skysight-inc/HackerNews huggingface dataset:
I think we should be safe but I do think we should let people explore. It's crazy to think what I did just 20 years ago is now something people would be frightened of(run off and play with friends). I didn't have play dates I didn't have boundaries, I had parents who gave me morals and let me guide myself. I had adventures with friends I will never forget, I had games where we ruled until we went home. If someone got hurt(and it did) we got an adult, it was a simple concept.

I have kids now and while they aren't as old as I was when I started roaming the neighborhood it saddens me that I'm frightened to let them. Not because I'm worried someone will harm them and/or kidnap them, but because I'm worried someone will call the cops and CPS will come. That I will have a blip on a piece of paper(or electronic file these days) and that it could lead to court orders and in an extreme my kid taken away if only for a little while.

I know that the police have to do their job and if someone reports a kid wonder around they should respond. I just wish that they weren't forced to call CPS in every instance(they are required any time a minor is involved here), like they aren't capable of assessing a situation.

We live in a different world, but I don't believe it is any less safe than it was 20 years ago.
The term "hedge fund" covers a tremendous range of firms. That said I would look out for the same things you'd look out for in any funding arrangement: price, control, dilution, liquidation preference, unusual rights, etc. If you're just looking for money, it all spends the same as long as it doesn't come with onerous terms. However, you won't get any of the putative benefits of working with a "real" VC: access, guidance, services, follow-on funding, etc. You definitely do not want to end up with a cap table comprised of one line item for founders and one line item for the "hedge fund"'s investment on some weird-ass terms; that will make it nigh-on impossible to secure follow-on funding. I would feel best about taking this kind of money if I had a "real" VC as the lead investor and the hedge fund folks were minority, pari passu, and personally known to me. Also, DO NOT sign any document without legal support. Make the legal relationship, spend the money, understand what you're being asked to agree to, and PUSH BACK if you don't like the terms being offered. A broken structure is not the foundation you want.
"writing, but for people who can't write"

Reminds me of Book from the Ground[1], a novel written entirely in pictograms. The intent is to write a story that any person - even someone who's illiterate - can read. I should mention that it can really only be made legible to sighted people, which is a shortcoming it shares with many attempts to create programming languages for non-programmers. That said it's remarkably successful. But the story is extremely simple, a side effect of the author's choice to use a form of expression that cuts expressivity to the bone. As an exploration and mental exercise it's fascinating. But I don't think it heralds a major change in how we communicate nowadays, even across language boundaries.

[1] http://asiasociety.org/blog/asia/always-pioneer-artist-xu-bi...
I agree its mostly gone. Here are the sites I can think of that still support OpenID login:

https://stackexchange.com/users/login
https://bitbucket.org/account/signin/
http://openid.yahoo.com/ still responds, surprisingly.
The wordpress openid plugin is still around.
Right. It helps that YouTube supports IPv6 so this is all transparent to me. There's also a difference between a protocol 41 tunnel and a VPN: most VPN's encrypt the traffic so the ISP cannot mess with it at all (other than slowing down all VPN traffic), while with protocol 41 they can detect it and do deep packet inspection, but they currently don't seem to take it this far.
API Security: The 4 Defenses of the API Stronghold – Nordic APIs |
Sedentary Time and Its Association with Risk for Disease [pdf]
MySQL Cluster 7.4 New Features Webinar Replay – Andrew Morgan on MySQL HA
You Don't Understand Insurance
god, I'm old.
And if the person renting out the illegal air bnb unit is the property owner who usually attempts to enforce the local rules?
Kenneth Cole Started a Film Company… Just Kidding. Sort Of
How about banning the biggest H-1B abusers (Infosys, TCS) from applying new visa for a few years? (They are also the biggest visa applier)

http://www.epi.org/blog/new-data-infosys-tata-abuse-h-1b-pro...

http://www.latimes.com/opinion/editorials/la-ed-visas-tech-w...

