skysight-inc/HackerNews huggingface dataset:
>It's Greece vs. the whole of EU.

Nope. It's the European periphery vs Western European powers, especially Germany, who profit from being boss hogs in the E.U. and save their "too big to fail" financial institutions.
Honestly, this is a serious issue for my field. There are so many obscure academic binaries hosted on SF... I hope someone manages to mirror them. [The fact that a lot of the scientific community is so backwards in adopting modern coding standards is another conversation for another day.]
You wouldn't happen to have that set up available via Docker/Packer etc? I like being able to stand on the shoulders of giants :)
You let the USER decide who to trust, as they are the only person who has enough information to do so. Maybe they trust the community for some things, maybe they trust a government for a different set of use cases, and maybe they trust their nerd friend for other stuff.
> Who is your preference? The government? The registries? ICANN?

No, silly: the domain owner! Something that's already possible with DANE: the domain owner gets to decide, as it should be, by publishing information about valid certification into the DNS.

Of ALL options this one is the least crappy IMO.
That's great. I started doing that myself (my own git server, not github) for some projects I care about. This effort seems include a very narrow list, though.

For CVS, though, I suspect cvs-fast-export [1] will do a better job than git-cvsimport.

1 http://www.catb.org/esr/cvs-fast-export/
Ooops, I wasn't clear, the lower prices were for guns that I'm sure have been fired, the $35K was for an unfired Colt.

As for crimes, only two, with one by a police officer.
I started http://www.ghostnoteapp.com as a side project. It's still a side project but it's also a good business for me.

The most important things to consider when doing them is to subdividing it into smaller and smaller projects. That way you will feel the progress and that will help you want to prioritize your project. You need to start with a smaller idea than you might think. Really shave it down to barely working.

Thats at least what worked best for me.
And therein lies the rub. Interpretation vs. legislating from the bench is in the eye of the beholder.

Doesn't matter anymore, though -- the majority of people, whether liberal or conservative, don't really care about freedom or laws anymore, or what the Constitution actually says. They just want the government and the courts to decide their way, regardless of whether it is good jurisprudence.
FastMail isn't based in the US (we are in Melbourne, Australia).

For those who will point out that some of our servers are in the US, see:

http://blog.fastmail.com/2014/12/15/security-confidentiality/

For those who will point out about the new Australian data retention laws:

http://blog.fastmail.com/2015/04/09/fastmail-is-not-required-to-implement-the-australian-metadata-retention-laws/
Really interested by the pricing on your signup page (https://openexchangerates.org/signup), where you have the prices from most expensive on the left to cheapest on the right. I have mostly seen (and always built) these the opposite way around. Is there a particular reason why you did this? Did you A/B test it?
Cartography looks really elegant and that's why I like it. Masonry was too JavaScripty for my taste, all that jQuery like chained pseudo commands.

This really looks just like a config instead of code, and it should be.
I agree it works against most adversary's.

Wiping your HDD might not be enough:
https://blog.kaspersky.com/equation-hdd-malware/

Theoretically you could hide malware in your GPU, USB, FireWire, webcam, NIC, baseband, Bluetooth, where ever.

No matter who you are or how smart you think you are if your adversary is determined and has the required resources they are going to get you.
I trust Mozilla more than Microsoft. Is there any way to simply purge all Windows certs and import everything from cert8.db?
they are moaning bitches
To have $largeCompany buying their security suite where they can MITM on the proxy/appliance/gw/whatever without generating any alerts on the client side?
Then you will learn that later when the test fails. That is better because the reason for writing the test was your belief that it was invariant. Without the test you are more likely to continue holding the mistaken belief.
...and Japanese farmers work 10 hours a day. What a world.
Do you have any other suggestions? Hosting these repos on donated/personal machines is (IMO) significantly less likely to stand the test of time.

At least with a commercial entity there is a bit more "trust" involved that they won't disappear out of the blue one day. And if the time comes that Github starts to collapse, the process can be repeated.

