skysight-inc/HackerNews huggingface dataset:
Why should the Gawker network do "actual journalism" if that need's already met by major outlets?

Granted, there are listicle happy properties (Lifehacker), but Gawker et al. filled a void with it's meta-criticism of news. It's not rare for Gawker to cover topics that are too risky for major outlets. Take for example the sports property, deadspin. I read deadspin and the deadspin writers broach newsworthy topics that would get an ESPN writer not only "banned from the clubhouse" but suspended by HQ in order to appease the team/league. Deadspin provides signal that major outlets would otherwise avoid or over-cook.

Not to over-shill for Gawker, but the commenters are pretty educated and won't let the authors off the hook if the author leaves holes in their argument. I submit that your poop should flow further down the news hill to sites like Vice.com where NYT super-journos call them out for looking at poop[1].

[1] https://www.youtube.com/watch?v=iLmkec_4Rfo
MSN Bot machines infected with Conficker?
I've been analyzing traffic with Heka and noticed that right after the bot visited site, it got bunch of brute-forcing attempts to Worpdress site. So the first tool I used was https://www.ipalyzer.com/207.46.13.105 which reports that this IP is owned by Microsoft and that it is listed in XBL blocklist. And then I got to WTF part http://cbl.abuseat.org/lookup.cgi?ip=207.46.13.105, is this even possible? And just to be sure that this isn't Azure customer I checked http://www.microsoft.com/en-us/download/confirmation.aspx?id=41653 and http://viewdns.info/whois/?domain=207.46.13.105.

Anyone encountered something similar?
Firefox is moving in that direction. Maybe by 2020 you'll have to click a lot of prompts to see an "insecure" site.
Yes, although small business might be an operative word. I'm thinking of Germany's Samwer brothers who have had great success in cloning successful US startups:

http://www.forbes.com/sites/ryanmac/2014/07/31/samwer-brothe...

Then again, they're not copying ideas as much as successful implementations.
I couldn't update my comment so here is the citation from Valve's site.

http://store.steampowered.com/app/353370

Requirements

A Steam Machine or other computer capable of running Steam Big Picture Mode, in order to view, edit, save, and share Steam Controller mappings.*

Big Picture Mode requires Steam to function. http://store.steampowered.com/bigpicture
This sounds like complete PR reality distortion.

How exactly is TLS different to plaintext in anonymity? - There is no client-cert.

Also HTTPs everywhere does not necessarily mean "real" CAs. Self signed certs, even without pinning, would raise the bar of snooping from monitoring (easy) to traffic manipulation (hard). In this case there would not be a green lock in the address bar of course.

This whole thread feels like one propaganda attempt to sway the techinal community. And yes, here is where the people to manipulate are.
Signed how, though? A crypto scheme that Intel came up with 20 years ago is probably not secure, and if they haven't updated it since then, well...
Yahoo shuts down Pipes, Maps and other services
I think the only conclusion to draw here is that you are exceptionally brilliant. You were the one to live up OP's idea of the intellect of this site. Why write more explicitly and less confusingly when we have brilliant people like yourself to decipher things?
Hi Khuram,

I've just emailed you about setting up a time to talk.

Looking forward to it.
"It is absolutely stupid that in the US your financial life is dictated by an opaque algorithm"

It's not 'an opaque algorithm'. I'm assuming the US is similar to the UK, in that banks/lenders use credit bureaus for access to data. That data is then fed to the lenders' own systems for processing (to create a score, check against certain criteria etc.).

If banks did not have such reliable access to your credit status and history, they'd be less likely to give you a loan, and offer credit on worse (for the borrower) terms.
You must not forget that thanks to the preprocessor, what looks like 2000 lines may in fact be around 200k lines

E.g. I have a very innocent 2000-line MainWindow.cpp that weighs 244419 lines when measured with gcc -E -o - | wc -l
Whoops, my bad. What a terrible title; I completely missed it.
How truly great entrepreneurs manage their time – A Founder's Notebook
One thing that I have noticed is that these people know what they want to learn and they only learn that.