http://www.thehindubusinessline.com/features/smartbuy/tech-n...
Please email if you do.
Become a Pro Hacker: 50+ Best Free Hacking Tutorials
The problem you described sounds as "whom the device can talk to"

Seems like Stalmans' model is the only viable solution: As long as the user don't control the device, the manufacturers will be allowed to make the device talk to whoever and whenever they want to
These homophobes have been unknowingly advertising a gay porn site
I routinely get recruiters for help desk jobs emailing me. No idea where that came from.
Because I want to know.
I still don't understand why you care. If you are worried about having this happened to you, what's so difficult about refraining from renting your house out? Just... don't do that. If the people renting their houses out are comfortable with the risks, why do you need to get involved and protect them from themselves? Perhaps you can imagine that they are human beings, like you, who have made informed decisions. Perhaps their risk judgements simply don't match up with yours. Why should they make their decisions according to your risk judgements instead?

I see that you care about this but I don't understand why, since it is clear that you are neither host nor guest in this scenario, and the people who are hosts and guests are not, by and large, particularly worried about the problems you are hyping up.
Working with Spark: Or, How I Learned to Stop Worrying and Love the Shuffle
I've had issues with Chrome consuming tons of memory for quite some time. I found a single tab with gmail consuming ~700MB. Seems like a common issue: https://productforums.google.com/forum/#!topic/chrome/86yzpx...
So you are saying Haskell is not a pure, lazy language?
> You can't discharge a student loan in bankruptcy. This makes sense. If you borrow money to purchase a car or a home the lender always has the option of repossessing the goods as a last resort.

Non-secured debt of other kinds are generally dischargeable in bankruptcy, so that principal isn't generally applied outside of student loans.
Do you have any sources showing that the incidence of ignoring SSL warnings has increased?
These kids are going to hit a wall in their careers without a degree behind them. I hate that I'm saying this, but the more time I spend in the "real world", the more I see the value in a university education.
I think you were ahead of the curve. I have seen multiple companies that seem to think of front-end as "lesser" engineering, but then struggled to fill front-end roles more than any other position, and struggle to build great UIs. "Front-end" still has a stigma of taking a PSD and turning it into HTML/CSS, even though these days front-ends are getting extremely sophisticated and require tons of strong coding skills. Ultimately supply/demand work in your favor. And I wouldn't take anything a PHP expert has to say about "serious" developer roles too seriously.
Well, I suppose you would know better than the rest of us! :)
Ask HN: How many users is 'enough' for an Alpha?
I recently launched a closed alpha for Kernl (https://kernl.us) to work out some of the bugs out and get the email addresses of the some potential customers. After posting to only a few places I ended up with ~20 sign ups in 3 days. Things are going well, I've received a lot of great feedback and have gotten good responses in general.

Is 20 alpha users enough? How many did you have before you did an open beta? Before you launched? There are a lot of places where I could aggressively pursue more alpha users, but I'd rather spend my time making the product better for those users I do have and then pursue more people for the open beta. Any articles or suggested reading about doing a good product launch like this would be much appreciated as well.
Running through:

W.r.t. "old-timers who got into the habit 10 years ago". A decade ago I was 11. Not exactly an old-timer.

W.r.t. performance, in an ideal world, you'd be absolutely right. But this is not an ideal world. There are far too many websites that are substantially less performant with JS. (Case in point: Gmail.). There are far too many websites that kill my battery life on my laptop via sloppy coding. There are far too many websites that don't stop downloading in the background to refresh things that I don't need refreshed, and in the process kill my bandwidth cap on my home connection. There are far too many websites that take multiple seconds before they even begin to render, because they are waiting on some library to load before they parse things clientside. Looking at you, client-side markdown. There are far too many websites that are less responsive on the "responsive" version with JS than with the fallback without JS.

W.r.t. download size, again, in an ideal world, you'd be absolutely right. But this is, again, not an ideal world. There are far too many websites that pull down multiple MB of libraries before they even start to load. Sometimes they are cached, but far too often they aren't. There are far too many websites, again, that refresh things that I don't need refreshed and as such continue to use bandwidth.

