skysight-inc/HackerNews huggingface dataset:
>> It reduces the total number of endpoints that need to go through SSL. That is a win complexity wise. I do not need to hand over SSL keys to my CDN for instance. I just put the file there and keep my checksum list on a server I actually do control the keys on.

So each asset loading connection now requires two connections, one to the content-holder or cache and another to the reference server. I'm not sure this is really reducing complexity. Plus you now need another server that's prepared to accept just as many connections as the CDN to serve signatures, likely increasing latency. I would be surprised if the total compute power and cost comes down very much with this scheme.

I can see how it helps server security in this case, reducing private-key proliferation.

>> At the cost of people knowing which files are downloaded.

Yes, this is still the case, that an observer will know exactly what assets you are loading.
I mean that while browsing unencrypted, the user can be phished away from the site quite easily.
in response to qzcx's reply, it's true. If you want fundamentals then something like Java, Python, or C, C++.

JavaScript really is the way to go to get your feet wet just because it'll give you the experience to build a wide range of platforms such as: Mobile (Cordova, Appcelerator, React Native), Desktop (AngularJS, RequireJS, Dojo, jQuery, Vanilla JavaScript/ECMAScript 6), and Server Side (NodeJS - basically you don't need to learn a front end and back end language).

But still, you should definitely learn one of the more traditional languages at some point in time, especially if you're doing this for a living.

And I would recommend just figuring out something you want to build and just build it. Focus on building and everything will start coming together. You should definitely study, but studying alone will not get you anywhere unless you apply it. And if you're planning on doing this for a living, nothing beats being able to show potential employers your previous projects.

As for your plan, that's definitely enough time. You will definitely get somewhere with it!
The age of perception: a $20 trillion dollar per year opportunity
Rain clouds and radio don't mix well. That's why weather stations use radar (radio) to detect clouds.
This argument was not intended to be emotional; it's just a bit less technical and more down-to-earth. Unfortunately, when we're looking at what is right or wrong thing to do, some emotions inevitably wake up. Still, the same point can be made using strictly rational arguments, both from first principles or from practice and history.

Also please note that nobody is forced to wear revealing skirts or use concealing encryption. You are free to do what you think is right. I very much appreciate what you do, and wish you to continue unhindered. I hope we can disagree on the point of usefulness of encryption in certain cases without affecting everything else.
"copied" the work is a more accurate word. Not to say that it isn't bad (it is).
:-)

I seem to remember getting 50-70Mbps with SSL on my Raspberry Pi (not RPi2). I had to tweak my cipherlist, but not to anything unreasonable insecure. The limiting factor there though was by far the USB hard drive attached.

Banana Pi has SATA onboard, and not a NIC that's attached over the USB bus, so I'd recommend that in most cases.
You might be right about this. I found no mention of this at all in the Norwegian constitution, and I found various clauses explicitly giving immunity for votes cast during their tenure in several other constitutions I looked at. This presumably also applies to laws later ruled unconstitutional.

It is not what I would have expected, and strikes me as an oversight. Moreover, it reeks of entitlement.

There should never be any necessity to pass laws that even come close to violating a constitution, so no, I do not believe it would slow down the legislative process.

Instead, it would provide an incentive to avoid passing laws which will hopefully soon be struck down again, some 2-10 years later, but may cause damage to society in the meantime.

If politicians need to be afraid of the constitutional court for passing a specific bill, they should not pass it. There is also usually a way to demand an opinion from the court before a bill is passed, which might absolve them in this regard.

Surely the incentives should be set up to avoid unconstitutional laws from ever being passed in the first place, and not to only be active for "short" periods at a time?
> A line like that could mean almost anything.

Actually no, you are incorrect. Calling people "dumb fucks" for trusting you and/or your site is a statement with a pretty specific meaning behind it.