General people try to learn as many things as possible.
I presume it's only a matter of time until he manages to fit some giant Yachts in there.
Hmm.. Let me explain my (probably broken) mental model.

But I'm not sure it really is about the yes/no answer - it is more a display of courtesy to someone whom you are about to cause discomfort

I parse that as

- You think reclining causes discomfort (Not sure I agree, but let's take this as given for now)

- But you ask the one behind you

For me it followed that if the person behind you says 'Sure, go ahead' you'd knowingly cause them discomfort (albeit after asking them / with their consent)?

For the sake of sanity: Can you pick that apart for me? Text is a crappy medium, this isn't my native language and nuances are hard. Where did I fail?
You should not have deleted all that porn though
http://hipku.gabrielmartin.net/#127.0.0.1

Confirmed for localhost
this is the biggest weak point of using git in my opinion. if you are not in the habit of using these undo/remove/fix operations in a regular basis, these commands slip away from you...

however, you can also look into this as a safety feature :) removing stuff is dangerous work in version control and thus, maybe, it's good that every time you have to do a dangerous thing, you need to refresh your memory by checking things. doctors and pilots started using check-lists that they go through before operations so that they don't do any mistakes and it seems to be decreasing the number of 'unforced-errors' so to speak... maybe this non-intuitive syntax also helps git in preventing committing simple errors...
Really impressive work. Would love to play with the beta cough invite cough ;-) Looking forward to seeing this being used on some inclusive design projects.
His argument is mostly based on analysing the size of the data transferred. Let's assume HTTP/2 for the moment. You have a single encrypted channel to a particular website that contains multiple interleaved opaque streams. It's not easily possible to extract the exact size of a single request from this. Furthermore, for a typical news website, for example, there will be an huge number of pages, they are dynamic and constantly changing and they will all have a very similar size.

You do get privacy. If anyone claims otherwise, he should go and prove that it's possible and easy by providing a firesheep-like tool. It would make for a nice research paper.
Over 16 million American workers are in unions.[1] That's 11% of workers. Not popular, but not rare either. Most Americans know somebody with a union job. Most don't feel too strongly about being in one or not. It's just part of the job.

That said, talking to Americans in union jobs often gets you tales of dysfunction. My mother was in a nurse's union for a quarter-century. (She's since gone to business school and taken a non-union job.) Her dinnertime stories were absurd. Representatives constantly squabbled about petty things. They negotiated pay scales based on seniority instead of performance. Ditto for scheduling. Older nurses got to work days, while younger nurses (often still raising kids) were stuck with night shifts. Incompetent nurses were paid the same as proficient ones, and firing was quite rare. The whole situation led to more stress and hostility than seemed worthwhile. So why didn't my mother leave the nurse's union? Because she'd lose her job. The union had negotiated a deal requiring union membership for employment at that hospital.

I hope unions are better elsewhere, but here they often do little more than discourage good workers while protecting bad ones.

1. http://en.wikipedia.org/wiki/Labor_unions_in_the_United_Stat...
Show HN: Firefox Add-On – Discover Up and Coming GitHub Projects
"Credit scores are riddled with inaccuracies"

Are you mixing up credit scores and credit histories?

"If you could create a system using publicly available data that is a statistically and meaningfully superior way of predicting risk"

That's what underwriters at banks and other lenders try to do, albeit with not just publicly available data.
Classic slippery slope argument.

When abortion was legalized, some people argued that we'd be murdering children soon. Has that happened?

If something is moving in the right direction, but if you're worried that it will go too far, the solution is to get involved and stop it at the right time, not to spread FUD about the hypothetical doom of the world.
University IP based endeavors tend to be non-software areas where patents are legitimately results of very expensive research endeavors staffed by multiple PhDs, not "using a database engine to store a wish list."

