skysight-inc/HackerNews huggingface dataset:
'“Considered Harmful” Essays Considered Harmful' actually exists: http://meyerweb.com/eric/comment/chech.html
From my experience the majority view is what I stated- now that their rights are blessed, few are interested in standing up on principle for the rights of others. It's no different from me claiming your talking about libertarians is "those people" talk.

It's not "meaningless" to want equal treatment (or even special treatment, technically). But like I said, it reinforces government as the giver of rights and that's the wrong direction.
Scientists create artifical neuron capable of mimicking function of human cells
I've observed that the SJW hive think has skyrocketed over the last year on HN. I used to be able to predict ridicule in the comments, but instead I find pandering and PC nonsense. It's pretty depressing overall.
Yes. Emacs org-mode.
I am relieved that this is the top post on this thread.

I feel like this is another case statement in the giant switch that is government legislation and that the god class that is government could do with factoring out the freedom for individuals to voluntarily associate.
I particularly don't like how many will insist on using the original Japanese term as if it was untranslatable, inapplicable to the outside world.
Crucial Conversations is good.
But historically, two income households have not been common. This is a recent (past two generations) turn of events. I agree that a marriage-based tax break may not have been sensible, although now with gay marriage legal nationwide, as long as the government also recognizes civil unions, it may be ok and solve the part of the problem you note.
Mind if I do this to your house? :)
This is the biggest problem for many kids. The system assumes parents are willing to pay a "fair share", when many are absolutely not, for any number of reasons. Those kids are penalized and it is completely unfair.
If only NCC/OCAP would audit Windows.
I cannot agree with you enough.
I must add that, personally i feel more comfortable discussing problems with total strangers - this avoids the social ramifications part.
do hope someone picks this idea up seriously.
I figured the "we" after FastMail said that I work here. Quite a lot of our backend source is open too (particularly the Cyrus IMAP server, which makes up the bulk of my work now that I have people with a more dedicated ops role for day-to-day tasks).

We encrypt everything to disk, and everything on the wire that is practical (connecting to other providers still falls back to plaintext if they don't support STARTTLS, because encrypted-only isn't practical yet)

But client connections are ONLY secured now, we don't allow any plaintext channels where you could accidentally send your password.

https://www.fastmail.com/help/technical/ssltlsstarttls.html

So you're stuck trusting us, but only us. The only sane alternative that I can see is to run your own server, on your own hardware, preferably hosted inside your own home for maximum legal protection. Of course, unless you really know your stuff then your data could well be at greater risk from both legal and illegal intercept.

(and that's nice if you're providing it just for yourself - as soon as it's for anyone else, even just family, you become on-call tech support)

Bron.
He's not a UNIX co-author at all, he joined Bell Labs in 1980.
There recently was a post about Tutanota on Full Disclosure:
http://seclists.org/fulldisclosure/2015/Jun/58

What I find even more worrying than the issue itself is the reaction. It indicates that the developers lack basic crypto skills and that this service was never reviewed by anyone with crypto knowledge.
You are absolutely right. I usually encourage people to get involved in improving the (XMPP) situation.

Just last week I submitted a XEP for unique stanza IDs to the XSF [1], which will most likely be the base for IDs in MAM and other protocols. I guess that's the light reading you want. :)

And yes, Carbons (XEP-280), in it's current state, also suck. I'm working on a replacement XEP called "Message Routing 2.0 " (MR2): http://geekplace.eu/xeps/xep-mr2/xep-mr2.html It's in an early draft state, but I think it addresses most, if not all, issues with carbons, improving the multi-device situation in XMPP somewhat (I don't care if it's MR2 or an improved version of carbons that makes the race).

> see how ridiculously difficult this makes the basic idea of "all clients should see the same picture"
Being involved in XMPP a bit, I get quite a few requests on how to implement WhatsApp/Hangouts like groupchats. And while the basic idea is quite simple, implementing it is a non-trivial task. But it can certainly be done. But we need more motivated developers and specification designers to get it done. While the XMPP community is just great, the count of activley involved people is quite small.