And you're missing two other things: the two concerns that I consider most important. One is security. The majority of browser exploits require JS, especially the nastier ones. As you say, JS engines focus heavily on performance. And trying to get high performance out of a JITted language goes intrinsically against security. For a certain amount of dev time, you can get decent security and decent performance, great performance and weak security, or great security and weak performance. It's an intrinsic trade-off. (The other one is user tracking, but I'm not going to get into that one here.)

And one other thing: with JS disabled, most of the time if a webpage is loaded it's actually loaded. I can keep it up and sit in a bus or something and read it, without an internet connection. With JS enabled, far too many websites end up breaking nastily some time down the line when they go to update something and fail. Again: not an intrinsic, but something far too many websites do anyways.
Almost all full-space(that is, not staying in an extra bedroom while the owner is present) air bnb units in NYC are illegal. Subletting is usually legal, unless stated in your lease, but there are laws against short term stays(< 30 days).
Okay that's pretty smart. Guess I'll have to step it up, if I want to be snarky about this project.
The olde times when kids were allowed to have childhood ... I think we see once again effect of the hallowing of the middle here - you are either cuddled and overprotected or have to mature too fast and too rough. No middle ground.

My dad tried to kill me with recoil of double barrel 12 gauge shotgun when I was 5. He had to hold my whole body not to fall from the kick ...
There was a touch of sarcasm, but I didn't read it as being directed to you.

Thank you very much for pointing the clause in the terms out.

I sent an e-mail to the contact us link with the same questions I listed above, and the developers replied with this information and the note that the user can hit the center button on the wearable tag to put the UAV into hover mode to prevent collision.
Sites need to show ads to get some more money, not all of them but...
This is off-topic but I personally prefer to just say "GNU" these days for what most people call "Linux" (excepting systems that somehow use Linux without GNU of course). It makes sense when you consider that:

- GNU has always been a project to make a whole OS, and the name of said OS is GNU. Linux on the other hand is explicitly a project to make a kernel only. When talking about a system consisting of GNU components for everything but the kernel, that would simply be the GNU OS using a third-party kernel.

- In terms of components implementing the base Unix system (see e.g. POSIX for a formal description of this "base system"), GNU components and Linux are probably roughly equivalent in size (don't underestimate Glibc and the whole userland Unix toolbox, not to mention compiler toolchain), so just "GNU" might downplay the importance of Linux and thus "GNU/Linux" would be the most correct term, but we all know it's cumbersome especially in speech, and if I'm going to shorten it then GNU is the obvious choice in line with point 1. It certainly makes more sense than "Linux".

Some people like to point out that GNU components can be replaced. So can Linux, as evident from e.g. Debian GNU/kFreeBSD, so that's not an argument. You can even use GNU on top of Windows via Cygwin. :-P

Of course the reason I bother is that I want GNU to be more widely known. It deserves at least equal respect with Linux if you ask me, yet 98% of everyone I met who had heard of "Linux" never heard of GNU; some knew the GPL but not GNU. And I work at an IT company...
Fixing the Talent Gap in Tech
Clickable: http://pmrelief.opmcm.gov.np/
Cedar Roof Maintenance – All Roofing Solutions, DE/PA Roofer
Startup aggregates many cellphone sensors and focal lengths for DSLR quality
Does this really mean anything at all?

I'd imagine that IPv6 users would be people with better internet connection and that everybody in DS(hel)L country would be stuck with the short end of the stcik in every sense.
(Author of SSL Labs here.) From Chrome's perspective, it's easy to complain about obsolete cryptography because it takes only its connections into account. When you take a wider view and include other browsers, all sites today effectively must use obsolete cryptography because client-side support for authenticated suites is not yet strong. Even Google would have a "uses obsolete crypto" warning because it negotiates CBC suites with, say, Safari.

Non-obsolete crypto is relatively easy to achieve with Chrome and Firefox, but not as much with IE and Safari, and many other clients.