Just because something isn't permanent doesn't mean it's pointless.
Ask HN: How good is my choice?
So the application that I am currently working on has a backend written on PHP (CodeIgniter) and MySQL. I am using AngularJS with Yeoman Angular Generator for frontend. It's basically a SPA. The backend is written to serve as REST api with multiple endpoints. I want you guys to give feedback on my tech stack choice. Thanks in advance. (the application is yet to be deployed)

I want to develop a dashboard for this application in which I want it to update realtime. I was wondering if Node.js with socket.io is a good choice. I would also want to know how to integrate it with my PHP and MySQL backend?
somebody have to pay for git hosting. who will be better alternative in your opinion?
Lazy coders will pile things into one commit or not use version control
and what should the default be for non-technical users? no trust at all? And asking each time "do you want to trust this root certificate"? (because we know how well that works....)
Wow, this is the first ›real‹ telnet interface i saw in years:

telnet horizons.jpl.nasa.gov 6775

Thanks, NASA!
I don't fit in! Then again, I am a genuine feminist, which to me means I am happy to let the missus (who does fit in) focus on her career, which she prefers anyway, while I, as a dad, stay at home and parent the kid(s). Feminism, f* yeah!

All I can do now is wait until they're old enough to learn a thing or two about computers if they are so inclined...
Lots of blog posts and then none for well over a year now? I think it's dead.
And who authenticates the domain owners? Your solution is basically "trust the registries" then. OK, fine. But they've screwed up in the past and they will in the future.
You are talking in generalities. What is "so much effort?" If a hundred thousand people work on a problem and spend 10 billion dollars, for instance, are we really depriving the less resourced? The U.S. spends $60 billion on pet food.

http://www.americanpetproducts.org/press_industrytrends.asp

We spend billions on bottled water:

http://www.businessweek.com/debateroom/archives/2008/09/bott...

Shouldn't we drink tap water and use the money saved to get water to people in need?
It's easy to call the CA system broken (and I think it really is), but other, better solutions are not that easy currently.

We want an open, yet secure web, anonymous at best. With the current setup, that is not so easily possible. Letsencrypt might help, but even with that, there is still someone you need to beg for a signed cert.

Maybe we need to think ahead.
Is Click Through Rate a Ranking Signal?
Spinning Up a Free Hadoop Cluster: Step by Step
I doubt it is the psychology, but the lack of shared experiences outside work. In school you have shared experiences and you grow to like some of the guys you hang out with. You don't hang out (much) at work and so don't have the shared experiences and consequently make no bonds.
Read up on landfills. There's little or no effort to make them decompose. Impermeable soil layers are deposited to expressly prevent mixing and mulching, since that would allow contaminated water to travel from layer to layer.
I don't think automatic updates are used for the root certificate store. They're fetched on demand.
Also make sure you call or visit the diggers hotline before you start to make sure you don't hit any buried cables. Not sure about outside the U.S. folks.
Call it lazy; I call it productivity. When the tool introduces more work than the fix, something is wrong. I can do 5 or 10 fixes before lunch. Except I have to go through a ritual of source management that slows me to a standstill, not to mention derailing my train of thought utterly.
Emotica Online
8 Ways Entrepreneurs Can Lead with New Work Models
While fastmail's interface may indeed be a bit clunky they are certainly not US owned or based as you've stated.
Why scientists are so fascinated with how the turtle got its shell
You can use org-mode in Sublime:

https://github.com/danielmagnussons/orgmode

If you commit and org file on github, it will render.

e.g. README.org
I came into this world naked, screaming and covered in blood. I would prefer going away a bit more dignified.
You are assuming that DNS is a valid place to store security information. While it can be in many places it cannot be in general due to the lack of authentication.

And if you require some level of authentication you are back to the same problem.
> how limited is society based on collectivism, obedience and hard work.

So you are implying a society based on independence, rebellion, and slacking would do better at treating its elderly?

Whether a culture cares for its elders only has to do whether they care for their elders, and in Japan they do. Making any other association is racism.