1: http://mail.jabber.org/pipermail/standards/2015-June/029865....
According to https://ssl.masterpasswordapp.com/algorithm.html, Scrypt is used for key derivation. Scrypt is supposed to be very expensive to brute-force.

Quote:

The master key is a 64-byte secret key generated by performing expensive key derivation using the user's master password salted by their full name. It represents the user's global secret.

The purpose of this process is to deter any attempts at brute-forcing a user's master password from a known site password. The key derivation is done using the scrypt algorithm, which guarantees that the process sufficiently time- and resource-consuming to make brute-forcing an infeasible attack.

The key derivation is salted by the user's full name to prevent the generation of rainbow tables on the algorithm. This salt is not secret, and the user's full name is chosen because it is an input of sufficiently high entropy while being (hopefully) impossible to forget by the user
Grand parent comment is talking about one man many women marriages as having higher rates of abuse, so your quibble here seems out of place.

But you're also wrong! Polygamy refers to any marriage that has more than two partners, gender identity is irrelevant.

One man many women is polygynyz one woman many men is polyandry. Polyamory is multiple partners.
@ddailey has some amazing SVG examples, I highly recommend him:

https://ello.co/ddailey

There's @ellotech: https://ello.co/ellotech

And @ellowrites: https://ello.co/ellowrites

Search can turn up people writing on topics of interest, say:

https://ello.co/search?terms=webdesign
https://ello.co/search?terms=python (about 90 posts in 9 months)

Or you can enjoy the art.
Nice! But in my opinion better help archiveteam with their efforts!
From that document:

3.1.2 Need for Names to Be Meaningful

The Issuing CA shall ensure that the subject name listed in all certificates has a reasonable association with the
authenticated information of the subscriber.

The hypocrites can't even manage that with their own 'RXC' CA name.
They commented on this on Reddit: http://www.reddit.com/r/fulldisclosure/comments/3anfjk/tutan...

"This is not a vulnerability in Tutanota. We have built Tutanota with multiple layers of protection for our users. We currently use TLS and DANE to protect authentication and data integrity and (only tunneled) RSA-OAEP and AES-CBC to provide confidentiality. We have always communicated this transparently, it is nothing new. Neither the confidentiality nor the integrity of our users' data has been at risk.
However, we know that the implementation is not perfect regarding this detail. That is why we are going to implement the following features as soon as possible:
- Signatures/MAC
- 2-factor authentication
- Algorithms resistant to attacks of quantum computers
- Simple verification of downloaded Tutanota apps
Regarding the described issue, we know of two possible attacks on AES-CBC. Neither of them is feasible against Tutanota users:
- Bit flipping: You need access to the plain text email and you have to be the MITM. - -Plaintexts are available at the sender and recipient only. We use secure TLS algorithms and DANE to protect against MITM.
- Padding oracle: There is no padding oracle in Tutanota.
Tl;dr
There is no known vulnerability in Tutanota. Security is the heart of Tutanota, and we will fix vulnerabilities immediately."
AOL: http://techcrunch.com/2008/03/13/aol-buys-bebo-for-750-milli...
That actually makes me a little envious. :)

I only got the job at a point where i was already very fluent in english, and got into dev because i had enough learning time to learn programming skills to help the translations.

As for your language skills, does that mean you live in japan, have a business selling things from japan, but aren't fully fluent?

(Also, as a subscriber, i adore the service and hope you'll be doing it for some time to come. :D)
I'm 20 for a few more months. I've been working in startups for the last 2 and a bit years. I moved to London and I'm exaggerating slightly, but it seems as if work is all I do sometimes.
Cool idea! Reminds me of Passcode (https://github.com/mdznr/iOS-Passcode), which follows a similar model.
Genuine questions - I do not know as much as I should about this stuff:

How do you send encrypted mail with Fast Mail?

