skysight-inc/HackerNews huggingface dataset:
This might be an unfair question: Do you see the cost of EV certificates coming down in the future, or is that level of cost actually required due to how involved validation is?

For a lot of SMBs and individuals it is hard to justify additional $150 a EV certificate costs. Plus the loss of convenience that wildcard DV certificates provide (and EV certificates cannot).

I like the concept of EV, but unless I was running a large company with deep pockets or was in a sector where EV is helping (e.g. finance/payments/etc) then I'd just skip it. I'm not even sure it helps mitigate phishing.
Depth Precision Visualized – Nathan Reed's Coding Blog
Why does it need to be prevented exactly? Why is the internet different than anything other situation where people see an opportunity to make money and take advantage of that opportunity? Like buying real estate or wine, or art and so on?

It is trivial anyway to "use" a domain name. Are you further suggesting that someone who is legitimately "using" a domain name (and who is going to decide what use is anyway) then can't sell that domain name? And does that mean they can't sell the business that is attached to that domain name? Or you are going to have some tribunal that looks into the facts of every single case and decides 'ok this is a "real" business the domain can be sold, "no this isn't sorry"'?
I'm not sure how familiar you are with scala if you are equating them in equal 'functional power' to Ruby and Javascript. Have you read Functional Programming in Scala? The fact that the language supports immutable records out of the box, type classes, monadic comprehension all make it much more pleasant to deal with the realities of immutable data.

You can write immutable java, but the language doesn't make it easy to at all. Look at the hilariously bad builder pattern (which is as good as it gets in Java) compared to the right way of doing things in Scala.
If it is not a monopoly, then it is necessary to speculate about what happens if it becomes one. That said, I think that's something we can address as (and if) it comes up.
If you consider Scala functional, I think it wins the popularity contest: used by startups and established companies (Linkedin, Twitter, Meetup, Verizon, Morgan Stanley, Autodesk, HuffPo, etc, etc...) and is not "we use it in a dark corner where nobody cares" and more like "betting the whole farm on it".
>The exchanges are only required to make order information public with a significant delay. However, they sell the real-time order information to a few market players enabling them to engage in the dubious tactics at the expense of other players.

It's easy to see why you view this as unfair.

But it is fair. Anyone can buy the real-time information if they have the capital.

Obviously markets are going to be more friendly towards you the more money you throw at them.

Just like everything else in capitalism, the fairness comes from anyone being able to have money. If you think this is unfair, you're essentially opposing capitalism.
Ask HN: Are you working on a Reddit replacement? What is it?
Interested to see what the HN community is doing in response to the recent reddit events.

Post the name, URL, description, and what you'll copy from reddit, and what you will not.
That's going to be an interesting conversation.

"Mr.Mehta when was your business started?"

"2003".

"And when was the domain in question registered."

".... uh, 1999".

"Are you sure you want to proceed?".
So is the police killing someone on a "nickel ride" like what recently happened in Baltimore. But if there's no enforcement of the laws, or if the regulators disagree with the sentiment of the rest of the population, the notional illegality of such activities is of little practical value.
"Some vendors still thought IPv6 had a broadcast address"

I have never known anyone working with IPv6 for more than a day who doesn't understand that IPv6 does not have a broadcast address. I do not believe any vendor writing a routing stack would fail to understand that. Though, I do agree in early days, they screwed things up. For example, Dell would not route RFC 4193 (FC/7) addresses around 2005. I had to rip out and ship back a dozen of their routers when I realized they weren't going to fix that.

I think you might be onto something about gear though - I've read that Amazon builds their own routers, and routing stack - which means they can't simply deploy a well tested/regressed IPv6 stack, they have to write and test it from scratch. The dark side of doing everything yourself.
BPF is the virtual machine, while that's referring to the high level language described but not named in pcap-filter(7).

Anyway, pfmatch looks extremely cool and might make be bite the bullet and switch our app from libpcap to pfmatch despite the extra luajit dependency. Being able to properly compose multiple separate filters into a packet classification function would be sooo nice to have.
I'm pretty sure we don't claim identity mapping anywhere as an integral key feature; if we do, it's a mistake. We always decoupled the identity mapping layer from the core messaging layer to avoid the Hard Problem of decentralised identity mapping blocking the core protocol, and we haven't even specified it yet (that chapter of the spec is blank).

