skysight-inc/HackerNews huggingface dataset:
End-to-end encryption isn’t perfect, but it’s still an improvement that reduces attack surface. Prevents man-in-the-middle attacks.

I think this is hinting towards a future where tech-savvy privacy-aware end users will continue to trailblaze- utilizing and evolving technology that minimizes the need to trust government and corporations.

That technology includes self-hosted services, decentralized/distributed (p2p-esque) protocols and platforms, open-source encryption ciphers that feature perfect forward secrecy, and open-source hardware.

>See also: any https website that uses google analytics or social media embeds.

There are browser plugins for opting out of google analytics tracking. Also plugins for blocking social media and commercial/advertiser tracking. A bandaid- but better than nothing.
It shouldn't be easy for me to generate a cert for your domain.
super awesome.
Until you're a successful founder from a bad family background and no history of founding startups, no ivy league education, and no nest egg to fall back in your 20s, you shouldn't make such aggressive rants.
Recent Bitcoin Silence Could Be Golden for Investors
The society at the time was appalled. Just not the bits of it in power.
Yep, I know it's sounds scary, but I believe it's the only way for the Web Reader extension to work. I don't do anything malicious (just trying to upsell you on the premium plan) but I'd completely understand if you were freaked out by that.

An alternative is to use the bookmarklet, which will only run javascript on those pages where you explicitly clicked to open it, it works exactly like the extension:

http://readlang.com/webReader
Except the cert used in that process is one uploaded by the user, and could easily be provided by an attacker. As long as the attacker can MITM the path to the domain's web server, they can provide that cert for TLS and successfully spoof the site.

Edit: Ok, technically it's a CSR signed by a private key, but you could still use the key to self-sign a cert or something... But none of that mitigates the MITM attack described above.
World of Warcraft Development
How Tomorrow's Race Car Got Bogged in Today's Lawsuits
The crazy one I do a lot (and usually notice after I can no longer edit) is "know" instead of "no", which is definitely a muscle-mind problem; it's not like I think "know" means "no".
You’re right, I did not think this through…
Ask HN: How do I bring our technical hiring coordinators up to speed?
The small company I'm working at just started a looking for a few engineering positions. Our hiring coordinators (an office manager and an EA) are posting jobs and communicating with candidates but-- they're fresh to it, and are making little mistakes. (Mistaking Java for Javascript, posting a "Flash/Flex engineer" position on a python-focused jobs board.) They're not recruiters per say, but they're recruiting-adjacent. (And we don't have a recruiter.)

They're not reviewing the resumes, but they are collecting them and sending them to our two founding engineers.

I've been correcting the language/framework confusion when I can, but I also worry that they don't quite get some concepts like: most programmers can learn any new language/framework if they have motivation behind it.

What should I be doing to bring them up to speed? Or at the very least, what should I be doing so that our company doesn't look foolish in our job postings & communication with candidates? Are there any technical-recruiting focused blogs I should link them to? What other technical-hiring concepts do people probably miss?
I'd love to hear back if you find something like this. Up until Vers was released, I lazily boilerplated it into whichever of my services needed the functionality. Even so, the pattern has been such a boon to our development cycles that it seems strange others haven't independently come to the same approach.
It's been there for several years conceptually as a plan to deal with limited capacity. Meaning it comes and goes.

For the good part of the last 3 years it's hardly been there (so unnoticeable one would probably say power is hardly/never cut). Its just been more impactful in the past few months & the last few months of last year.

Generators/Inverters aren't rare in the suburbs or in the further outlying areas. At least not anymore. Not everyone, but one could hear someone else's close by/a neighbors.
I won't ascribe to malice what can be more easily explained by stupidity. Or maybe just immaturity.
Kotaku is the least of their problems. Some of the worst stories I read on the internet consistently come from Jezebel and Deadspin.
Hip-hop music is a $10+billion dollar industry, but despite the fact that I'll listen to the occasional Outkast album, inside-baseball music industry drama also doesn't seem all that important to me either.
Prisoners Pay Millions to Call Loved Ones Every Year And Company Wants More
>Also, men fall in love with men, and women fall in love with women.