How is the following different from how Gmail (for example) does it?
https://www.fastmail.com/help/ourservice/security.html
I wonder if the levels of elements in tap water around the world would explain some cultural differences.

It’s just hard to find causation here, while correlation is simple to prove
That's being worked on.

https://ello.co/cacheflowe/post/VCub0RNsU-EkEzPd4dKmpQ
I always recommend people to take out the hard drive before sending it in. This has caused some small issues, but most stores don't seem to mind as long as you are very explicit about telling them.
I believe Student Finance ask whether or not you're financially dependent/ living with your parents, so I'd guess not.
I'm glad someone noticed, and at the same time it's a shame it took a month before the news actually came out.

I think this demonstrates 2 very major problems with SSL Certificates we have today:

1. Nobody checks which root certificates are currently trusted on your machine(s).

2. Our software vendors can push new Root Certificates in automated updates without anyone knowing about it.

More content on this rant: https://ma.ttias.be/the-broken-state-of-trust-in-root-certif...
Why?

Theres a open bug in the TLS issues for the last 1 year.

It contains a buffer exploit in the SupplementalData function.

---------------------

Supple Mental Data...

The literal definition of this phrase is: Enough mental data

and thats where the exploit hides. Coincidence?

No... theres so many distractions [data] out there that this exploit can just sit there in the open.

And thats the literal instance of the phrase, "supple mental data to hide an exploit"

Another good example is when you have 100 commits per day, from 50 developers in 25 countries, like on the OpenSSL project. Who can security-check all those commits? It's also logistically impossible to verify all of them are not NSA.

An even better one is a SSH client supporting 100 protocols, everything from ancient VTxx to un-tested 2016 tls heartbeat code, I wonder which line in the 32,000 contains the exploit or crypto flaw?

And another example is how many downvotes my posts on TLS bugs have gotten :D

----------------------

TLS has already had 2 show stopping bugs, they were beginner crypto mistakes like reusing nonce (or null nonce)

or were they?

also Heartbleed and LogJam

its also being purposely mislabeled (?) as https

theres no reason to run all of the worlds https and ssh traffic on this.

----------------------

moar? Global r00t continues: http://8ch.net/g/res/2200.html
You're absolutely right, and situation is much worse actually. Some time ago another “feature” was introduced — “key pinning”, for some reason it's compared to standard ssh client behaviour (explicit key for given address). But it's nothing similar actually. If MITM have access to any of root certificates installed on your device then he/she could create “valid” certificates that won't raise any warnings in the browser.

There is some addon (if I remember correctly) for Firefox that binds specific key to specific domain and raises warning if certificate changes.
Google is the web's policeman, judge, jury and executioner. You have no right of appeal. Kafka would be proud....

#DontBeEvil
I think you may be referring to Certificate Patrol (https://addons.mozilla.org/en-US/firefox/addon/certificate-p...)
Probably just a personal preference, but I must say this looks a lot better than the Fastmail interface.

And it's not US based either which is another plus.
I wipe before AND after, if I have to hand the computer in for repairs. :)
The original lenders were in so deep they'd have crashed the French and German economies, and taken the rest of the EU with them, if not bailed out. But the politicians don't like talking about this as a northern European bank bailout, preferring to blame the Greeks.

The Greeks have issues, just like a lot of homeowners got in too deep, but if your bank, or your banking sector can't deal with bankruptcies then its not really the bankrupts fault, They took the deal they were offered with interest on one side balanced against risk on the other.
SJW represent :)

I know people that don't read HN because it's too virulently sexist, so having 4chan see it as too SJW is interesting.

Will we end up with two "social justice" realities, like we have with vaccination, creationism/evolution and climate change, where it's entirely possible to spend your entire browsing time on sites that agree with your opinions on everything?
Sell your expertise as an integration/support engineer to companies who want to use your project but don't want to dedicate the internal staff time to become experts on same.