In terms of whether we've been doing some kind of Evil Disinformation Campaign against XMPP, looking at https://twitter.com/search?q=%40matrixdotorg%20xmpp&src=typd... if anything it seems like we're pretty supportive of XMPP: "@usetalky stanza.io looks lovely.", "@Nyssen11 converse looks pretty. we (or someone) will write an xmpp s2s <--> Matrix bridge soon, i'm sure.", "For sure XMPP is doing cool new stuff too - FMUC, XMPP-FTW, Buddycloud etc." etc etc. We even promote XMPP alongside Matrix: "Metadata privacy & federation with legacy networks are mutex. If you want metadata privacy @GNUnet ftw. For fed, Matrix or XMPP?"

The only valid beef I'm seeing is https://twitter.com/ckoehncke/status/588341851360518144/phot... which missed that XSF had published a Push XEP a few weeks earlier (sorry!), and ".@rikardlinde @davewiner Matrix is pure HTTP & decentralised convo history: no single silo/point of control. Jabber MUCs = single chatserver", which was admittedly ambiguous and misleading thanks to the 160 char limit and I subsequently clarified; the intention was to point out that MUCs = single logical chatserver locked to a single domain (ignoring FMUCs).

In terms of the FAQ - as per our current twitter convo I'm updating it in realtime to incorporate your POV.

In terms of whether we are a Nefarious Corporate Conspiracy: We're in the process currently of splitting out Matrix.org as an independent UK Limited By Guarantee company with not-for-profit statutes of incorporation to act as the neutral guardian of the Matrix standard. I guess this is a bit like how IBM split off the Eclipse brand into being the proper Eclipse Foundation. So yes, from my pov we're not 'branding for a commercial outfit', given 100% of the IP for the project is permissive-licensed opensource and the project is non-profit rather than commercial. Meanwhile, increasing amounts of the Matrix ecosystem are being contributed by the community (like the aforementioned XMPP<->Matrix bridge ;) Anyway, this will all be clearer once we have our separate legal entity - apology accepted for misunderstanding the situation :D
What exactly constitutes "your time"? Is there a legal definition for this that appeared recently?

I had a long-drawn out conversation with Chris DiBona about this very question, and the answer is that it's very very murky, and most of the time -- even in California -- the corps can win.
> UNIX got battle-hardened during its college years

Is that when it finally gave up making shar archives?

For the unitiated: A shar is a "shell archive", or a shell script which (typically) makes heavy use of 'here documents' to do what tarballs do, only they're shell scripts so you have to execute them and then they can potentially execute arbitrary code unless you read through them very closely and actually understand them.

Yes, people actually made these. Yes, people actually ran these. Yes, they still exist on some old archive FTP servers and so on.

It's amazing how clever you can be when you don't think you'll ever have to care about security or The Sufficiently Stupid User (because sufficiently advanced stupidity is indistinguishable from malice).
I was like wait what...Then I saw your comment.

Yup Pretty much same reaction to that suggestion.
What seems to be broken, though, is the question of why that place matters; it seems to be cabal-driven and to some extent corrupted. The results of research should be able to matter purely on their own merit, not because of a tag some committee put on it. Idealistic? Of course, but that doesnt mean that is not worth pursuing.
Isn't that basically the phenomenon that all PR evangelists use to get an idea out?
Well, you can "say" something over a channel but that does not "create" the perception that it is popular. So, this paper describes how things are perceived as popular when they are not really popular in a "numerical" sense.
When Johnny says "everyone" is doing it, what he means is that all of the people he listens too are saying that "everyone" is doing it. In fact, only 2 people are doing it.
Publish a book with an ISBN and make it available on Google Books
I fear many projects seems to take the infrastructure and manpower of large distros for granted these days.
There are a few problems with that.

Exchanges make it difficult to know the current price. They sell fast data feeds to HFT shops allowing them to know about price changes before the rest of the market participants.

Exchanges have tons of order types, not just limit and market orders. There are order types that specifically benefit HFT shops by allowing them to pick off limit and market orders.
If you put in a limit BUY order for $10 and the current price is $9.90. There is a big difference between executing at $10 vs $9.90 on large orders. If a HFT shop is able to push the price up to $10 (there are a few ways to do this), you just lost a lot of money and probably made the HFT a nice paycheck when the price reverts back to $9.90.
Right. So long as you follow sound architectural practices and be careful to not override global selectors, you will achieve most of the benefits of inline styles. https://github.com/postcss/postcss-bem-linter is a godsend.

