skysight-inc/HackerNews huggingface dataset:
FUD is on your side. Check slide 37 and 38: https://docs.google.com/presentation/d/1r7QXGYOLCh4fcUq0jDdD...

"With HTTP/2 browsers prioritize requests based on type/context, and immediately dispatch the request as soon as the resource is discovered. The priority is communicated
to the server as weights + dependencies. [...] Responsibility is on the server to deliver the bytes in the right order!"

With HTTP/2 a malicious website may send you the advertisement and tracking code first, then wait and later send you the actual content data. With HTTP/1 a browser plugin can decide to not download a advertisement related tracking JS file, simple and effective.

Correct me if I am wrong or misunderstood HTTP/2 - but with constructive arguments and sources.

Edit: I believe in ads sponsored websites. Ads about the topic of websites are great, though like many I dislike personalized invasive ads that follow me around websites about things I already bought anyway or never will. I would like an "fair"-AdBlocker that only blocks invasive ads and allow the good ads.
Spanish tax return is almost the same, you receive a draft, you check it and confirm it
Comparing  LibreOffice  and  Apache OpenOffice [pdf]
that would be sad :(
At least S/MIME is underrated given the wide support in MUAs (see http://smime.io) but most CAs break the ux.
If you're playing on a the TV, most TV:s have input lag of 20+ ms anyway. http://www.hdtvtest.co.uk/news/input-lag

Adding another millisecond from the network may not be significant for teenagers and casual gamers.
Well, yeah. Zuck pretended that he was executing for the Winklevii when he was actually executing for himself.
FYI, sparks are different from threads. Haskell has "forkIO" threads which are comparable to Erlang processes/go-routines (actually, they're cheaper than both since haskell allocates less stack for threads). Threads are what you want for concurrent programming (i.e., non-deterministic interleaving of behaviour, which with GHC can be run in either single-threaded or multi-threaded mode).

Sparks are for deterministic parallelism, the idea behind sparks is that you create a pool of sparks, each of which represent a small, finite bit of work that can be done in parallel.

In general sparks will represent a finite, deterministic amount of work, whereas threads represent a (potentially) infinite amount of non-deterministic work.
"Don't worry about people stealing an idea. If it's original, you will have to ram it down their throats."

-- Howard H. Aiken
In Australia and I pay the majority of transactions with a wave of a card. The last thing I want to do is be fumbling for a phone and having to unlock it, find an app etc. I think mobile payments are a complete waste of time. Practically every modern country you have contactless payments for the small stuff, petrol, coffee, meals and chip and pin for the larger amounts. I don't understand why the idea still persists.
> They have to give their credentials to the hosting provider and to the DNS provider.

Back in the real world you don't need a hosting provider nor DNS to serve a website.

The following is a real address: http://123.234.34.56 (although it doesn't currently point to any real webserver)

You can probably trace the ISP it belongs to, but if that ISP is in another country than the regime you want to hide from, they need to launch a cross-country, international police-investigation, and possibly defend their claims through a trial, to get authorities in that country to force that ISP to divulge the identify of the customer at the other end of that IP.

Being able to serve websites anonymously, through plain HTTP and no hosting-partner DNS is a very real option. With today's high-speed internet connections it's a more real option than ever before.

Pretending this option doesn't exist doesn't lend your arguments any favour.
>Can you imagine telling game developers in 2017 that they must make their games work fine on 2015 era Intel graphics cards?

This is totally fine for loads of indie games already. And If you replace 2015 with 2013, of course you could do this. PC technology has slowed down a lot compared to 10 years ago, and it's not the constant upgrading it used to be.
"We now employ ... and 5 robots."

Thank you, this is a minority society doesn't care about enough! Seriously, very pleasant to read.
Binary HTTP/2 headers can be parsed a lot faster than plain text (HTTP0.x/1.x), so the packets can be prioritized depending on the content. Sure the routing has happened in another OSI layer, but nowadays a lot of packet inspection is done by certain ISPs & co.

