is_killing_lan...
It's exactly what they're doing with Let's Encrypt.
I'd be inclined to agree if "text-align: center" weren't already in the page source...
The lawsuit that killed it can be found here:

http://www.plainsite.org/dockets/mrgtoqd0/new-york-southern-...
As a native of Gainesville, FL (where Grooveshark is based), this is really sad news. Certainly they made mistakes, but what few see is how much they contributed to the tech community here. Their CTO has personally mentored many companies in the area, and they have a presence at pretty much every tech-related event. I can't think of any other company within a 100-mile radius that can fill that role now that they're gone. Hopefully they'll spin off some new businesses in the area. Otherwise this will be a huge blow to Gainesville's already struggling tech and startup communities.
Mentioned this last time, but since I didn't see it elsewhere in the thread, will mention it again... what about LAN resources served over HTTP like NAS, Printer, AP, etc.? These devices don't have DNS, forget about about SSL.

Is the entire local subnet going to be a secure origin like localhost? Because that sounds problematic... What I want is a way to single-click pin a self-signed certificate to "turn it green".
So, to what extent does this address the concerns of Tim Berners-Lee, expressed in "TLS Everywhere, Not Https: URIs"
https://news.ycombinator.com/item?id=9424327
?
I'm not convinced that's the backbone of the web at all. Can you back up your assertion with anything beyond emotional pleading?
> didn't help them one iota but caused a lot of fire.

Yes, I was referring to the relationship with customers. The result would likely be the same, but it wouldn't end with personal attacks and attempts to uncover a fraud.
I always use eh, like I'm kind of laughing but kind of not impressed. Keeps them on their toes.
Sure, it's still a choice, but it's a situation where you don't have the upper hand and you are bound to lose no matter what you do.
What if the same file has 2 separate commits you want to split up?
Maybe open speech v. free speech is a useful nomenclature here.

Example being freedom to hate speech and slander, free speech comes with hidden trauma terms of repression. We say speak your mind, but remove your name if you do not align more, if you show your real heart and mind so weird and normal.

Where we assign value to terms of recognition is often needing (Data-)Empathic Accuracy for actionable intelligence (open source intelligence) about Poverties of Thought.

Smarts to save or kill 0 to 1 (or ∫), is a pain dicotomy that faces artificial intelligence, and if we want emotionally determinable stability from structures we need basic smart list/listening.
>> Have everyone kick in $15-20k/year each year
>> It'd be cheaper than private school

> That's comparable to the most expensive private schools

I'm surprised. In the UK, the good ones[1] tend to be around $40k USD p/a for day pupils (rising to $50k if you include board), and that's mostly outside of London.

[1] http://en.wikipedia.org/wiki/Public_school_%28United_Kingdom...
That sounds essentially the same as how Let's Encrypt works: https://letsencrypt.org/howitworks/technology/

Except that rather than creating a self-signed certificate and then asking an external service to store a fingerprint, you just let the external service sign your certificate.

EDIT: Oh yeah, and signing the certificate up-front has the nice benefit of not forcing browsers to leak private information (namely, the domain names that are being accessed) to a centralized third party.
Yes. Obviously. I should have been downloading the tracks I was listening too and wring my own scripts to parse and save my playlist data with the full expectation that the service I had been paying for would be terminated without warning...

Guess I'll know for next time.
Thank you, that worked great as it had majority of my library saved in JSON format.
The move to deprecate HTTP is solely inspired by the need to authenticate online communication. It's necessary to protect speech on the web, because it makes it harder to tamper with the content in transit. Your ISP shouldn't be able to inject ads into a web page, a WiFi access point shouldn't be able to change every "do" to "do not", and a passive listener shouldn't be able to collect information about you for his own gain. SSL/TLS is a huge mess and the current CA situation is abysmal, but authentication needs to happen now, or there will be no privacy or freedom on the Internet.
Me too, but I'm only 23.
Riots are destructive, but can lead to social reforms
Huh? This is terrible.