For a fun exercise, how about you explain the multitude of meanings you were able to derive from it?
See, even you're a bit confused by MSDN -- You're not even supposed to use the MSDN license for your own everyday use is what I've been told. So if you have outlook for email and you're using an MSDN license, that's not correctly licensed. MSDN is ONLY for development. Also it's one MSDN license per developer apparently.

And no because you still get nailed -- it's not like your reseller is the one being audited, it's you.

You're supposed to get CALs for printers accessing MS servers.

Don't ever use an MS server for DHCP, every single client needs a CAL. How am I supposed to even predict that if we allow personal devices on the guest network?

It's beyond frustrating - and the products are great, they just make it impossible to actually ever be in compliance and you need to spend an insane amount of time just handling licenses. It's really the reason I avoid MS as much as possible, and I really love their dev tools (Visual Studio is beyond awesome, I love C#.net) its just too much hassle.
They should be carting around older dogs which are rarely adopted.

Maybe it's wrong of me but I find Uber hiding behind puppies to be about as despicable as the rest of their actions.
Congratulations to the Nim team!

I did a quick comparison between the up and coming compiled languages (D, Rust, Nim, Go) and C++ a week or so back. My main aim was to assess the final statically linked binary size for a simple hello world program.

Here are the results on x64 Mint:

1. C++: 1.6 MB

2. Go: 1.9 MB

3. Rust: 550 KB with dependencies (I was not able to figure out how to pass a static option to rustc)

4. D: 710 KB, same as Rust

5. Nim: 970 KB, statically linked

Nim wins, by a large margin. I did not remove any of the runtime checks by the way. Removing them actually saves 100 KB+, depending on the program. Furthermore, the Nim program was actually a naive Fibonacci number calculator, not a simple hello world, meaning that Nim should have been at a disadvantage! Amazing stuff.
My point was designed to illustrate that TLS can be in some cases found to have considerable overheads in certain applications. For example, delivery of static content.

I'm not saying that it's relevant in most cases; but saying that the overhead of TLS is minimal is factually incorrect - in some relatively common cases it is anything but.

If a company like Netflix says that it'd cost them >$100M per year to deliver their already encrypted content using TLS (recently they've got those costs down, but they still say it's expensive), I'm more inclined to listen to them saying that TLS has real costs (because they've done the analysis) than you saying it doesn't.

Netflix aren't the only ones. It's CDNs in general - a modern processor will decrypt and encrypt AES at about 1Gbps per core; meaning that you're talking about (for a high-throughput server) needing a lot of compute in addition to a lot of ram.

I'm sure that it can be worked around (Cloudflare apparently worked with Intel to optimise their version of OpenSSL), but certainly what Google or Cloudflare do won't necessarily apply to what everyone else does, and Cloudflare's not exactly known for serving large files.

Again, this is more a 'don't assume what works for you works for everyone' and not at all a 'it's wrong in every case' type point.
yesss -- they can be triggered with the keyboard, and displayed as the bubble face!!
You may want to try to contact Mike Reynolds, who is best known for building self-sufficient houses called Earthships by using refuse (rammed-earth tires, plastic bottles, etc.) as a structural component.

He took a team to places hard-hit by the 2004 tsunami and worked with the local people to design and build houses out of whatever was available[0]. He appears to be good at figuring out how to build homes that are suited to their environment given the materials at hand. For example, he saw that lack of clean drinking water was as big a problem for the islands hit by the tsunami as the lack of real housing, so he incorporated rainwater catchments and cisterns into the structure of the single-family structure he designed with the islanders.

I think his talents would be well-suited to a disaster situation where there is a need for fast, cheap housing, and it seems he has the heart for it as well. I bet we could crowd-fund his travel costs if he's willing to go and there's a need for that. There is a contact page with a phone number on the earthship website[1].

[0]https://www.youtube.com/watch?v=49oE6nbwz8E

[1]http://earthship.com/home/contact-us
Is a 300MB CSV really considered "big data" now? I routinely generate larger CSVs using a $10 sensor (rtl-sdr with rtl_power) and process them on a $70 ARM device (Odroid U3).
That was a very amusing episode! I enjoyed it.
My network blocks this website:

> Location: http://saulosantana.com/?p=2562

> Access has been blocked as the threat Troj/PhoexRef-A has been found on this website.