They do resemble patent trolls in that most of their business is licensing, not directly making products. However it is more based on selling: "Hey we have this cool technology, license it!" rather than showing up out of nowhere and extorting settlement.
Most people don't realize what they are doing is wrong.
> "In the end we should have just had Michael do the whole name picking in thirty minutes and been done with it."

I think this overlooks the value of having everyone feel that they were involved/heard. Maybe going through this process at least once is a kind of rite of passage. Next time around, no-one would be as wedded to their ideas and the process would be quicker.
Yeah, the "nerd" thing again. It's obvious some PR guy with us-vs-them mentality prepared this content.
The entire point of Steam Machines is not to deal with this, just buy the cheapest Alienware, done.

Except that obviously won't work. In the console world I really don't have to deal with this. I buy a PS4 at launch and I can play every PS4 game that comes out from now until they stop making PS4 games. That is obviously not with Steam Machines. Will the cheapest Steam Machine play every SteamOS game that comes out in 2 years time without problem? If the answer is 'no' then it is something that I have to be aware of and deal with.

The other option is that Valve steps in and says that if you want your game to be SteamOS certified it must be optimized to run well on the slowest Steam Machine we've ever released, but I wonder if they're willing to that. Can you imagine telling game developers in 2017 that they must make their games work fine on 2015 era Intel graphics cards?
I do believe such a protocol could be devised (after all, you can broadcast IP packets), but those are trivial to block through wires.

It's hard not to think that volunteers' mesh networks are a better choice here.
Title comes from their blog post, which does make sense in that context (it's their first post). Doesn't work out of context though.
REST was more just a clarification and formal study to describe the intended way of using HTTP.
http://inertiawar.com/microcode/ suggests a variant of SHA1 or SHA2 with 2048-bit RSA. No doubt it's changed since the P6, probably with different private keys for each CPU model/family, but the public key must be present in the hardware in order to verify, so theoretically it could be extracted...

Edit: public key. There might be a test mode which bypasses this or something.
Sounds good. I wonder what would be a natural flow for that?

Right now the landing page starts by choosing between "subscribe" / "send gift". Not sure I want to complicate it too much by adding a third choice of "don't want to order, but only subscribe to the newsletter, enter your email here".

I don't really want to add one of those annoying newsletter popups if possible.
Aerosolve – A machine learning package built for humans
A Critical Review of Recurrent Neural Networks for Sequence Learning
Same in Romania. Adding it to cart doesn't throw an error, it just doesn't work.
> lambdas (that support) mutation of captured variables.

is that really a good idea?
Estonians can file their taxes in five minutes
Nice work AsadLionPk :P
Haskell threads are pretty lightweight - 1000 would certainly be no problem: http://stackoverflow.com/questions/1900165/how-long-does-it-...
> Most people looking at the code won’t see anything

Sadly, most people don't look at the code at all. They buy products marketed as making them safer, or trust central authority figures.
Are you familiar with Haskell's threading model (sparks) and making an assessment based on that, or is it an unbased claim? Haskell has no problems running millions of threads.
Got a bit carried away playing with the Google channel API.
> When abortion was legalized, some people argued that we'd be murdering children soon. Has that happened?

We're too busy marrying them, thanks to our other slippery slopes.

(sad to see you downvoted. It is a slippery slope argument.)
In Greek Debt Puzzle, the Game Theorists Have It
Next, figure out what it means to "have enough to retire" (and why it has nothing really to do with age).
> If everyone has to obtain a certificate from a CA, that is another way they can be tracked

They have to be tracked just as much even without that. They have to give their credentials to the hosting provider and to the DNS provider. Even if they didn't and plugged their server directly to the backbone, their IP address and traceroute would leak information about their location.

That said, your point is valid in a parallel universe where anyone could run an anonymous server without registering for DNS or contacting an ISP or a hosting provider or anything at all.