The fact is only because they care have they associated a dreadful term "lonely death" that anyone can relate with and fear, and have made it the center of social debate.

The fact is the US doesn't talk about this problem. They don't even have a word for it. But statistically more seniors live alone at 28% vs 20%.

In fact, I don't know of a culture that cares more for their elderly than Japan. They care so much that the way they've highlighted the problem has made western headlines. If that isn't proactivism at its finest, I do not know what is.

They're even voluntarily combing neighborhoods to identify elders living alone so that the police and local help workers can be aware.

Yes, there is ageism in the workplace, and there are those that are blatantly ageist, as there are anywhere, but Google has been cited for ageism, and to many they epitomize modern western corporate (IT) culture. Granted, the west certainly provides more tools to do something about professional ageism, but to generalize that obedient, hard working people go crazy and die alone in a culture that couldn't care less is the exact opposite of what is really happening.

I would add that the younger generation are less obedient and do not work as hard. There is a word they gave this problem too, and it is yutori-sedai.

refs:
http://www.aplaceformom.com/blog/10-17-14-facts-about-senior...
http://www8.cao.go.jp/kourei/whitepaper/w-2013/gaiyou/s1_2_1...
http://www.bloomberg.com/bw/articles/2013-02-28/in-japan-the...
http://www.reuters.com/article/2014/06/05/us-column-miller-a...
http://www.reuters.com/article/2014/06/05/us-column-miller-a...
https://ja.wikipedia.org/wiki/%E3%82%86%E3%81%A8%E3%82%8A%E4...
Aged 20 was just about the time I dropped out of university for illness related reasons.

At that time I was mostly doing standard UK student things: working as DJ for fun, getting drunk far too much, and having sex with interesting people.

Shortly after becoming a non-student I became a computer programmer, although the other activities were a large part of my life for the next 10 years or so.
Why aren't you mirroring the binaries? These are vital for people in the future who do not have the time to set up a build environment for software from a decade ago.

I'd also echo the concerns of others about GitHub.

Proper archivists should do for SourceForge what they did for other projects. Archive Team, maybe? Looks like they have a wiki page: http://www.archiveteam.org/index.php?title=SourceForge
I did something for free for my aunt 20 years ago and the experience left us not talking since then. The answer is no.
The second example of Symbol.isConcatSpreadable should assert "z" equality, not "y"
This is impressive. As a player in the Nigerian tech market, it is good to see budding local talents
No, we need a system where different types of trust can be selected. (see my other post)

A PKI system like we have now is one of them, but we need a system where that is not the only available trust. Yes, it will be necessary to educate people about this topic (and never discussing it with the user will only keep them ignorant). Right now we have a system where users are forced to trust various CA, and if someone decides they want to trust something else, that is difficult or impossible.

The problem of WHO to trust for a particular website (that is, every website) is a separate problem which can be solved over time. My point is that we don't even have the tools to let people even being to solve that problem.
But "temporary" is a thing who exists only in theory. In practice its always never or (almost) forever. As soon as a few applications start using this "new" form of UTF-8, some of them may have to keep supporting it forever.

Why not directly going for the pre-2003 UTF-8 encoding ? It would even put a bit of pressure for restoring them and would show that this is the good way. It is also the only way I think to convince people to start implementing it.
You already have the tools to change who you trust. If you are afraid of automatic updates to your trusted domain list then setup a VM to test the updates or use a script to verify when the list changes.
Thank you for a comprehensive answer. Another final question if you find the time. Do you have any Americans on your team?
Much the same experience. They could do with an easier interface if nothing else.
Quick question: How did you find that document? It's not even indexed in Google so far.
> I'm not saying all judges must be atheists

So your saying you don't mind if people are a little bit religious as long has they are not fully devout to the principles of their religion?
huh? No, for DANE it is required to have DNSSEC in place. Also read the last sentence of my previous statement again.
I saw that and was wondering what he was thinking of. I had to double check to make sure the most recent parliament hadn't been up to any shenanigans, but seems like everything is on the up and up politically there. The ISIS situation is scary, but that's a whole other ball of wax.
Not directly, though we collaborate with Americans on open source projects - one of the main contributers to Cyrus is based at CMU (which is where it came from in the first place) and of course we run plenty of other software developed by people all over the place!
Not prying, but maybe its time to offer an olive branch. Everybody changes, and the supply of Aunts is a diminishing graph.
That struck me as well, but I wonder if perhaps he's not really allowed to reject the terms himself?