Every company that emails you asking you for help is a sales lead. "I'm happy to implement/configure this for you. I charge $X per hour, and what you're asking for is about Y hours of labor." To the client, X*Y is often cheaper than the opportunity cost of pulling an engineer away from other work. Also, don't be afraid to make X >> $100 if nobody else offers the same expertise.

You can do as much of this as you want, without changing anything about how the software is licensed or packaged.
I think you're trying to make a joke, but AT&T's Bell Labs was one of the greatest centers of innovation in engineering and applied mathematics of the 20th century. The output was remarkable.
Great attitude! Making these phone calls is like building up a muscle. It will become easier, I promise. And I think you'll be surprised at how pleasant many of them will be. My best to you.
Write characterization tests for modules, see what inputs produce which outputs. Then you have the start of unit tests.

Programming with unit tests really helps. And it points out where certain parts are too entangled and bound to implementation.
I guess I'm confused about your stance. What is your suggestion? Stay on SSL 3 because TLS 1.0 and TLS 1.1 have issues?

Are there any known issues with TLS 1.2? I'm not aware of any.
http://www.geekwire.com/2014/heres-startup-dumped-amazon-web...
I confess my ignorance regarding archive.org's various collections. There seem to be a lot of them, which one are you referring to?
The answer is yes, as someone does this already! See:

http://www.theatlantic.com/health/archive/2014/02/up-for-pol...
We know that telling people to just get over it doesn't work. That's why we provide short courses of carefully planned therapy.

These two sentences seem to contradict each other - the short courses of planned therapy are basically a therapist saying "get over it" and providing opportunities to ease into getting over it.

And in this particular case, I can state confidently that telling people to just get over it does work. I've done it with a number of people, mostly successfully. At first they think approaching women is just one of my firangi powers and completely impossible for a desi. Then they try it themselves and discover it works better for them than for me.

If you are in this situation, go to a pickup artist, red pill or other male self improvement subreddit and follow the FAQ. (Do NOT internalize the misogyny - that stuff is toxic.) Unless you are completely hideous in a manner that can't be fixed by lifting and eating right (read: facial disfigurement, muscular dystrophy) there is a simple program to follow to solve your problems.
The polynomials are an end result of thousands of complex calculations. For more details, see http://ipnpr.jpl.nasa.gov/progress_report/42-196/196C.pdf . Many effects, including general relativity and the gravitational perturbations of the planets and several hundred asteroids, were included.
Definitely. And if you want to help out visit [1]. There’s options to download binaries[2] as well as source code[3] from SourceForge.

[1]: http://archiveteam.org/index.php?title=SourceForge

[2]: https://github.com/ArchiveTeam/sourceforge-grab

[3]: https://github.com/ArchiveTeam/sourceforge-grab-rsync
Joel test: Do new candidates write code during their interview?
At first glance, I think it makes sense to ask candidates to write code. Not on paper, of course, but by using a real compiler/scripting engine. On the other hand, it may not necessarily be that much of a good test. Very often problems that may initially look insurmountable -- real-life problems -- just need to be put at rest for a while, until new inspiration comes along. At that point, the problem may even become trivial to solve. Joel's test could of course revolve around simplistic fizzbuzz questions. This type of questions will, however, not say that much about a candidate's real abilities. How to set up a code writing test that will accurately measure programming skills?
How about setting up a company in a country where you can?

You could set up a UK company, for example, and accept payments through Stripe and Paypal in name of the company. The company can then pay you a salary/dividends/etc.
Show HN: New app for searching Ruby gems
Related question of programmers.se: http://programmers.stackexchange.com/q/6395/436

> What tools and techniques do you use for exploring and learning an unknown code base?
> Why do so many rational people and businesses make irrational decisions to sell the house then?

Well a decision like this doesn't have one dimension. For instance, some people in their 60's see that they don't need a big house anymore and could use the extra money on their retirement plans. The tricky thing about houses is that they serve a purposes while can be used as an investment tool.

> As the house and underlying materials get older, maintenance and replacement costs go up, so eternal appreciation is questionable.