Not an argument for or against it, but we know from the news that for example Google has to pay ISPs in France for their Youtube traffic, the same goes for Netflix.

But I don't want to start a discussion about that topic, it was just one of many arguments about HTTP/2. We should stay on topic and write about HTTPS-only or HTTP/2 which requires an SSL certificate.
Tesla vs Edisson, Xerox vs Apple etc.
Well, maybe its time to sign for BeWelcome (non-profit)

http://www.bewelcome.org/

Can BeWelcome be sold?
http://www.bewelcome.org/wiki/Can_BeWelcome_be_sold

Differences with Other Networks
http://www.bewelcome.org/wiki/Difference_with_other_hospital...
No.
The front-end is already there : https://tahoe-lafs.org/trac/tahoe-lafs. Backends are currently being developed (https://github.com/mk-fg/tahoe-lafs-public-clouds), and there will even be a public offering from the very same guys (https://leastauthority.com/)
Because the PC-in-a-box (like the Alpha) is in a much nicer form-factor for being put next to the TV. Probably much quieter too. This is why I almost bought one the other day.
> TLS provides exactly as much anonymity as HTTP (ie, none), so it is not trading that away. It only wins security without losing anything.

This is simply not true. If I request a resource from a server that is cached by my ISP, my request never reaches the source server and they'll never be able to measure that I requested that resource.
> I think there is a bunch of bloat in software compilation which the plan9/Go people were wise to stamp out.

Be more specific.
Patrick (patio11) didn't post it, so I will. A great post from him:

http://www.kalzumeus.com/2011/10/28/dont-call-yourself-a-pro...

I will provide a slightly different option. If you know what the salary range is (not guess... know), you want to work for a salary, and you know that you have a strong value proposition, just name a number over their range. If they want you, they will negotiate down to the top of their range. If they just want a warm body, then they will just walk away... and you both will better off for it. Without having more information about your context, this simplified advice might be a half-decent answer to your question.

Let me add that if you read the "don't call yourself a programmer" article and just bob your head non-stop, then maybe you shouldn't be in a salaried position. You can consult and make the same amount of money in much less time with (imho) much more stability and flexibility. Any objection that you can provide for his option can be addressed fairly handily -- you just have to decide that you want to do it.

> I would argue maybe being overpaid compared to the value you bring is dangerous as well, since eventually you may be let go because of this later on.

If you are really good at what you do, this won't matter.

If you are decent at what you do, and you have social capital and/or are willing to build social capital, this won't matter.

You will soon find that there is a salary level above which you care less about the money and more about the work/people/place that the offer entails. There is a lot of flexibility in how you choose what to optimize for. Many programmers do not realize this.
A bit of a shame that they used an MCU instead of an encoder/decoder ASIC, since they could've implemented something better. The fixed-code remotes I've seen use a standard IC like an HT12E.

If those weren't OTP/mask ROM, reflashing them with a different firmware (maybe even a simple rolling code?) could be an interesting exercise...
Know when someone spies on you through your Mac
If you can't buy them, the price is infinite. But once he starts importing them, you can buy them in the USA, and the price drops to a finite level.
C++ isn't so bad either. 2400 loc is a really dinky program; we have a 10,000 loc C++11 program which takes 10s for a full rebuild; typical rebuild times are about a second. I don't know how rust handles incremental rebuilds, but that kind of build time feels excessive.
Send Cisco commands via SNMP
Your wireless game controller probably contributes more to latency than your in home network. Your television almost certainly does.

That said, latency is additive since it all happens in serial, and if the sum of it hits a certain threshold ("human perception") you begin to notice. So maybe you save a few ms from the network with wired vs wireless, or a few ms with a fancy "gamer" controller, or a few ms with a nice gpu-powered video encoding algorithm.

Shave enough of these things (which are only now being designed with this sort of over-engineered latency in mind), and eventually playing over the network is less latency-prone than playing directly on a machine from not that long ago.
Google Brings New Street View Imagery to Remote Islands and Underwater Locations
Well ... with the incoming low level apis support on linux should be easier. You need only disk access, network sockets, sound and audio system to make a game. First two are solved problems multiplaform-wise. Remove the drivers from the equations and there is no good reason why porting should take a lot of work.
Well, any website today can have some JavaScript that verifies that ads and tracking cookies are loaded and executed before actual content loads. If the advertisement is not shown successfully, then the script can refuse to load the content too.