Critically, by having the people reject the terms he is not going to be labelled a sellout in domestic voters' eyes and thus will retain a chance at an additional political term.

He doesn't really have another option.
For now, Github is not ad-ridden as SourceForge is. Github is monetizing some repositories: https://github.com/pricing
I don't know if they're sustainable, but from my naive point of view, closed-source projects on github pay for the hosting of open-source projects on github.
And be able to communicate well in a shared language - most likely English.
It looks like a very useful project that I will probably start using. Sadly, my usual workflow for gitignores is to grab one from a previous project of mine and adapt, or else Google a big project I know in the language I'm targeting, grab from there, and make a few adjustments. Your process looks much more efficient.

But how did you even make $10 in Bitcoins? I don't even see a donation link or address, much less a place to sign up for a paid plan.

I see a lot of potential, for example, you could expand a premium plan to include other project templates, like maybe travis.yaml, and the various .jshintrc and other ....rc's, perhaps). I'd pay $10/year for that, maybe more depending on how well it was done.

Or perhaps if it's just a side project you're not really interested in expanding.

Also, Bitcoin just realistically, Bitcoin isn't used by a lot of people, even in the developer community. It's great to include it as an add-on, but I'd think if you want to make money, you need to accept USD.
If there's anything we've learned from the last 20 years in security it's that the user is the least fit to decide. They are bad at passwords, they are bad at clicking things in email, they just are not security conscious. "Click here to trust my CA", how's that going to end?
Show HN: Node.js, Quickly run a css selector against a remote page source
Lets be open-minded, and allow religious people to perform their public duties without consciously projecting their religion on everybody else. Read Jimmy Carter on the subject. He was as devout as they come, but understood the separation of his own beliefs from his public trust.
I'm not assuming anything, and I disagree because I think it's a different problem, not the same one. Also, did you read my last sentence?
Why not just say "you're right"
Here is how I did this. I wrote out 10 lines of code, and I intentionally coded an error in it. I asked the applicants to tell me what was wrong with it. One guy got it right, one guy didn't. The guy who didn't get it correct had a 3 page crammed-packed resume. The guy who got it right had a much simpler resume. I think the value is listening to the candidate talk himself through his thought process and how he thinks about problem solving. We hired the guy who got it right, not because he got the test correct, he was a better fit for other reasons. Even the guy who got it wrong had a decent problem solving approach, so based on how he reasoned through it was sound.
That doesn't seem all that related to Bush's Memex.
> Do you have any other suggestions?

Archive.org ?

And weird that nobody suggested the Bitcoin block chain. I don't think binaries are a good fit but source code doesn't require a lot of space. With the current and future block size it will take sometime to make it happen.
Is crowdfunding the new tech bubble? Or just a good old-fashioned junk bond?
Our "cultural fit" was just about: Be a Hacker.

Why did you put "cultural fit" in quotes? Your criterion is just as poorly defined as everyone else's "cultural fit" criteria and, just like theirs, acts as a way to simply exclude people because they're not like you.
Is this an OK question to ask? Should I value firms according to which nationalities they hire?
We don't allow a way to send encrypted email directly, because the intersection between people who wanted it and the people who would trust us with their private keys was too small to be worth it. Instead, we provide standard protocols (IMAP/POP/SMTP) so you can run the crypto software on your own computer and submit and receive through us. This gives you full encryption support.