I use same names with different styles to denote scope. I will be hosed then.
To be sure, that is a lot of miles, but the PCT is mostly trails designed for pack animals. This means gentler grades and less elevation than the 500 mile shorter Appalachian trail (for comparison). 20-25 miles per day on the AT can be down right brutal. It is just another day for many on the PCT. Also, you do need to carry a lot of water at points on the PCT, but I agree. 25 lbs is heavy when you are trying to cover big miles.

I try to never carry more than 4 days of food and my base pack is downright light. It is pretty great. Call it about 7 lbs. I don't feel I give up very much comfort honestly. I like to go big distances and see a lot of things.
At the very least, your spidey sense should be better tuned to the markers of projects headed for failure, like lack of hard and technical details, too much optimism, etc. I still back hardware projects, but it takes a grown-up, passionate team to move me.
Investigating Spark’s performance
Generally yes, but subkeys can differ in length. I'm not sure if RSA supports subkeys but that's my initial thought.
It's fascinating to me that some people are asking the founders to return money that comes from a fair sale of equity into the company and not from some, say, public source.

Is there some kind of psychological background that explains these people's views? (Assuming there is no ignorance of the process of funding of startups)
New third-party supplier for Google Apps
Google apps customers are being notified by email:

New third-party supplier for Google Apps

Hello Administrators,

A new third-party supplier, EPAM Systems, Inc., based in the United States, will soon provide customer and technical support for Google Apps. Their services may include phone and email support for customer queries, diagnosis and resolution services, and incident tracking.

Customer support for Google Apps core services is described in your Google Apps account agreement. No action is required on your part. You can view the list of third-party suppliers at any time from your Admin console.

Sincerely,
The Google Apps for Work Team
1) Haha, well the "current major mobile threat" jab was more tongue in cheek, and you're right - it's the "No iOS Zone" vulnerability. The citation is the following: RSA conference presenter SkyCure discussed the possible vulnerability [0] in iOS 8 that _could_ allow iPhone users with iOS 8 to be victimized by the equivalent of a DoS attack. And, the org has worked with Apple and iOS 8.3 likely fixes the issue.

2) However, while I wasn't making an argument per se, more just thinking out loud about architecture choices, especially when they "mimic" systems that are not for the same purpose, I do believe that is a small part of the problem when it comes to mobile security as pertains to phones. And, maybe I'm also thinking that with that in mind, there might be room for a whole separate set of protocols and methods for interacting with the Internet (or a reasonable facsimile of it) from your phone, which is not a PC :-)

[0] https://www.skycure.com/blog/ios-shield-allows-dos-attacks-o...
I'd guess they're using subkeys...
I would recommend making this part much more prominent, rather than burying it on a secondary page, since this seems to be the selling point:

"We provide the coding-expensive experience of setting up a multiplayer game: Authentication flow, invitation, matching, notifications, chat, and more are there automatically for your players to enjoy."

"Empowering" by itself seems kinda vague.

Just my 2 cents. :-)
What do you mean by "write mobile Applications as desktop application"? How would it be possible on mobile devices e.g. with limited RAM?
> The startup comparison is not silly, because my point is not about houses. It's about after-the-fact commentators finding occasions to kick people when they're down.

The reason why I thought it was silly is not just that. Startup owners are known to take risks because they venture in stuff that has never been done before and therefore high-risk is a natural factor in that environment. Renting your house is nothing like that: it's very clear from the beginning that it could be trashed by the occupants, it's a very REAL and tangible risk (and it has been known to occur in many occasions), nothing like the "Unknown" startup owners face.

You need to be wise to be a startup owner (and lucky), but renting your own place (if you actually care about it, like that person in the article) is just silly in terms of benefit/risk ratio.
Well, the flipside is, let's face it, their business was pretty darn shady... not much a role model for other up-and-coming entrepreneurs.

I absolutely grant you their technology was pretty cool, and the community features they built are still unreplicated anywhere.