But in that universe, clients would have no way to know if that server contains valid information or data that was substituted on-the-fly. Imagine WWII-style Radio Londres, but one day the broadcast is substituted by one that looks like it comes from Charles de Gaulle, and gives the wrong instructions.
No, the private key doesn't have to be present. They sign with the private key, the CPU verifies with the public key.
> With the reoccurring "net neutrality" debates, let's hope this protocol cannot be misused/used to prioritize certain packets for parties who pay extra

FUD. There is nothing like that in HTTP/2 and indeed that can't be, because packet routing happens several layers below. If anything, the fact that it's encrypted makes deep packet inspection and content-based routing decisions more difficult.

By the way, Amazon.com fully supports HTTPS. I'm using a browser extension to enforce this whenever possible and have browsed Amazon HTTPS-only for years.
PS4 and Morpheus (when it comes out).
From 2010: https://nealpoole.com/blog/2010/12/bit-ly-file-storage-cleve...
"how business works"

Business isn't always about maximizing shareholder value. Consider that Dave Johnson once shut Working Software down for an afternoon so we could see Malcolm X on the company dime.
8 Fantastic Examples of Data Storytelling
"100% agree. If you want to ensure the integrity of content, then sign the content."

That's what "subresource integrity"[1] is about. For static data, a cryptographic hash of the linked content is attached to links. This detects any modifications of the document. Now you can use a CDN without trusting it.

A big problem with "HTTPS Everywhere" is that it encourages termination of the secure connection at a CDN. The CDN can then tamper with the content. Some do, adding ads and trackers. Subresource integrity will detect such tampering, but HTTPS Everywhere will not.

[1] http://www.w3.org/TR/SRI/
The Next 3 Companies on Microsofts Wishlist
I don't see how the stream priority feature of HTTP/2 affects "net neutrality" at all, since it only affects stream prioritization behavior within one TCP connection.

If ISPs decided to slow down or speed up certain traffic, they would just modify the QoS for the entire TCP connection based on source and destination IPs -- no need for Layer 7 parsing. Also, since HTTP/2 requires TLS, ISPs can't read the stream priority (or anything else within the stream) even if they wanted to.

Also, HTTPS costs should be minimal for startups (in fact, they should be more significant if you are the size of Amazon). For instance, if you use Amazon Cloudfront, the price difference between serving one million requests over HTTPS vs one million requests over regular HTTP is at most 60 cents in any AWS region.
Perhaps he is referring to TLS Session Resumption which might be a form of cookie (as it identifies the user across sessions).

But it still hides what you are transferring from anyone observing the traffic.
Hackers steal data of 4M US Federal employees
Traits are typeclasses :)

Uh, the coherence rules are complicated and I forgot them. It's a mixture of where the impl, type, trait, and type parameters are.
While pitching to an investor do mention these 10 things
Do you assert that all object variables that cross an interface boundary are not null (`assert var != null`)?
Interesting, I was not aware of that. Do you have data as to how much latency there is on 1Gbit cards then ? Is it significantly lower?
I do not know for steam os, but I am using ubuntu since many years and I do not tweak much my system. Each time I encounter a crash, a couple of days latter, there is a fix that is automatically installed (apt-get update, upgrade).

I imagine that steamOS can update drivers transparently to have always best configuration for gaming. The support team will only need to answer clients when a fix will arrive automatically.
ENERGY: It’s time to wheel out a really “green nuclear” solution
> Firefox ain't one of them. Last time I checked, their plan was to reserve some of the more dangerous features (such as access to the camera) for secure websites. Hardly a plan to drop support for plaintext HTTP.

So basically, by your own admission, you say that websites with a near-future version of Firefox will only be able to offer a "full" web-experience if they are offered via HTTPS.

HTTP-based websites will be reserved for an inferior web.

> Classic slippery slope argument.

But somehow saying that this is moving in a HTTPS-only direction is a slippery slope argument? How long until Javacript is only allowed via HTTPS? How long until video and media-APIs will only work with a "secure" DRMed connection, signed by the MPAA?

Taking HTTPS everywhere and removing support for HTTP is the slippery slope and we're already walking it.

Every feature of every part of the HTML spec has to be supported for every transport. End of discussion.