However:

* Your components will still be spread out among separate files. Button.js, Button.scss. Icon.js, Icon.scss. Just like it doesn't make sense to separate inherently coupled HTML and JS, it doesn't make sense to separate inherently coupled HTML/JS and CSS.

* You have to use two separate programming languages unless your app is simple.

* SASS and LESS can be really problematic. They have ambiguous syntax and are non-standard. There's 9,001 ways to import in LESS. They look like programming languages, but they differ in confusing, bug-prone ways. SASS and LESS's variable resolution are different and confusing. And math is whitespace-sensitive. Yes, whitespace-sensitive math.

* Another build step.

* No easy way to get values statically from CSS files. Instead you have to use comments like "IMPORTANT: keep this value in sync with Button.js!". And if you forget, you will have a difficult-to-debug problem.
I only see part of the source code, but what is there has two pretty big performance blunders (no PureRenderMixin, mutable state).
tables not formatted!!!!!!!
I'm not saying he shouldn't be able maintain ownership of that domain.

Arguably there is value in having someone sane sit on a domain and be willing to sell it for a reasonable price.

Also arguably, domains should never have been available for re-sale at all.
I loved your airplane pilot analogy. The Turbulence Paradox: act not to remove the turbulence, instead slow down to make the flight more enjoyable once again through the turbulence.

Zen for the 21st century.
Yup! I did a research while ago (end of 2014). Scala was by far the most used among the other choices (Clojure,Haskell,F#).
Do you know why Jane Street chose OCaml over Haskell? They have similar performance, right?
Perl has a special "taint" mode (Ruby does, too, I think, but I don't know about the differences or similarties), where any data coming from outside the program - environment variables, network connections, files, etc. - is considered "tainted", i.e. treated as bad, until you validate it using regular expressions (or something along those lines). I have to admit I never tried it, but it sounds like a good idea, assuming it works as advertised, when dealing with potentially malicious input or paranoia.
I am not sure if UK or US law will apply but in Commonwealth countries there is a clause in trademark law called Prior Use.

Basically if you are using an unregistered-trademark which is then later registered you are not considered to be infriging if you have been using this trademark before the trademark was registered.

Cyber squatting laws specifically call out that you need to have obtained the name with ill intent (i.e with intent to ransom it to an already registed trademark holder).

So no, that is not how trademark works, atleast in the codes of law I am familiar with.
Great depression was caused not by deflation, but by previously unleashed inflation (as in "inflated money supply"). Collapse of the bubble is a logical consequence of any bubble. Alternative - ever-increasing inflation was experimented in Weimar Germany, Zimbabwe and few other places. Hard money (Bitcoin or physical scarce collectibles) prevents people from inflating money supply, thus preventing global bubbles and thus preventing subsequent depressions.

Of course, local stock-specific bubbles can still exist, but they are always subject for arbitrage and voluntary exits. Global money bubble is more destructive because use of a certain money is enforced by laws and therefore people cannot easily exit or switch to alternative.
Because, it favours those who have more money. People who can afford a few dollars/pounds, mostly from the western countries, can keep domains booked for years. Others in the developing or under-developed world don't have that luxury... but the internet is a more global/democratic place... or should be.
Interesting notion, the global bully with the big weapons owing you (a nation) a "debt". Which is made by you giving them your money in exchange for IOUs. And you keep rolling it over. Sounds more like tribute.
What Is Data Munging? An Example
that sweet feeling of power to kick and ban other people (and likely to brag about it to their buddies).

Yes: I wrote about that problem here: http://jakeseliger.com/2015/03/16/the-moderator-problem-how-... and there is some HN discussion here: https://news.ycombinator.com/item?id=9217628.

I don't really see a way around these problems: Paying people would be too expensive for sites like Reddit, and "volunteers" suffer from adverse selection.
We added the year and shortened the title. Thanks.
PureRenderMixin and mutable state are still pretty common in React applications, I think it's realistic not to include them.
It looks actually pretty easy to bring up a Meteor.JS application running in a Docker container, as well as a linked MongoDB in another container.
I've often wondered about similar things, but admittedly haven't done any formal analysis.

I suspect it's situation specific: there are probably situations where a model like this would work very well, and others where it would be a terrible idea. I'm also a little wary of government created 'pseudo-markets', as these often become bureaucratic nightmares that cost more to administer than if the government had just done the thing itself. 'Pseudo-markets' are kinda like machine-learning algorithms: they'll optimise towards your success metric, but sometimes in unexpected and undesirable ways (i.e. game the system).