True, but in many cases what changes the value is not the house itself but the land where it is located. I agree with other commenter though, this should be a evaluated in a case by case fashion, and my over-simplification was just for discussion's sake.

> I understand the long-term statistics are on your side, I'm just trying to understand the rationality of microeconomics behind it.

And you are right, in the short term it doesn't makes sense because it assumes you'd pay with cash and there are better tool for investment. But if you need a place to live it might make sense to buy a house under certain conditions (you plan to stay in the area for a long time, the economy is not under a bubble, etc.)
I definitely support this sentiment w/r/t the single threaded mindset of node and their async all the things approach. The only question with Go is if we guarantee sync libs, then where is the good async example code? I agree libraries should be synchronous, but does it really hurt to not have some best practices "how to do it async" in the docs? or should it be... in the code?

Kind of a meta question, but an interesting one.
I think you are having it the wrong way around.

Music becomes meaningful in the listeners mind, and the things that make it meaningful is both that it's formulaic (structure) and whatever the performer instills in the listenter.
I have a little over 1000 stars (1044 at time of post) and have made $10 in Bitcoin (Which is worth less than $10 now). That being said, my project is extremely-side-projecty[1].

Others have discussed busies models, so it should be a simple calculation of how much you can charge for a model vs how much it will cost you to run your business and if you can live with the reminder after taxes etc... then I would say do it.

[1] - https://github.com/joeblau/gitignore.io
What alternative do you have in mind?
It's not like they'd take a hit. But that's not the point - the investors leveraging themselves into the millions of the basis of fractional % improvements/decrements care very much about any possible, natural contraction you might expect from a German mark holding very high value.
Douglas Crockford has an interesting video on why CA system is broken and how it can be fixed in his recent "upgrading the web" talk at: https://angularu.com/VideoSession/2015sf/upgrading-the-web

Essentially he's proposing side-loading a new application under a custom url scheme so that the browsers will launch a helper app that's used to handle web applications with the following url format:

web: publickey @ ipaddress / capability

The url contains servers ECC521 public key as part of the url so that it gets around the CA System and clients can just encrypt requests with the servers published public key directly.

He's planning on developing the helper app that's based on a sand-boxed node.js and QT application which just uses a TCP session to communicate with the server.
> It would be more accurate to say "in a healthy, growing economy, the value of a house climbs faster than inflation."

I totally agreed, that's what I meant by normally but you are right, it might be not normal at all.
Or, like a lot of books, most of the stories were about rich men who had things others didn't. That part isn't glossed over at all. But that's just about the Bible stories. If you're talking about my comments on early humans, I think it's likely that sharing partners was more common.
Yes, there's a standard Japanese test which has levels 1 to 5, called JLPT. 1 is the highest and 5 lowest, I was able to pass level 2. It's sort of exponential though, you need to know twice as much for each next level basically.
Isn't this argument along the same lines of why explore space while people are starving on earth? There are 7 billion people on the planet.

We all shouldn't simply sit by idling until all the basic problems are fixed. Solving the "basic necessities" problem might be more economic related or come down to creating technology to create cheap, clean energy, for example.
I think he misspelled MAXIMUM OCD
Honest is that if all the source code that is compiled is available as open source and a binary with the same signature can be built using that code then the chances that the code acts against your interests is much less than binary blob that you can not vet... etc.
I seem to recall that Python not only didn't (doesn't?) have block scope, it tended (tends?) to produce a completely, blithely cryptic error message when the programmer assumes that it does have proper block scope and writes a program that fails as a result. Discovering that was memorable.
The European GSM standard for mobile telephones worked tremendously well. It enabled innovation on the hardware side and kept prices low because operators could not lock customers into their networks by technical limitations.

15 years ago the USA was a mobile backwater [1] compared to Europe and this was thanks to GSM, a standard created by committees and enforced by governments.

That's not the typical example of such a standard, but it shows that it's possible to do it right.

[1] When it comes to mobile plan prices, it still is I guess...