> sophos web protection
Yes, he 'copied' it and likely got paid for it too, it wasn't just going in some personal stash of movies and music on his hard drive.
Given a metallic backing, and a regular fridge-magnet-like magnet, is there some way to trade some of the magnetic force the magnet is exerting on the backing for electrical power?

You need movement to generate electricity, otherwise it'd be a perpetual machine.

An alternative would be to have a "surface of light", ie, a source of light all along one of the walls of the map and passing right over it (not actually illuminating the map); then any object sitting on the map would be illuminated.
Maybe not in SF, but if you don't have to work again there's no need to live in SF. 72k/year is well above the median national salary; it's absolutely retirement-level money.
> Having an armed citizenry serves as a protective measure of last resort and was based on the model of Switzerland. The intent is not to allow people to run around shooting people up as a form of protest against lawful government action; but as a means to protect against unlawful government tyranny.

From the article:

> It used to be said — correctly — that the patrolman on the beat on any American police force was the last perfect tyranny. Absent a herd of reliable witnesses, there were things he could do to deny you your freedom or kick your ass that were between him, you, and the street. The smartphone with its small, digital camera, is a revolution in civil liberties.

Unlawful government tyranny, in the form of cops doing whatever they want, is exactly what the riots are about.
That's cool, but with disk space and memory being as cheap as they are, is this still a big deal in anything but the smallest of embedded environments?
My wife would love it, so I'd buy one.
I'm interested in how you made to balance the game? have you? or was it more of an emergent rule on itself?
The last time I tried to rent a ski cabin with vrbo, it took almost 30 calls to get 3 actually available houses (numbers approximate, it's been 5 years). The experience was complete shit.
How We Accelerated 500% Growth with Predictive Analytics and Onboarding
They're a pretty cool company. For April Fool's, they did http://www.warbybarker.com, which I found hilarious. They have a lot of taste.
The very next sentence of TFA is, "As there is no need to operate on a partial file there is no technical reason why the entire transfer would have to be SSL encrypted." Clearly, the procedure envisioned is that the checksum is served over TLS.
Is there any way to disable this behavior? I've been curious about Nim, but this makes me cringe pretty hard. I get the intention, but this is exactly the kind of magic that I dislike.
Radio interference from man made sources is the biggest issue for radio telescopes in the traditional radio band. So it's not really the weather that decides, but the crappy radio skies of the UK.
In my experience around a lot of professional data analysts, shoddy scientific design is ubiquitous; I was definitely guilty of it all the time. A mentor gave me some advice that helped tremendously: formulate what you're trying to answer very precisely (i.e. the hypothesis), and remember you are only trying to answer that question during every step of your experiment.

It's very easy to lose focus or rush through important steps that seem insignificant. This is dangerous because bad methodology often looks a lot like good methodology but leads to very different results. When you have a precise hypothesis, it's much simpler to look at a step and say "no, that's not answering the question correctly".
I have Vimperator for Firefox, and I had to ignore those keys (Shift + Esc) while playing in order to use the keyboard. Just FYI in case anyone else ran into the same thing.
The author addressed that in a comment over there:

The choice of filename was tongue-in-cheek. (The main thing is that it’s big enough to blow the stack with non-tail-recursive code, and to take a non-trivial amount of time to run.)
The article has a tongue-in-cheek yet enjoyable way of getting people updated on what MS is up to lately.
Your notion that you can simply maintain privacy by not using facebook is part of the problem.

For a long time facebook tracked people using flash cookies (also called Local Shared Objects) to track people with opinions flawed like your own around various website that are not facebook.