I am also not sure how stream prioritization will affect Ghostery, AdBlock or other browser plugins. Is there any evidence that these plug-ins are not able to do things in HTTP/2 (e.g. blocking URLs, domains, preventing DOM elements from showing up, deleting cookies, etc...) that they could in HTTP/1? I would be interested to know.
Yes, you have completely misunderstood this. HTTP/2 provides you with a mechanism to optimize traffic _within your own connection_. This is not at all related to the net neutrality debate where your ISP determines a priority _between different connections_.

Furthermore, ad blockers currently work with blacklisted hostnames. Even with HTTP 1.1 the data could be sent from the main server, but usually it is sent from 3rd-party servers, which makes blocking easier. This is the same for HTTP/2 and completely unrelated.
That's because the game adapted themselves to the controllers. Moving that pesky secondary trigger will open up new possibilities, and games will likely take advantage of that.
Qubes/Whonix integration to receive OTF funding
I loved yahoo pipes. I used it to filter high-traffic RSS to do a trivial word-match on content. I am now in the process of moving this to Newsblur, which allows filtering RSS content on tags, authors, or any word in the title. It's actually quite good, although we can't use the same filters for multiple feeds; at least it does the job.
Ask HN: Help me find this quote
Long shot. I recently read (or heard in a conference talk) something along the lines of:

"Building is taking something fluid and making it concrete. Ideas are flexible but computers aren't. Developers have to be pedantic as the computer works in absolutes."

It didn't make much of an impact until today, when I was having to explain to a client why I needed to get these details pinned down. As the original is much better than my paraphrase, any idea where it's from?
How is it biased? This is the issue we are talking about.
For all their furious development, either of them still make me want to chew my face off when doing anything that requires the slightest interop with MS Office.
Let's take the argument that news sites are public information and should not be encrypted. This argument breaks down pretty quickly if someone wants to inject bad things into public WiFi but there is another, more subtle, problem.

TLS stops a passive snooper (like GCHQ or a coffee shop) from seeing exactly what content you are reading as only the host is sent in the clear and not the full path. For example, it would be difficult to see exactly what articles I am reading on HN but trivial to see what I like to look at on BBC or The Guardian.

You can build up quite a profile of someone from what they choose to read. This could be used for national "security" or advertising purposes. It can also have a chilling effect if people think twice before clicking on a controversial headline.
$15 for an N64-to-USB converter: http://www.amazon.com/May-Flash-Controller-Adapter-Nintendo-...
I guess less people will "benefit" from their "innovative" ideas.
Runalyze – Your sports diary
The site you visit yes. But I am referring to a MITM. A cookie would be hidden by the secure tunnel. But the TLS resemption parameters might be visible as it happens before the tunnel is established. I am not familiar enough with the protocole to know if it is the case.
Same in France. You do it online. 2 minutes. :)
Do startups need to go to TNW or TechCrunch Conf? A little story by stupid me
A very big "if" indeed, but not a completely unrealistic assumption in my opinion.
It will not happen at once but gradually.

Neither Firefox nor Chrome intend to support plain HTTP/2 without encryption. Google already favors pages with TLS, my bet is they will also favor HTTP/2 sometime soon. Like you said: Browser will "reserve some of the more dangerous features (such as access to the camera) for secure websites.". They might even show a red bar for HTTP instead of a green one for HTTPS.

> ... that 10 years from now, I'll still be able to post public
> information (say, the full text of RFC 2616) on a plain HTTP site
> and have you access it with a mainstream browser.

I'm sure you are right. We will be able to use HTTP in 10 years much in the sense that we are still able to use RSS today.