But I'd rather laud businesses who manage to combine cool technology with an ethical, sustainable business model.
That's just FUD. Nobody is planning to block plain HTTP requests altogether. You can still put up a website on any computer and serve it over plain HTTP, and it will render correctly on most browsers.

The plan is to disable some of the "more dangerous" features when the page is requested over HTTP, in order to entice webmasters to adopt SSL. The list hasn't even been written yet, but I'm guessing that most of those features will be fancy javascript and third-party plugins like Flash. Which you probably shouldn't rely on being enabled in the first place.

I personally wouldn't mind if every insecure page behaved as if I had NoScript & NoFlash enabled by default.

You may be right about the excessive idealism of so-called HTTPS nazis on some online forums, but I'm pretty sure that the people in charge at Google and Mozilla are more level-headed and realistic.

> the goal of this effort is to send a message to the web developer community that they need to be secure
>> Doesn't it make sense to open source code when you know the product is dying?

That can depend on how much of the code base is their own. If they integrated any licensed components then they may not have the resources necessary to clean it up for release.
We have `kek` and `w`.
Nice man, I used Flixster for a while, but just noticed some REALLY annoying ads on that app ... space for improvement!
All browsing behavior can be used to build a profile about someone, whether for advertising, surveillance, or whatever. There's a lot more information in the fact that person A visited pages 1-6 on unencrypted website B than one might realize. This reason alone should be enough for us to demand encryption (not necessarily via CA certificates) for any connection that isn't demonstrably local and unintercepted.
I agree with your analogies, but I think that there are at least a few intermediate levels between high-level process description and code that benefit from some sort of spec. Good specs fill the gaps between the zoning and the pavement.
I apologize for not responding sooner.

LCD displays operate by partially blocking or completely blocking the backlight to produce an image. The blocked backlight photons are not used to generate the image. As opposed to a CRT or OLED display, which generate light to produce an image.

What original argument? This is my only comment on this thread. My point was that "X-powered" does not mean "powered-solely-by-X."
As a consumer, I'd love if Apple forced developers to respect people's decision when they opt out of being tracked. That would be a huge game changer.
Grooveshark, I want you to know I loved you. As a user. As an ex-employee. You taught me so much. I remember my task as an intern was to turn Autoplay into something more beyond office employees voting on their favorite genres of music. I remember my first attempt at an algorithm, everyone got Coldplay as their recommended artist. I remember when we discovered Hadoop for the first time and our analysis on TBs of data took minutes instead of weeks. I remember when Ed accidentally dropped the Artist table on master, then quickly stopped the replication process before all hell broke loose. I remember when Nate made it so every image on any website I visited on my laptop showed sexually explicit material when investors came for a visit. I remember when Skyler met his (now) wife. I remember learning about advertising and meeting Less Than Jake. I remember learning not to run a Group By on mysql when it had 8 billion rows in the middle of the day during peak use. I remember going without a salary for 6 months because we had no money. And yet we persevered. You guys and girls gave me excellent real world experience at a time when I shouldn't have been trusted with a computer. Thank you for all the good times and the great culture you instilled. Hope the Atlantic gives everyone free tallboys tonight.
Has the New Yorker ran out of ideas for important issues to cover? It's funny, granted, but with everything going on in Baltimore and Nepal, it seems misplaced or at last badly timed.
Would be nice to have multiple teams to one itunesconnect account first. Seems pretty obvious.
Okay thug is exclusively reserved for Indian people. It's our word, stop using it :p

I've never heard it in a racial manner either. The play of words is silly, it just shifts the attention from the real issues at hand i.e. excessive police brutality and civic unrest.
I anticipate that phasing in SSL everywhere will bring clarity and affordability to SSL.

Clarity, because there will be so much distilled information and tooling around setup.

Affordability, because there will be so much volume that companies will start to compete on price in the same way that domain companies do.
First Groovy gets its development funding pulled and hosting infrastructure shut down, now 3 months later Grooveshark does the same. It's not a good year for anything named Groov* in the startup space!
We can't have an intelligent conversation if you're going to suggest that free speech doesn't currently, and hasn't always happened on the web.