At a significantly lower rate. If relationships (and the desires for relationships, the fallouts from breakups, etc.) cause a significant impact in some work environment, it will be heterosexual relationships that are of greatest concern due to the percentage of total relationships they make up.

For example, where I went to college, coed dorm rooms were not allowed because most coed dorm rooms had historically been couples and relationships breakups became really messy. There was no such rule preventing homosexual couples from having a dorm room because the number of incidents was much smaller and the challenge to keep them apart was greater.
It would be nice if Google entered this market. Providing free phone calls, free money transfers and even free tablets would be such a boon to prisoners and their families.
And so this is why, in our office with a thermostat and ducts in every room, it's typically freezing in 1/3rd of the conference rooms, another 1/3 are way too hot, and there is zero meaningful control using the thermostats in the rooms over this?

Not saying it's not a good idea, just saying that in reality I've seen these systems work very poorly together in most office environments I've been in.
You wouldn't have a signed cert until after the challenge has been completed. The client generated a CSR, not a certificate.
Sonic Pi
https://github.com/diafygi/letsencrypt-nosudo
Until advertisers pull $.
An Open Letter to News Sites
HSTS only works after you connect over HTTPS. If you can only access a site over HTTP, HSTS doesn't do anything. So maybe people hitting WP from Internet.org can never get it over HTTPS in the first place?
Yeah, Numba makes it awesomely easy to write fast functions in Python that release the GIL. You can already do this directly with dask.array by passing a Numba compiled function to the map_blocks method: http://dask.readthedocs.org/en/latest/array-api.html#dask.ar... -- it should be pretty straightforward to wrap this with xray.
I think university students should definitely start with older processors, and then gradually change the levels. I agree there is an architectural change in the newer processors, plus the additional cores. But, working with an older processor with limited memory and processing ensures the programmer realizes how important is each line of code and appreciates the comfort provided by newer processors and thus their complexity.
TI runs all its low-level calculator stuff on Z80 emulators which are then helpfully run by whatever actual chip they are putting in the calculators these days.
It would've been much better of him to express this as a problem with coed workplaces instead of making the issue the fault of either particular gender. The question is thus did he mean coed workplaces and just completely failed at expressing his intention or was his intention to be sexist.
I enjoyed it! If you only want extremely detailed walkthroughs, fine, but people don't have to write their personal blog posts to cater to those tastes, and other folks don't have to upvote according to those tastes.

She has written some other fun posts about her various crazy setups--she runs Debian on her Mac and walked folks through how to do that:

https://blog.jessfraz.com/post/linux-on-mac/

and almost never installs packages on the host (rather than in containers)--to that end she Dockerized Chrome, Spotify, and a 3D Steam game:

https://www.youtube.com/watch?v=GsLZz8cZCzc

https://blog.jessfraz.com/post/docker-containers-on-the-desk...

(Maybe I have a soft spot for unusual setups. I worked from a netbook for six months, and currently bemuse my coworkers by using an ARM Chromebook as my main machine and doing most of my coding in a WordStar-inspired text editor named joe.)
I have approximately the same level of interest in hip-hop, however if Gawker owned a hip-hop media site I wouldn't question its relevance to a discussion about Gawker.
2015 Startup Funding on Pace to Reach Highest Levels Since 2000
His page http://michaelbrundage.com/note/2005/05/15/xbox-360-emulator... gives a taste of the xbox emulator project.

Now I want to learn so much more.
I haven't played a video game for more than a few minutes in over a decade, and I had no idea what "gamergate" was until I read the summary on Wikipedia and maybe some article by a reputable news organization (I don't remember which), but isn't "everyone who's in the KKK is a racist" a much more apt comparison than "all Muslims are terrorists"?