HTTPS everywhere is a misguided effort. Trying to artificially limit HTTP to further your cause is just GOT-level political bullshit. Stop playing dishonestly. If HTTPS everywhere can't win through on its own merits, you should let it die.
I think he means CNN, Fox, MSN, NBC, NPR, etc.

https://wikileaks.org/sony/emails/emailid/133736

(From the State Department to the CEO of SONY.)
How to get 1000 free YouTube Subscribers 2015 REAL
Just say 'I recommend we use this database from a bunch of ex-Googlers'.
I get the Android comparison, but I don't think it is very much relevant. People don't always get Android phones by choice, and they get a phone ANYWAY because they need a phone.

For consoles, the choice is already very clear out there and the well known brands are Xbox, Nintendo and Sony, period. You can see how nVidia is struggling to establish their Shield brand in the market by the way, as a good indication of how hard it is to enter the market. There is nobody who "needs" Steam Machines out there right now, because they already either have a console, a PC or both if they actually care.

And additionally, Valve is too risk-averse to actually build and sell hardware by themselves (or even take a NEXUS approach like Google), which makes me think they don't even believe in the Steam Machines themselves. We will see.
How is the quality of engineering education in Germany these days? I quote Paul Graham:

"There don't seem to be many universities elsewhere that compare with the best in America, at least in technology.

In some countries this is the result of a deliberate policy. The German and Dutch governments, perhaps from fear of elitism, try to ensure that all universities are roughly equal in quality. The downside is that none are especially good." [1]

He goes on. Is this still accurate?

[1] http://paulgraham.com/america.html
Seattle thinks that is a great idea...
Does not matter, people who buy "consoles" don't care what is native or not. They just care if their game runs well.

And additionally, Witcher 2 is not really using a wrapper, at least not in the WINE sense of the word. Witcher 2 uses eON which basically does conversion of DirectX calls to OpenGL calls at compile time, not execution time. So it's arguably pretty close to native.
Most GUI toolkits for Rust are in their infancy, but I hear that Gnome will be working on integrating Rust with GObject this year, which should allow Rust to leverage Gtk:

https://wiki.gnome.org/GUADEC/2015/BOFs/Rust

Some preliminary work towards this:

https://github.com/gi-rust/glib-sys
You can't really compare hardware specifications between a PC and a console to get an idea of relative performance. Developers are able to squeeze a lot more performance from consoles as they aren't running a full OS and other things in the background. They are much more consistent so you don't need to leave as much leeway.

At least that used to be the case. Perhaps the modern generation of consoles are so complex that they can be compared to PCs.
None of this stuff is used anymore. We have the kernel in ring zero and we have everything else.

Not using two of the four rings does not really mean nothing is used anymore. The reason only two are commonly used is probably to a large extend due to portability to processors with only two rings and maybe also architectural simplicity.
I don't know if arbitrage is the right word for Japanese sweets in USA. You often can't buy them in USA.
Yeah, it can be done, but who the fuck needs that ?
Nice name-dropping in the first paragraph.
Maybe, but currently some site today can set a cookie in your browser and track you anyway -- a lot simpler than fiddling with the TLS stack.

I assume that if you browse in "Private Browsing" or "Incognito" mode, then the TLS Session Resumption data is wiped once you exit that mode (similar to how cookies and local storage is wiped).
> How long until video and media-APIs will only worked with a "secure" DRMed connection, signed by the MPAA?

The slope is so slippery I think I might actually fall off my chair. I don't think you know what the fallacy actually is.

There's no arguing against facts - moving to promote HTTPS and make some features HTTPS-only does go in that direction. But that doesn't mean things will continue going in that direction.

If I keep driving north I'm sure I'll fall off a cliff eventually. The magic happens because the road isn't straight.
Polyglot – localized text for game devs – Google Sheets
> "Privacy, above all other things, including safety and freedom from terrorism, is not where we want to go," Steinbach said.

That's called a "Cognitive Distortion": Polarized Thinking (or “Black and White” Thinking).

We don't have to choose between either privacy or safety !