skysight-inc/HackerNews huggingface dataset:
Awhile back the NY Times (sort of) committed to having their site on HTTPS by the end of 2015, is that still on track?

http://open.blogs.nytimes.com/2014/11/13/embracing-https/
How to answer the dreaded “How much is your current salary?”
I've been reading various suggestions about how to answer this question and they have been leaving me somewhat unsatisfied.

I think we can agree - they WILL ask. And it is not in your interest to tell them.

Not telling them is evading, plain and simple. You can sugar coat and wordsmith it all you want, but you're not fooling anyone even with limited intelligence you are evading the question.

I would add that it is absolutely true that some people are lowballed and end up being underpaid. There is a wide range of salaries for the same job. A very wide range. (I would argue maybe being overpaid compared to the value you bring is dangerous as well, since eventually you may be let go because of this later on.)

Instead of all the wordsmithing in your evasive answer, wouldn't the better suggestion be to just go in with a number you have to have, and if they meet that number, you're fine. It seems easier to come up with a salary you can be content with and demand it, rather than get caught up in all the game playing.
Disagree. See Uber and Facebook.
It is time for a moderate Libertarian government. It really is. We need to bring the train back onto the rails.
I fear that seeing how people "love the fingerprint readers on their phones" the governments will think - well then, they will probably love having to use their fingerprint for federal services, too - by giving us the fingerprint to store (which means the government will also be able to use that fingerprint to log into all the devices and services for which you'll be using that fingerprint).

Today's data breach at the very least shows that we shouldn't allow them to push for that. The fingerprint should always stay on our devices in a hardware secure module.
I don't disagree with Snowden's sentiment, and I know it's possible he didn't write the headline...but "The World Says No to Surveillance" is simplistic and inaccurate.

The obvious rebuttal is "But China"...but beyond that, among the Western powers: France and Britain, among others. And Snowden acknowledges this (which is why I don't assume he wrote the headline, necessarily):

> Spymasters in Australia, Canada and France have exploited recent tragedies to seek intrusive new powers despite evidence such programs would not have prevented attacks. Prime Minister David Cameron of Britain recently mused, “Do we want to allow a means of communication between people which we cannot read?” He soon found his answer, proclaiming that “for too long, we have been a passively tolerant society, saying to our citizens: As long as you obey the law, we will leave you alone.”

Again, it's not that Snowden is wrong in his opinion about surveillance. But it's wrong to think that the world, or any kind of non-U.S.-status quo, is anti-surveillance. The battle is much more uphill than that and those who want to fight it have to keep that in mind.
A lot of negative reactions here. My impression of engineering at Facebook has been the work ethic seen in Josh Perez's "Alt" Flux library for React.

He's been very responsive and helpful to my own projects in the same problem space.

Maybe lots of people are in better situations than I'd expect, but working at Airbnb on projects similar to that on a platform tons of people use sounds cool to me!
A more accurate analogy would be using the phrases like "cell phone," which are certainly still commonplace. Adjectives tend to stick around longer than necessary for disambiguation, but that doesn't mean they are useless.
Good if you want to use JavaSCRIPT. But most people prefer to use Dalvik becauz it runs on ARM which is much cheaper than ms windows devices. But JVM Cobol is probably more backward compatible
Love the Pomodoro technique. I've found that keeping a list of distractions that come up during each focus session helps me to stay on track and come back to those at the break times.
Grommet: UX framework by HP and style guide- Apache license
Jacob Appelbaum's videos are always a must-watch.
'geofft addressed this better than I ever did:

https://news.ycombinator.com/item?id=9297787
I wonder why they didn't create intermediate CAs by usage type. Most CAs have different intermediates for, e.g. TLS/SSL (one each for DV, OV, EV), CodeSigning, S/MIME, TimeStamp…
Thank you, wasn't aware of that one. Added it.
Enabled-by-default is a defensible choice (even if we don't like it), but it sounds like this is un-disableable, which I think is not defensible.
It seems pretty clear how this should be handled, no? If the app wants to do it, then, as with anything else that might make the user experience better at a privacy cost, let it ask for permission to do it!
Having worked in the routing space (not on this project) and reviewing the code, the implementation is professional-grade. Where as OSM data is rich and challenging to work with for routing purposes.