What if they use some more devious tricks now? You might say that you use noscript, adblock or something else, but what about profiling you based information created by you browser. Browser fingerprinting - https://panopticlick.eff.org/ - http://en.wikipedia.org/wiki/Device_fingerprint

I would rather simply avoid facebook and deal with people without a history of ethical issues.
Looks like it's still there in the manual:

http://nim-lang.org/0.11.0/manual.html#lexical-analysis-iden...

This just killed my excitement for this language. That's really surprising to me that they would choose to enforce indentation Python-style, but would then allow this kind ambiguity in naming.

grep and emacs isearch-forward are such great tools for quick code searching and this will break them. I guess text search (and replace) tools could grow nim-mode options, maybe. I don't know, can someone convince me this is a good idea?
Real-Time APIs with RethinkDB and LoopBack
The interest free part of course limits them from generating profit directly that way, but alternate revenue models are certainly possible on top of the $3/week users have to pay on a continuous basis.

> The contractor could sign up for Even, and then retire, collecting a $2500 "paycheck boost" interest free.

I'm not sure how things play out legally with them claiming to not be a lender, but I doubt the Even team hasn't considered something so basic as how to recover money they've "credited" to someone's account if the income they see drops to zero and stays that way.

In cases of outright fraud the person wouldn't just be risking collections or a court judgement to recover the money, they'd probably be facing criminal charges.
The new Kanban board is great, but is there a way to organize the horizontal swim lanes by Feature rather than by person?
It's interesting, netcan has been here "forever" and has a ton of karma but "richwalinsky" has been here for 171 days and has 1 karma.
Apple, IBM to Give iPads to 5M Japanese Senior Citizens
On top of that, encryption adds client-side overhead as well.
The Key to Bringing in Female Developers
You registered 4 hours ago just to make this comment?
People fighting for their homeland and existence tend be in it for the long haul and quite determined - they don't have a choice

An aggressive, invading, external military just whilst it is makes financial sense.
Linux and BSD Web Servers at Risk of Sophisticated Mumblehard Infection
The picture you linked is clearly a 3D rendering and not an actual photo.
Nice, thanks! :-)
I bet this guy would have some ideas for light-up LED pins: https://www.youtube.com/channel/UCNAAxVKWPAbaZiB90_kjDJw
http://wiki.openstreetmap.org/wiki/Rendering
That is exactly what I'm saying.
But this isn't a publicly traded market, in fact it's just the opposite.

And the definition of "money off the table" is "keep it if things head south," so it's pretty hard to begrudge them for obeying the terms of the deal.
>> I'm bringing up that you are installing completely untrusted packages which is your actual issue there, not that someone might be able to know what you are using.

There are multiple 'actual' issues here.

One, you have identified, is that the content on the server is not very well verified. This is a problem I agree, and solutions are likely non-trivial. TLS will not fix this for you.

The second one is making sure that what is on the server is accurately replicated on the client. Authentication (am I talking to the real server?) and integrity checking (did I really get what the server tried to send me?) are important here. TLS can address this.

The third is giving away information about modules installed, which may be another risk. TLS will mitigate this.

You're right that the AGPL would require you to disclose to any user which modules are in use and give over the source to anyone that uses your service and asks for it, and in general security by obscurity is a bad idea anyway - however I may not have users, I may be setting up a server only for me to access, and I may not want passive traffic sniffers to know that my experimental server is likely to be running an easily-compromised version of a service for the next five minutes until I patch it.
Python library that makes benchmarking easy and fun
The afl fuzzer relies on compiling C code with its own compiler, so I think it's limited to only C based programs.

What you may want is to use something like `quickcheck` (scalacheck or clojure's test.check I guess?) to send lots of "arbitrary" xml at your code and see what breaks. With sufficiently interesting definitions of "arbitrary" you can probably find bugs.