There's no doubt that sites with authenticated crypto should get a better score, but it's not straightforward to establish fair criteria. For example, should SSL Labs penalise sites that don't use authenticated encryption with IE? Because, to do that, you must either accept the DHE key exchange or deploy with dual (RSA and ECDSA) keys. The former is slow, while the latter requires more effort.

You could say that SSL Labs should focus only on the cases where it is possible to use authenticated encryption, but that creates another problem: should SSL Labs report the reality, or award best effort? It's not easy to decide, but so far I've been leaning toward the reality.

Finally, there's the case of using ChaCha20/Poly1305; should SSL Labs encourage the use of cipher suites that are not yet standardised? Should Google get a pass because we "know" they know what they're doing?
An alternative: http://www.algoid.net/index.php

"Algoid is an educational app that uses a simple but complete language called Algoid Language (AL) to teach programming.

Target Audience: Kids, teenagers and adults interested in learning computer programming."
>>They can't both be optimal.

They could both be optimal for their respective uses. Humans don't spend a lot of time on the seafloor, and cephalopods don't spend a lot of time in the open air. Certainly there are other tradeoffs to be made as well.
Or just do what comes naturally. People will do that anyway, and it will all come out in the wash at the end.
No, the "thing" is common to any short term rental. It just so happens that AirBNB is the most popular way of booking a short term rental.

This "thing", is exactly why so many municipalities have explicit laws on the books regulating and taxing hotels.
This post is directly addressed to the tech industry in Utah, but the ideas are universal.

It makes the argument for investing in junior tech talent. Thought it'd make for great discussion here on HN.

What is the right balance between investing in senior level developers, and investing in junior talent?
3 Steps to Retain More Information When You Read Books
Fear of eviction, as well as most people being normal people and wanting to maintain good relationships with people they may see every day.
""As the McKinsey-GSA report points out, a major challenge is the security and privacy of user data.""

That, I think, is the heart of the issue. I am working on a new book ("Power Java", with a similar version "Power Clojure") that has a section on IoT. I mention security as a problem, but don't much address the security issues.

The problem is that the model for IoT is discovery of nearby services. If a user has to stop and manually authenticate, it spoils things. Perhaps devices could have unique security tokens and you could verify other devices once.
Maybe they were using Python for Bing webmaster tools. Python 2.7 didn't support SNI until recently.
so THAT'S why they bought up the .dev TLD.

lame.
I noticed later that the actual kernel patch references arm64, so it's definitely not limited just to Haswell:

https://github.com/torvalds/linux/commit/76835b0ebf8a7fe85be...
Really cool way to think out side of the box. The keyboard idea is sweet.
I would work for this guy any day, he makes sense. Although I do know how to spell PHP and code in it it's not my cup of tea however.
To be honest those initial inquiries are done by HR recruiters who have no way to evaluate your skill set. If interested, try to get a call with the hiring manager before you proceed far. Some positions can accommodate engineers of various skill level.
How to apply for Dutch startup visa
>Common Lido

Slipped by one column on your keyboard? :-D

I agree that a Lisp is better than no Lisp; I'd be more or less equally content if Guix used CL. Major Scheme implementations don't have much lacking compared to CL though, and the core is somewhat cleaner with less historic baggage, so I'm most happy with Scheme. (The standardization though ... sigh)
Can you clarify why the TLS-approved curves should be considered unreliable?
> Just yesterday somebody posted about their house getting trashed by AirBnB renters. So its started already. Who's insurance is responsible?

Insurance isn't responsible in the first instance. Insurance becomes responsible if either (1) the person who is responsible has an insurance contract that provides insurance for that liability, or (2) the person injured by the damage has insurance for the loss independent of liability (obviously, this insurer will then go after the person responsible for the harms to recover its costs, if possible.)
I believe that Samsung has sold such a refrigerator in South Korea for a number of years. This actually came up at breakfast with friends this morning. My friends wife wanted to know why it was not sold in the US.
Remember that "modern cryptography" message in Chrome is presented per connection, so on your new browser you get the ECC cipher with that message.