Your feature/bug: the router told you to take a ferry. You'll see the ferry route represented here: http://www.openstreetmap.org/search?query=SF%2C%20CA#map=13/...
On-demand Streaming services in India multiplying
The world's response is more than the aggregate will of the governments. To take your case of China, I would be wary of claiming that the people of that country are content with the surveillance state in which they live. Rather, they are an oppressed people, and the surveillance state does them no favor in this regard.

Ed Snowden's larger point was about the public reaction to learning they were being surveilled; obviously, governments already knew whether they themselves were spying. In this sense I think the world has indeed said no to surveillance, it's just that in some cases the government doesn't wish to listen (well, not to that, just everything else!).
In support of this, please see September Clues on YouTube.

While we cannot say what exactly happened on 9/11, September Clues proves without a doubt what didn't happen on 9/11.
They will lure hordes of buffoons by making it look like a valuable thing:

"Free version limited to storing only most recent two fingerprints on our servers! For unlimited storage, upgrade to Middle Finger Pro for only $1.99!"
Offer to write it down and exchange it for a piece of paper specifying the amount that they are looking to pay to have you fill the position.
Excel = Small Data big $$

ETL = Bank people

Java = reel developers

Python, R = Scientists

c++ = old skool
Actually it doesn't. Have you tried making a mobile app with it? The experience is unacceptably slow and janky. React Native isn't officially released. That leaves us... with Java or Objective-C.
If it wasn't for USL vs BSDi, we probably wouldn't have Linux today, and BSD would be ruling the world.
The FBI should first clearly spell out a definition for encryption. Encryption is a function[&] that maps a number on another number. ([&] technically, this is a simplification because encryption tends to map a given number on an entire set of other numbers). What the FBI is asking for, is that some number mapping functions would be declared illegal. But where is that list of illegal number mapping functions? The problem that arises now, is that no matter how long their list of illegal number mapping functions, it will always be possible to design a number function that is not on their list but that would still be entirely valid to use for encryption. Furthermore, how can they actually enforce a law that says that particular number functions would be illegal? You see, they do not like that people use encryption functions on their numbers and they also do not like it when it rains. In both cases, however, their desires cannot overrule the laws of nature.
No, it's not. WoSign, StartSSL and iirc Comodo create the private key in your browser. This functionality is afaik around since Netscape's first SSL-enabled browser and originally intended for client-side-certificates. Today it's implemened using the <keygen> tag [0].

This usually means, that you press a button in your browser, the Browser generates public+private key, stores them in your Keychain (OSX for example), sends the public key to the CA and the CA mails you the certificate.

It's really done in seconds and for Mail.app or iOS mail you just need to enable S/MIME and sign/encrypt. There are many tutorials out there for various MUA. Except of Android nearly every popular MUA can speak S/MIME including Outlook, Thunderbird… [1] and many tutorials are out there [2].

[0] https://developer.mozilla.org/en-US/docs/Web/HTML/Element/ke...

[1] https://gist.github.com/rmoriz/5945400#file-1_smime-clients-...

[2] http://kb.mozillazine.org/Getting_an_SMIME_certificate
I believe that Let's Encrypt will only be doing DV.
Good call didn't tihnk about VT-x
Pelosi Should Stand for Internet Users and Come Out Against the TPP Fast Track
right. I guess what I meant was 'c' and 'd' are usually followed by movements, so stuff like 'dt)' makes sense to me. 'i' on the other hand is not a movement, so the behavior of 'di)' was surprising to me.

It's because 'iw', 'aw', and the like are commands of their own when an operator like 'c' or 'd' precedes [1]. So 'di)' is interpreted as 'd' followed by the 'i)' command (if I'm interpreting it correctly!), not as 'd' followed by 'i' followed by ')', which is nonsense.