As I gather from the Wikipedia entry, gamergate is a hate group, so by definition anyone who's a part of it is a bully. I mean, saying gamergate is for "journalistic integrity" is like saying the KKK is "anti crime" because they may have, on occasion, lynched people who actually performed crimes. But since the KKK is only anti crime if said crime was committed by a black person -- and then their reaction is not one of protest but of violence -- you can't say that the KKK's stance on crime is "important". Similarly, gamergate only happens to be enraged -- and violently so -- not about journalistic integrity in general (or even in video-games coverage), but only when they sense that integrity happens to coincide with the interests of women. They promote journalistic integrity just like the KKK fights crime -- namely they make up a conspiracy to fight, and may on occasion, by total chance, happen to be partly right (in their claims, not in their actions, of course).

Also, while most people are born into Islam (or convert to it because of some of its many ideals) people choose to join the KKK -- or gamergate -- only because they identify with a rather singular feeling: hate towards the movement's intended victims. One is not born a gamergater, and neither does one become a gamergater simply for believing that journalists should hold themselves to a higher standard.

What I don't understand is, while the KKK may not like or endorse the "hate group" designation, they are well aware that they're not really crime fighters. Are gamergaters confused about that point?

EDIT: While reading more about gamergate I came across the term SJW, which stands for Social Justice Warrior, which is something gamergaters are apparently against. How can a group of nerds be against social justice warriors? Are they against Batman? Do they hate Professor X?
likely have constituents who work in an industry that would be threatened with greater trade integration.

Nationally a detrimental move with greater costs, but locally they might very well be better off without it.

The standard story trotted out about trade are the steel tariffs implemented by Bush 43. Highly beneficial for the small number of steel workers in the US, but an effective tax on every other consumer. Forgot the figures from way back when, but IIRC we could have paid every steel worker $2-300,000/yr for the rest of their lives and still come out far ahead as a country.
I'd like to notice that bigots should have the same right to express themselves as most tolerant people, for any values of "bigot" and "tolerant". Freedom of expression either works for everyone, or (eventually) for no one.
A few years back, I ran into two professional APL developers. Apparently there are still 3 major commercial APL vendors (not counting IBM, which probably still sells APL2). Each targeting their own niche, and each being expensive if you're used to free compilers (starting on the order of $1k per seat).
You're being quite ridiculous.

All he said was that people's success and failures are to a large degree determined when they are born, which is true. The genes you're born with, the socioeconomic demographic you're born into, your parent's level of involvement, etc are all determined before you're born. That's factual. It is only with extreme effort and perseverance that one can counter acts of fate. It is possible, just unlikely.

How does Michael expressing this truth justify your personal rant against him?
I've never heard conducting a MITM attack on the Internet backbone or hosting provider as "easy" before (other than by governments—but they probably already have plenty of vectors for generating fake certs). Now, if you're serving HTTP over an unknown wifi access point...
I just tried it out. I take it all back.

It's absolutely awesome. I regularly read news in half a dozen languages and this is what I've been waiting for for years now.

Awesome!
I agree, but I think the problem you're highlighting is intrinsic to business models that emphasize growth over money making more than it's intrinsic to bubbles.
Agree. I love what they're doing but it seems crazy that installing a new daemon and running it as root is being advertised as a key part of the solution. I get that they're trying to make it super simple for the hobbyist at home with a LAMP VPS but it feels like this should be an alternative to a simple, composable command line tool that's more of the unix philosophy and less invasive.

The good thing is the ACME protocol looks pretty straightforward so I'm sure someone will write that tool, even if Lets Encrypt themselves aren't interested in providing it.
Roll call on TAA: http://clerk.house.gov/evs/2015/roll361.xml

Roll call on TPA: http://clerk.house.gov/evs/2015/roll362.xml

The Democrats downvoted the TAA section, it will get a new vote next week and then it goes straight to the President (both have to pass at once).
The majority of what you said can be accomplished by Philosophy.
What happened on the bad day, if you don't mind me asking?
Good. The secret TPP agreement is awful. See the EFF's analysis.[1] It's not about tariffs; it's a wish list for the RIAA, big pharma, and other lobbyists who want to override consumer protection laws through a trade bill.