I don't know whether to laugh or cry about this but it is what I see coming.
Mike Cassidy on Project Loon at EmTech Digital 2015
There are many tools used for Game development that are platform specific and have no Linux version. That's also why some porting efforts are stalled currently.
Thanks a ton for your kind reply @anigbrowl. :)
But if HTTP/2 requires TLS, then ISP can't read the traffic in any case right? I don't think parsing is a main concern here.

Also, If the Google.fr deal is anything similar to the Comcast-Netflix deal here in the United States, then it has nothing to do with protocols, TLS or even (by some definitions) net neutrality.

Basically, Comcast asked (and got!) money from Netflix to install (additional?) peering connections between Comcast and Netflix. Comcast doesn't even need to throttle packets deliberately (i.e. explicitly violate net neutrality) to ensure that its customers have a bad experience, the congestion at the then-existing peering points would have guaranteed that.

At the end of the day, it doesn't matter what protocol we use, if you have many many bits to deliver to lots of people on somebody else's network, that middleman who owns the destination network might price-gouge you.
RSS is an open format, Twitter is a walled garden.
nslookup -type=TXT jackgavigan.com

;-)
Faster and less memory intensive[1] and has a type system.

[1]: http://benchmarksgame.alioth.debian.org/u64q/compare.php?lan...
High-frequency stock traders turn to laser networks, to make more money (2013)
Can't one just sniff the code from the airwaves with a GNU radio RF scanner? Not that it is as cool as brute forcing it in 8 seconds but in someways it seems simpler and more universal.
We should propose Kirk Sorensen for a Nobel peace prize if Thorium takes off !
For anyone looking for an example, I suggest Chapter 24 of Real World Haskell [1]. The parallel stuff is about halfway down.

[1] http://book.realworldhaskell.org/read/concurrent-and-multico...
Not sure about that : I had an idea about 10 years ago that I never acted upon and the thing hasn't still been made.

And it's not something outlandish.
“Some features require creating a free account. We won’t sell your email address or spam you, scout's honor.”

Thanks but no thanks. I’ll continue using Tower.
Anyone give me some opinions?
Certainly there will be overhead, and I can see how it can quickly mount up. Each person will have a different idea of where the tipping point is in terms of that overhead. For me personally, what was described is not that onerous.
NVIDIA is really pushing though, they are moving up in the Linux developer commit charts [0]. In a few months they might be close enough to parity on the SteamOS (which likely could involve some proprietary code) for it not to matter.

[0] https://lwn.net/Articles/631509/
> If the IETF wants to improve privacy, it should work on protocols
> that provide anonymous access to signed artifacts (authentication
> of the content, not the connection) that is independent of the
> user's access mechanism.

[...]

> It would be better to provide content signatures and encourage
> mirroring, just to be a good example, but I don't expect eggs to
> show up before chickens.

If I wanted to have the eggs before the chickens, what would I do?
Sign my content with PGP? Sign the HTML file? Offer it as separate signed download? Are there examples of pages doing this?
Extract prominent colors from an image – JavaScript port of Android's Palette
Google was derived from the word Googol, not the word goggling. Pure coincidence.

[0]: http://graphics.stanford.edu/~dk/google_name_origin.html
> Elop was a director of consulting for Lotus Development Corporation before becoming CIO for Boston Chicken in 1992,[3][7] which filed for Chapter 11 bankruptcy in 1998

> In the same year, he joined Macromedia's Web/IT department[7] [...] from January 2005[10] for three months before their acquisition by Adobe Systems

> He was then president of worldwide field operations at Adobe, tendering his resignation in June 2006 and leaving in December,[12] after which he was the COO of Juniper Networks for exactly one year from January 2007 – 2008

This is not the CV of a man that I would hire for anything other than running a going concern into the ground.
Show HN: Trophus, a new way to experience food with people around you
Hello Hacker News! I've lurked for a while but finally decided to show off what I'm working on. There's still a lot t o be done - mobile is still not really on point, search does not work on mobile, the 'discovery' component is severely lacking... I'm actively working on all these components but as I learned in my CMSC 435 course "Software Engineering" you move a whole hell of a lot slower without a team that you can delegate tasks to. I'm working on this alone. My ex suggested that a system similar to Airbnb or Uber in its simplicity but for food would be extremely useful when youre in a rush or just wanna socialize a bit, and so finally after months of procrastination I decided to take the plunge and build it out. It was extremely enlightening and I learned a lot and I am now pursuing it full time.