I hope that was clear - just trying to understand vim better :)

[1]: http://vimdoc.sourceforge.net/htmldoc/motion.html#text-objec...
"Surveillance", if you count confiscated video footage from the crime scenes, may have been used to identify, but not to track.

Tamerlan died in a shootout after a police officer in Watertown noticed the stolen SUV and called it in. [edit: note there was some tracking of the hijacked SUV due to the owner's cooperation, but that's targeted tracking with cooperation, and not of the brothers themselves]

Tsarnaev was apprehended after an ordinary citizen noticed someone hiding on his boat and called it in.

The massive manhunt, whatever the intelligence apparatus contributed, the shutting down of Boston and suburbs... all accomplished pretty much nothing, other than conditioning people to get used to martial law, and an excuse to point guns at people[1] to cow them into submission.

And what evidence at trial was unlikely to have been available except by parallel construction? The defense strategy was to admit the acts but argue he was brainwashed by his brother and shouldn't receive a death sentence.

[1] https://ajmacdonaldjr.files.wordpress.com/2013/04/martial-la...
Ask HN: What bad traffic does Google see from TOR nodes?
Google imposes a CAPTCHA wall to visitors to google.com from the TOR browser, with a message that Google has seen "unusual traffic" from my (the TOR exit node's) IP.

I'm curious what sort of malicious or unusual traffic does Google see from TOR exit nodes; does anyone know?
> I've had enough of listening to your drivel. Begone

This comment breaks the HN guidelines. Please follow them when posting to this site.

https://news.ycombinator.com/newsguidelines.html.
There goes my future TS-SCI. Damn!
Well that can "easily" be solved by giving you a private key to use for your banking and e-com usage. Then "they" can decrypt it with ease and you stay "safe".
Maybe. VT hypervisors still mediate stuff done in VM kernels. The attack could still work on native OS kernels and still not be effective on VMs.
Learn jpython. All Reel work gets done in American programming langaguges of JAVA/DALVIK/C#.

No open source software will go anywhere without support from AMERICAN companies Oracle, IBM and APPLE
I think the point you're trying to make is that this database of accounts under FBI surveillance is such a juicy target that it enticed China to go after Google. If the database didn't exist China wouldn't have had a reason to break in.

You have a point, but I don't think it applies in this situation. Google was a valuable target for Chinese intelligence for a whole variety of reasons. Google itself suspected that the primary motivation was to gather information on Chinese activists that were using the service.[1] The fact that there was apparently a database of FBI targets is just added benefit for them, and there's no evidence that I've seen to indicate that they knew of the database to begin with.

[1] http://www.independent.co.uk/news/media/china-google-cyberat...
Location: Looking for work in Boston, MA
Remote: Yes
Willing to relocate: Yes
Technologies: Python, Java, working C/C++ with Arduino
Résumé/CV: https://github.com/quickbrownfox319
https://www.linkedin.com/pub/daniel-chen/37/4b4/b42
Email: quickbrownfox319[at]gmail[dot]com

=====
Currently working as an environmental engineer looking to expand into an entry level developer position. Please contact with any questions!
"Add this to your robots.txt" :=)
So the scenario is that on January 1st 2006 someone comes out of a time machine to a young programmer and says "Hello world plus a random number generator is worth hundreds of thousands of dollars. Believe it! Start your SEO engines now!" And that programmer actually starts competently executing on that, because time lords are known to be trusty, benevolent, and curiously forgetful of all the many, many more lucrative messages that could be sent given that opportunity?

Then yes, that would have been problematic, I guess?

The more meaningful question to me seems "Does BCC's modest success necessarily mean that the operators of pre-BCC competitors were worse off?" In the large, I'm thinking "Nope." DLTK Cards (no reason any of you would have heard of them, but its a mom-and-pop operation which does a variety of school printables, including bingo cards) is still up there and probably still worth several tens of thousands of dollars in AdSense revenue a year. (Might even be six figures.)
> You're commenting on an internet forum. There are no "stakes."