[1] https://www.eff.org/issues/tpp
Nuclear launch commands are still stored on 8-inch (yes!) floppy disks!
At the time, parent's comment simply read:

> Not to mention the complete lack of journalistic ethics on Kotaku. They frequently post articles about games they have financial or personal ties to, without disclosure.

You assert that this is a "valid point", but I believe a better characterization would be that it is an extremely broad, unsourced claim.
> They just eat sentient meat animals that offer themselves to the patrons. They even kill themselves.

If a human were to do this today, we would question their mental health. If it were a sentient cow, most people would see no problem with it. These views seem at odds with each other, no?
Sorry.. should have read "false positive rate"
This could be really useful when I do a major refactor later this year. Thanks.
I like their interface a lot, but I'm not sure how I feel about the challenges they actually have for JS. It seems like there's a lot of challenges that are trivially solvable with Array.prototype.map, and then a bunch more that are super complex and (for me at least) unsolvable. I wish there were more challenges in the middle :(
good luck finding an union in Mexico.

In fact, a recent Mexican law fordibs "people grouping together".

And outsourcing is now legal btw, thanks to another new law. So, any benefits mexicans had they are gone too.

And good luck living with a settlement of USD 1,200 (unique payment)
> You really don't see the problem with that?

I don't see a moral or ethical problem with it, no.

And the democratic consensus in most western countries agrees.

Choosing one applicant over another because of prior work history or education is just making informed decisions. Choosing on applicant over another because of their gender is illegal discrimination.

I understand you feel like people who don't have degrees deserve equal footing in the job market. But they don't, and business don't have any moral, ethical, or legal obligation to forego their own best interest and take bets on higher risk hires.
Cool. The naive approach yields O(exp(s)*n), this looks like a nice improvement.
...and it gets even more interesting if you throw in a few circular references in there
My point, exactly.
Industry Insights from the Inside: An Interview with Evanston Edge
> so the variables can't pollute anything else

The variables can already exist in the environment. One of them is tested by a statement that is reachable without that variable being initialized in that script.

A fix that keeps the script POSIX would be to initialize the variable.
Nice. But from the description, it apparently doesn't work if you construct class names by string manipulation (like "item_" + (selected ? "selected" : "")). Maybe you shouldn't do that anyway, though.
FYI, if you don't want to install the official Let's Encrypt client on your production server, I created a simple python script that will automate the ACME process for you. It doesn't have to run on your server, and it doesn't ask for your private keys.

https://github.com/diafygi/letsencrypt-nosudo

The only thing that has to be run as sudo on your production server is a simple python one-liner that temporarily serves the required file. The script prints out this one-liner so you can copy and paste it into your server's terminal, then kill it when the challenge is done.
> Last night they published a story about Lebron James' penis accidentally being flashed on TV.

They and literally a thousand other news organizations, including Newsweek, NBC News, The Guardian... There's no doubt Gawker is a pox, but in terms of uselessness and vulgarity it's not really an outlier.
Does anyone like this - left, right or center?

Matt Drudge just posted the headline "PELOSI SAYS NO TO OBAMATRADE; TAKES BRAVE STAND FOR AMERICA" ... stuff's getting weird, man.
This doubles as a good lesson for somebody considering joining a startup, and kudos to them for being fully transparent about it. You should always ask to see the graph they've presented here, a graph with historical burn, revenue and months of runway left. Otherwise it is very difficult to figure out how much risk you are taking by joining. Because if the runway starts getting short and the startup need to "control expenses", that means laying you off.

> Generally, I think controlling expenses is a lot easier than figuring out how to make more money.

A key point. If your salary is coming out of future predicted revenue growth, and that growth doesn't happen, your expense is going to be controlled.