We're probably similar in security to gmail - they're very good as well - most of the big services are. The main comparison at that level is the unpatched server running in the basement of a business somewhere - or indeed the "roll your own" where it gets updated once every few months if the person running it remembers and isn't on holiday at the time... it's nice having a team and always someone on duty for security.
If they misused the CA for that, there'd be a lot of backlash (cause it'd be detected). Apps would start blacklisting it. Seems like they'd have a better plan than that.
I doubt that will happen anytime soon. Myself and many engineers I know still use the term "SSL" even when we mean TLS (i.e., 1.0+) exclusively, in part because some people don't "know" TLS (but they do know what SSL is).

Old habits die hard, I guess.
I don't like digging or being put into a tunnel, I like the free space and the wind, sorry, no digging for me. So a reason why more people don't dig is that some people just don't like it. At least me?
"Guys" is an exclusive label.
Uh-Oh: Beats Teardown Apparently Used Beats Knockoffs
It seems like too good a coincidence to waste it. If you'd like to grab a coffee some time, send a DM to @phren0logy.
I believe using quotes like he did is shorthand to indicate that you think the term is illegitimate and a bit silly, so you may be in agreement with him.
Nope, HN is written in Arc (which runs on top of Racket) :-p
I don't think we can really trust anyone more than anyone else any more. I think it would be trivial for any three letter agency to insert, blackmail and/or buy employees anywhere they want.
I don't know if Rete is appropriate. Rete optimizes for a large number of rules and a small amount of data. I used to hack Rete based OPS5 a lot, including adding support for multiple data worlds. If you like Common Lisp, then the OPS5 code base is fun to hack.
Regarding binaries, I know these could be useful and I'd like to provide them, but I'm afraid some "not (yet?) very popular mirroring project" can't show how we can trust it regarding binaries. After all, a known site like SF is untrustable, so why would an unknown site would be more?
There are tons of payment gateways. Doku.com being the biggest. This guy is a troll.
Not stoic so much, but my uk wife sliced her hand open on a can of cat food (in the US). 3 inch gash right across her palm. Bleeding. A lot. Wrapped it up in towel and said "we're going to the emergency room, get in the car". She replied "oh no, I don't want to bother them, they might be busy."
We work with a lot of multilingual text, and for "what to know about encodings and character sets" we have a very simple answer to that - a guideline called "use UTF8 or die".

It's not suitable for absolutely everyone (e.g. if you have a lot of Asian text then you may want a different encoding), but for our use case every single deviation causes lot of headache, risks and unneccessary work in fixing garbage data.

In simplistic terms what we mean by this guideline:

* in your app, 100% all human text should be stored UTF8 only, no exceptions. If you need to deal with data in other encodings - other databases, old documents, whatever - make a wrapper/interface that takes some resource ID and returns the data with everything properly converted to UTF8; and has no way (or at least no convenient way) to access the original bytes in another encoding.

* in all persistence layers, store text only as UTF8. If at all possible, don't even provide options to export files in other encodings. If legacy/foreign data stores need another encoding, then in your code never have an API that requires a programmer to pass data in that encoding - the functions "store_document_to_the_mainframe_in_EBCDIC" and "send_cardholder_data_to_that_weird_CC_gateway" should take UTF8 strings only and handle the encodings themselves.

* in all [semi-]public API, treat text as UTF8-only and document that. If your API documentation mentions a text field, state the encoding so that there is no guessing or assuming by anyone.

* in all system configuration, set UTF8 as the default whenever possible. A database server? Make sure that any new databases/tables/text fields will have UTF8 set as the default, so unless someone takes explicit action then user-local-language encodings won't accidentally appear.

* Whoever introduces a single byte of different encoding data is responsible for fixing the resulting mess. This is the key part. Did you write a data input function that passed on data in the user computer default encoding; tested it only on US-ASCII nonenglish symbols; and got a bunch of garbage data stored? You're responsible for finding the relevant entries and fixing them, not only your code. Used a third party library that crashes or loses data when passed non-english unicode symbols? Either fix the library (if it's OS) or rewrite code to use a different one.