Whoosh. At risk is ... some incivility. Maybe. And we're already there because of the slanderer.

Attacking someone like that is cyber-bullying. To keep wrongly harassing someone with lasting, hurtful, and harmful messages.

The reason not to be civil and/or ignore the troll is precisely that it doesn't work. Calling them on it builds a culture of challenging lies - making it safer (and more polite) for everyone in the future.
you could structure it such that the longer they sit there remembering the data, the more they get paid. When they want to leave, they enter what they remember and get paid.
After Ross William Ulbricht was given two life sentences for running Silk Road, someone posted the Federal Guidelines for Life Sentences.

link: http://www.ussc.gov/sites/default/files/pdf/research-and-pub....

One thing that struck me is that after reading this, it seemed like a mathematical tally that was entirely reasonable that he be given a life sentence given the point system.

Given that the first instances in the guidelines where life sentences are handed out are treason and espionage (drug trafficking is second), isn't there a significant concern that if Snowden came back, already admitting what he did, he'd just rot in prison with a pre-tallied up score?
Inside Washington's Quest to Bring Down Edward Snowden
True that. I also love the fact he gives himself a B grade in past predictions. Nostradamus would probably give himself an A grade and we know how useful his predications have been.
I'd count google mostly as an example of deprecating or limiting useful interfaces. Yes, you can feed them stuff in "open" formats, but getting stuff out is harder. First example that comes to mind is youtube APIs, which offered easier access to stuff. Now try to get a feed of someones videos or similar...

But it is possible that it's confirmation bias + uncommon sample on my part.
Nobody is going to steal your idea, but people will steal successful ideas. An idea is just that, nothing. Lots people come up with plenty of ideas. Many ideas will lead to nowhere and fail. People don't want to steal untried ideas cause they don't want the effort to find out if they work. Successful companies have tried numerous ideas and doing minor or major pivoting before landing on a workable idea. That is the one people will steal.
I'm no apologist for someone who works for our government and publicly releases secrets that may damage the nation's security - and I've been fooled before - but I was quite moved by the HBO documentary - both in describing his situation and point of view, but also with his intelligence and way he conducted himself.

He would and will have to very sharp (and lucky) to stand any chance against the forces aligned against him. I think a United States congressman publicly called for his murder at one point. I can't imagine. I think, if he does truly care as much as he claims, he will inevitably have come back to the US to face trial. The time is coming when that will be the most important thing he can do to advance his cause.
No, Seattle is not unique. Check out the costs and delays of the 2nd Ave Subway in NYC.

Closer to me, I've previously complained about the bridges across the Columbia river between Washington and Oregon.

In 1982 a very fine bridge was built for $172 million.[1]

What finally got scuttled in 2013 was a different proposed bridge that would have cost $2800 million.[2] Now I understand there was some intervening inflation, but there was a 16x cost increase (before inevitable cost overruns) between the two projects.

Government at all levels, federal, state, municipal, is a very poor steward of Other People's Money.

[1] https://en.wikipedia.org/wiki/Glenn_L._Jackson_Memorial_Brid...
[2] https://en.wikipedia.org/wiki/Columbia_River_Crossing
> RedditStorage uses an AES encryption algorithm which requires you to choose a password (e.g. "bunny")

Some people still don't know what a password is? =D
From what I understand, Intel has been part of the development of OpenCV from the begining. So I wouldn't call it exactly a "big binary blob dropped in the middle".
Neat; Aurelien is my co-chair for USENIX WOOT this year. Now that I know his name, I keep noticing amazing things he's worked on.