That approach would be testing inside the process, as opposed to passing in whole http requests. But if you know a section of code is more vulnerable than others, focus on it. No need to test all of tomcat's http parsing when you really care about your specific library.
It is actually.
Notebooks where all the rage in the 90's. I spent quite a few years (~15) with Mathematica and its "notebook". Of course, Maple, Mathcad and Matlab all had the same thing. At some point, I wanted to write more readable and modular code that others could use (and that I could reuse) so I switched to using and IDE for python, Java and C. My workflow enables exploratory data analysis as well as algorithm development. The huge advantage of IDE's vs. REPL's is that in the end, it's easier to write the quality of code that is ready to be shipped off to a production server. I have watched the "Return of the Notebook" with some trepidation: yes, it allows quick iteration and lower barrier to entry, but ultimately if your goal is to create a software product, learning good coding skills in an IDE is a much better path.
So basically you're talking about the design and limitations of https://databricks.com/blog/2015/04/13/deep-dive-into-spark-... I take it?

The implication of this work I thought is that it could be further expanded to other languages and DSLs. However, Spark's SQL generator still being very JVM-dependent and this optimizer generating bytecode kind of makes it pretty specific to JVM-supporting languages only. This would probably leave out Haskell and Erlang / Elixir in the short term, which is probably where I'd expect to see a different perspective on the whole data analytics front. We have Datomic, sure, (and I guess Clojure is enough for a lot of folks) but it'd be nice to have something other than "we want to make Hadoop... BUT BETTER" as a lot of the motivations.
Thank you for writing this down. There is so much bullcr*p in tech, and always has been. It's false advertising and effectively devalues the entire industry.
Let me clarify, we'd love to be able to work on individual requirements or tasks in a Feature within a horizontal swim lane so that multiple people could be working on a given feature at once (and thus the work is tracked).
Ask HN: Do you think there's a possibility Obama will pardon Snowden?
I have to think "ugh" when I read about this idea. Random three words to every square seems like chaos to me.

These also take a lot of bytes to store. In the US, every address or "delivery point" can be represented by 11 numerals: zip+4+2. If you read the barcodes on your received US mail, you will see the normally invisible +2. (zip+4 is usually granular to one side of a block or MDU mailbox cluster, and the extra two numerals represent a unique mailbox within the zip+4.)

Amateur radio people have organized the world into grid squares, which are a bit larger as they are minutes of latitude/longitude in either dimension. However they are like postcodes, in that once you are familiar with the system you can glance at one and have a rough idea of whether it is near you or not, and where on the map it is. For instance, the White House in Washington is within grid square FM18lv.

Introduction to the grid square system at [1] and a rudimentary mapping tool at [2].

I'm not sure if there is any reason why the grid squares couldn't be further subdivided. Even then, this wouldn't solve the problem in some places I've been: The barrios around Caracas are not only tightly packed in two dimensions, but they have been building their homes on top of each other, so a 3m x 3m square could very well contain five homes or more.

[1]: http://www.arrl.org/grid-squares
[2]: http://www.qrz.com/gridmapper
Paul Hudak, co-creator of Haskell, has died
WSJ Reporter on Bitcoin: Would’ve Been Better If Price Never Went Over $300
I don't agree. Apple and Microsoft have been entirely about making computers easier to use and bringing them to the masses for a long time. To the extent tablets are easier to use it's because they don't support multitasking.
> So each asset loading connection now requires two connections, one to the content-holder or cache and another to the reference server.

No. If you do it checksum based the checksum is embedded at the place where the asset is referenced from which is an encrypted page. There is even a spec for this in the context of web resources already.

If you do it with cryptographic signing then the same rule applies as with SSL, you just skip the encryption. This is not rocket science.
> [...] to figure out the best solutions for the biggest sunday newspaper in Europe, and they copied just like this?

Really? IS build Sunday's newspaper in Europe? No wonder the EU is about to dissolved, then.
Apple Watch is having trouble determining people with tatoos are alive
It would be interesting to know the ratio of up-votes to click-through-votes.
Curious to know if anyone is using RethinkDB for an IoT project (more interested in home use)...
Why Founder Lane Becker Was “Washed Out” of the Get Satisfaction Sale
Rocket Internet 's Startup Machine Moving into New Frontiers in Asia