I'm not suggesting startups shouldn't be aggressive with spending, nor suggesting employees shouldn't take risks when joining startups. But you should ensure that, as an employee, you are compensated for the risk you are taking. And this graph is a great way to see exactly how aggressive the startup is being with their spending.
Including Cuba.
It's interesting that on this issue the democrats disagree with the president, but the GOP backs him fully.
Mobile developers dream tool!
Completely agree. I think that a correction will happen, but not a bust. Also some companies really need to manage their burn rates, but I guess it's the old saying "spend money to make money".
Does anyone know when exactly it will be released? It says Mid-2015, and it's almost past that.
Good question from the page's comments- will this work for different sites run on one server? I'm thinking of all my side projects that have sites up, they're all run off the same $9/month Apache server. Can I get individual certs for each domain run off the server?
Constructing Large Increment Gates
It will take exactly as long as it takes for lab grown meat to become viable. When that happens it becomes very easy for the general population to view eating meat from animals as evil.
Jack King, voice of Apollo 11, dies
Roaming Sim card to tackle UK notspots
Lesson #1: Use Ordered Lists
His accusation is vague and non-specific. I have no love for Kotaku, but without being clear about what he's acusing them of, it contributes nothing to the discussion.
It's not THAT far off though.

This like has A-Rod at #20, at a cool $300 million.

http://www.celebritynetworth.com/list/top-50-richest-athlete...
Those poor wifi-connected web servers in coffee shops across the world...
Opposition to polygamy can have some logical reasoning behind it though. Unlike something like gay marriage.
Looking to change your IT Provider?
What are you suggesting is the secret reason she's opposing? Do you really doubt she's to the left of the president and trying to get a bill that's more liberal?
America's Ur-Choropleths
that doesn't mean the interview question was bad, presumably in the actual google interview they defined the problem. people are confused because he didn't define "invert" in the twitter post
https://github.com/kolodny/jsan ;)
Hulkamania running wild all over Gawker? :-)

While I have little sympathy for the company, I think the 1st amendment ramifications of this will be big no matter what the outcome of the trial.
And Poland. Who else? Germany?
I'm really excited about this project, but a lack of steady updates and communication on release date are really hurting it. Hopefully they release soon and make this a moot point.
Credit card processing does seem to be moving towards real-time. Lately I've found more and more merchants where I get a notification on my phone instantly after my Amex is swiped.
Wait, I thought the government was bought by corporations?
Ah, thanks for noticing. Actually, with the current implementation, it would still work I believe
It sounds like Lets Encrypt is going to require a site to be publicly available for them to give out a cert for it. They'll tell you to put a certain file at a certain location to demonstrate that you control the domain.

So unfortunately it'll only help with your dev sites if they're available on the public internet.
His expected outcome was in his favor because he whittled the house edge down to nearly even odds, and he had loss protection of 20%. But you're right that that didn't come into play because the actual outcome happened to be in his favor and ballooned out of control thanks to a random walk.
Cool. Nice work!
Agree. Disgracefull that this (referenced) comment is #2 from the bottom of thread right now.

LOL: downvotes
This literally makes no sense to me. At 11, I used to run, ride my bike for miles by my self. Hell, if I go to my parents neighborhood now. There are kids playing outside all the time. By this logic, I can call the cops, and get the entire neighborhood arrested. Can't think of a normal adult that would support this.
That should be an indication of how bad an idea this is.
Zurl – An HTTP and WebSocket client daemon with a ZeroMQ interface
if you divide the year into 3 equal parts, early, mid, and late, then early is January through April, mid is May through August, and late is September through December.

therefore, they still have two and a half months approximately until "mid 2015" is over.
Worth remembering: this stuff is an arms race. What we know of Gawker strongly suggests that they'd run this shit no matter what. That NBC will jump on the bandwagon actually makes Gawker's actions less responsible: they driving the whole field into the toilet.

Newsweek was never a great publication, but whatever it was, it's not that anymore: it was sold to the Daily Beast, stripped for parts, and then spun back out and acquired by another company.
The certificate of participation at the end claims it's 38,000 words...