I noticed that the idea was proposed before: https://news.ycombinator.com/item?id=2379797
The problems with Emile's submission was the lack of search (this is already supported. If you are on laptop you can start typing into the search bar and you will see all listing and users within 15 miles of you), the poor UI, the lack of forethought in how users will interact with the product.

I admit right off the bat the product isnt the best but I wanted to satisfy the critical components and just run with it.

If you zoom out and look around Maryland and click on the users you'll see what an "established cluster" looks like. I am running Stripe on test mode as I continue to iterate on the core features, and am eager to hear what you folks have as thoughts regarding the app. :)

Thanks again, this is my third Rails app and I really think it's a cool idea.
Remote Interview Pairing Challenge with Cloud9
Show HN: Dreamss – A dream reminding alarm clock with sleepyhead terminator
since most GPUs in these box are from nvidia, shouldn't nvidia be making its own steam box?
In the US, getting a PhD is not a job. Everything below the faculty level is considered trainee.
A beauty contest winner making Japan look at itself
I have a smallish site that brings in between 5k and 10k in revenue each month. I have not documented anything about it anywhere. AFAIK we were first of the kind. There are new direct clones popping up all the time, I know of at least four now, and one in particular has to be outspending our ad budget by at least 3x.

People will "steal" your idea as soon as they believe that it will be profitable to do so, even if you don't write blog posts about it. You have to realize that it's not theft to compete, it's just competition. If you started a chicken restaurant, some guy who opened the first chicken restaurant wouldn't have any claim to shut you down. Competition is part of business, and there's no doubt it's made our offering much better and provided motivation that is hard to drum up without an externality. Competition is good, even if it's often unpleasant.
Ah, I see. Yes, from a cursory glance at RFC 5077, it seems that the SessionTicket is sent as part of ClientHello, which is not encrypted (page 6).

This is still no worse than plain unencrypted HTTP at worst, and server admins or clients could well choose not to support this if they do not wish to.
The Similarities Between a Presidential Campaign and a Startup
What happens when someone uses this to pollute popular subreddits? People will get pissed off...
On HN for the sixth time in two months ?!

https://hn.algolia.com/?query=gitup&sort=byDate&prefix&page=...

The last one only two days ago with more then 200 comments: https://news.ycombinator.com/item?id=9653978

Edit: typo
Can you escape the invisible jail?
http://en.wikipedia.org/wiki/German_Universities_Excellence_...

And I don't think his statement is true. He may be right that there is no single(!) university that can compete with MIT for example. But there are excellent groups in various fields at various universities.
The resumption parameters might be used to uniquely identify a person... that's an interesting point.

But is that a big enough flaw to justify throwing out the baby of TLS with the bathwater of tiny details like that? I'm sure there are people who are much smarter than both of us who can fix that without giving up on TLS altogether.
I guess they will simply block the username and delete the comments.
It's quite a cool trick for avoiding mutable global state, or clobbering the global namespace. It's used a lot in javascript projects.

function make_counter() {
var i = 0;

return (function() {
return i++;
});
}

var blah = make_counter();

every time you call `blah()` now, it will return the next number in the series, but there's no way for anywhere else in the application to modify `i`. This can be useful as an iterator, so giving you effectively the same as `yield`-ish generators in python.
The "nerds" make 120-200k a year. The 25 year olds that went to Arizona State and studied drinking, getting laid, and "business" make up to 300k a year doing enterprise sales for startups.

The current culture is, "hey thanks NERD for geeking out on that distributed systems BS, really helped me out on my last sales call/commission."

Then the "NERD" gets to wonder what the F to do with their life come their mid 30s, while said sales person is set.

But yeah, let's keep calling ourselves nerds and allowing this to happen.