Thanks for posting this.
The Programmer’s Zone – Better Than Winning
Canada isn't state #51?
A charged view
I made the same mistake, it's not your fault. If you graduated in the pre-www era, as I did, the options presented to you as a 17 year old kid were probably very limited; it's almost as if we don't acknowledge universities exist outside the U.S. in the typical middle-class education-option experience. Very narrow world view.
The best part, they have like 100 holidays a year. That's like 1/3rd the work everywhere else :P
The point of gun control is to score points with some parts of the population while disarming the rest--anything else is just grandstanding used to justify the act.
The option you are looking for is called "Keep Wi-Fi on during sleep" and it can be found under Settings -> Wifi -> Advanced on Android 4.3. This is the only device I can test with.

I advise turning it off unless you need it to be on, not only for privacy reasons but for battery life. I noticed an increase in battery life by turning that feature off.
Scrolled like a dream on this Macbook. I didn't know it had issues while posting.
The article makes no mention of the USTA Junior Development program and how it could be enhanced. Nor does it mentioned their effort to court more African American players. Donating to a few colleges (which will likely be the schools with the top 1-50 rankings; take a look, they are the same as in every other NCAA sport) will do very little to scale up young American talent. My two cents: more red clay courts. Young players need to learn how to think and construct a point as opposed to over powering an opponent. Also lower the cost of participation. Maybe Ellison can donate to the USTA which would in turn subsidize the cost of lessons for those who are talented but from an economically disadvantaged background.
> Ctrl+C …

⌘+C, of course*

* the only thing I can contribute to a discussion on certificate chains.
SMM was my first thought too, although "gone unnoticed for 20 years" (1995) suggests something newer; SMM was introduced in 1990 with the 386SL, and this suggests P6-level.

Microcode seems about right - that was introduced in the P6. But, it's also signed (at least Intel ucode is - not sure about AMD) according to previous research... either way, this is going to be interesting.
NYC population is 8.4M. Auto fatality rate in U.S. is ~12/10,000/year since 2001. If NYC follows US, then ~10k die per year in auto accidents.

The term "loaded question" refers to questions which presume facts. For example, "why did you kill him?" Is loaded because it presumes that you did kill him. The question you are referring to is not loaded.
All the English-language mainstream media outlets have a broadly pro-Western slant so it's not unusual that they present the viewpoints of their allies, playing up attacks against the West and downplaying or simply not reporting Western nations attacks against their "enemies". Stuxnet was one exception and the US government admitted, IIRC, that it and Israel had developed it and deployed it against Iranian targets. But generally it's only widely reported when the "bad guys" ostensibly attack the "good guys" and no verifiable evidence is provided and we only have official government sources' word to go on. It is a given, I think, that governments spy on each other and strategically launch attacks on each other's networks and databases. However, after the Snowden revelations the US/UK and their allies lost the (bogus) moral high ground when it was revealed they do the same covert attacks that were blamed on China, Russia etc. Only the really naïve were surprised by this. The mass surveillance of their own citizens is a different matter.

Bruce Schneier's latest book 'Data and Goliath' examines the implications of mass surveillance in a calm, levelheaded manner. He also outlines detailed, and realistic, solutions that recognize the benefits of data- mining and covert surveillance while reining in the excessively secret bulk data collection practices of state intelligence agencies and the bulk data-mining practiced by corporations like Google and Facebook.
How about traditional police investigation tactics? They have been and continue to be extremely effective, much more so than blanket comms survalience. If you compare today to a few hundred years ago, we've already expeeienced the kind of change in destructive access you fear, and yet it almost never happens.
Can't you export your wordlists from duolingo to anki?

Also, decks such as core2000 + dictionary of basic grammar + remember the kanji or kanji damage, will give all the highest quality content I've seen to learn Japanese. You will still need some guidance from a teacher, especially to get started, but no matter what you do for language learning, you will need more than one avenue.

The spoon fed Chinese deck is way better than Rosetta Stone.

But yes, there is room for curated content in this space, I just got really annoyed with the tone of the marketing text and went of on a bit of a rant. At least they didn't claim to make you learn like a baby :)

Your point is valid.
When will we have the option to enable multiple layers of encryption at the IP level? It would put to rest so many of these power grabs.