But people on old browsers may be served RC4 and get "obsolete cryptography" as their message.

SSL Labs instead gives a holistic approach and thats why it considers the best and worst potential set up.
You know, I've always been planning to set up my own xmpp server, so I haven't looked to hard at the public offerings. Unfortunately there doesn't appear to be any good list over public service providers -- one that includes things like does the server support server side archiving etc.

I was hopeful when I saw that duckduckgo[ddg], fastmail[fm] and mailbox.org[m] had public chat services. But of the three, none support standard archiving [XEP-0136] and only fastmail supports a custom form of archiving (via special emails to your fastmail-account). The latter at least gives you an option to archive chats (for eg: search) -- but it appears there's a market for a good, public and full-featured xmpp/chat service.

Most of the other public servers appear to a) be free-only -- not a business -- and b) focused on privacy. I find it a bit surprising that noone has tried launching a free+paid option -- say reserving some features for paying users (and charge maybe 1 USD/month?).

Actually, I think duckduckgo.com would be happy to "host" a services free tier -- have a trial account mode, and point user that just want a free chat service to ddg. Ddg gets more registered users, more users of their services, and those that are willing to pay for some features (eg: server side archiving, server side notes... others?) can pay a small amount for the service.

Only draw back would be no seamless transition from one to the other (change of username/domain). On the plus side, all my trial accounts can talk to each other without problem (via server side federation) -- it just works.

[ddg] https://duck.co/blog/using-pidgin-with-xmpp-jabber

[fm] https://www.fastmail.com/help/clients/chat.html

[m] https://mailbox.org/en/mailbox-org-launched-secure-instant-m...

[l] https://list.jabber.at/

[edit: And while mailbox.org has an interesting offering, like some kind of deal with yubikey -- they seem to have neglected their xmpp setup somewhat -- there are some issues with ssl certs. Pidigin can't seem to figure out that xmpp at fastmail is chat.messagingengine.com, nor that mailbox uses xmpp.mailbox.org. Both give additional certificate errors if not adjusted. I suppose fastmail hasn't set up srv-records/dns aliases for their vanity domains (I registered mm.st -- as it was the shortest). It'd be better if one could just type in <user>@mm.st and have everything work. The bug might be in Pidgin, but fm really needs to test things. Of the three, ddg was by far the easiest to get started with -- register right in the im client (which also generates an account that works for ddg); and go.]
WifiMapper: Find Free WiFi Anywhere in the World
I'm curious about the downvote here---is pointing out financial and other interests of authors unwelcome here?
From your video, it looks like the vertical stabilization is almost perfect but the horizontal stabilization is really not working..
Does anybody have an APK? I don't want a Google Plus account and it seems like a troublesome procedure to try this.
How an SSL Flaw May Affect Your Device or Application
Dell is an OEM. How they chose to package their product is their business. More importantly their direct-to-consumer sales are a drop in the bucket. They use resellers too. When you go to Best Buy, nobody chooses their windows. The smiley guy shows you a few laptops based on what he thinks is best for you and you chose the one who looks the best. There are very specific rules about which windows versions go in which models and there are very specific rules about rebates. The rebates dictate what is getting sold to whom. It is such a sophisticated operation, with so much analysis behind it, that people generally don't understand it at all. I tried to hint that if you make such statements, you might not be qualified to talk about it, but apparently you are not willing to entertain this possibility at all. You think you are understand supply and demand better than the collective of thousands of people who run analysis that makes up this strategy, because you read article on a blog... Nothing more to add.
I become the sole, lawful owner of the firearm in both scenarios.

The firearm itself serves no commercial purpose.

That is what I meant by "personal use."

Both activities are protected by the Constitution of the United States of America.
I thought you were possibly just overly sensitive to those kinds of things, but after watching it, I began to feel the exact same way. I've never had a video cause severe motion sickness before.
Many organizations, still use IE8. IT Support in those organization either don't care to upgrade or their internal products just don't work on any new versions.
I Interviewed Matt DeBergalis (Meteor Founder) on the Future of Meteor