Also, for certain services, you'd need to ensure equity of access (i.e. cover all use cases). Tax returns are a good example. There's some pretty esoteric stuff in tax returns that are only relevant to a handful of people (e.g. reporting franked dividends distributed from closely-held unit trusts via an interposed corporate entity, or whatever). It might never be profitable for a private market to cover this case, meaning the government would have to further 'pseudo-regulate' its 'pseudo-market', offer further subsidies, or cover this use-case itself.

Interestingly, on your second 'failure mode', you could flip it around and view it as a desirable outcome. Sticking with income tax reporting, most reporters have pretty simple tax affairs. They just report their annual income (which the government already knows), maybe claim a deduction or two, and that's it. But because the government must cover every possible use case, people are forced to wade through a 40 page form instead of a 1 page form. There might be more gain to society from doing this:

1) Government offers the fixed subsidy, but makes clear it is only guaranteed for, say, 2 years.
2) After 2 years, offers a lower (or no) fixed subsidy for the 'cherry-pickers' (who will still be profit positive)
3) Reallocate the savings as higher fixed subsidies for the remainder of the market

By iterating this process a few times, the market would naturally segment according to complexity, allowing the government to accurately 'price discriminate' on the basis of complexity. I dunno, I'm just spit-balling here, no clue if this is actually a good or bad idea. What are your thoughts?

Of course, all of this is only possible if the government publishes a 'tax return' API that's easy to use (i.e. does not create high implementation costs for private providers). Even though publishing an API sounds (and, frankly, is) simple, you'd be astounded at how often the government screws this kind of this up (often by contracting out to IBM, Fujitsu and their ilk). Or not publish one at all, even though the potential benefits are blindingly obvious...
How exactly do you define "doing something" with a domain? The Internet is not just the web and email. I own several domains that have no publicly accessible web sites or email servers; to declare that these domain are unused, however, is ludicrous. Do you advocate creating even more bureaucracy on the Internet by forcing domain owners to jump through hoops implementing some official definition of a "proper domain services" to prove to the public that their names are used? Shouldn't simply paying the recurring registration fee be enough?
If you add a lint checker, like jshint, to your build steps those kinds of bugs are found instantly. You can also add these specific style guide checks to your build steps using jscs (https://www.npmjs.com/package/jscs).
> They won't know the difference between a lock and a green bar. I would bet a percentage of users don't even notice if they are browsing an site using SSL or even understand why HTTP without SSL is bad.

I would bet this percentage is much higher than many people here think. Most people have no idea what "http" means, or even what a protocol is or why they would need one, much less URLs, HTTPS, SSL certs, encryption, identity, validation, etc. Many users whom I observe don't understand the URL field. If they want to load http://cnn.com, they type "cnn" into the Google search field and click the first link -- for sites they regularly visit, every time, multiple times per day! Many don't know what a web browser is. [1]

The idea that they will grasp EV certs, and all knowledge required for that it (certs, issuers, identity, encryption, what does encryption have to do with identity, etc etc etc) seems very unlikely.

[1] https://www.youtube.com/watch?v=o4MwTvtyrUQ
> We manage to assess real estate without running into those problems.

We also don't generally use the documented offer standard you suggest for domain names for real property, but on objective features of the property, replacement costs based on those objective features, and application of a depreciation schedule to those features subject to depreciation.
The rest of the world is still continuous.
The article mentions the source code.
Unique Advantages of Most Popular Social Media Platforms
Data Scientist: The Sexiest (And Last?) Job of the 21st Century
Is there an API for this? O/w, obt HN?
Accounting issues with wages are not as important when savings are possible. In today's ever-inflated economy many people have zero savings and a lot of debt. People live from pay cheque to pay cheque. But when savings are enabled by Bitcoin, then wage is merely an addition to the existing balance and its adjustment to the market prices is not so dramatic.
I don't follow what you say here - my understanding has it that spreads have grown tighter since computerizing things (and generally that a tighter spread is more efficient).
Namecheap:

https://www.namecheap.com/support/payment/bitcoin.aspx
I loved shars. It was a carefree time. Nothing to worry about.
A quick puzzle to test your problem solving (confirmation bias)
Isn't Harsh just a mildly-common Indian name like Richard?
That's actually not correct: http://mars.jpl.nasa.gov/MPF/science/clouds.html

They're pretty much all cirrus-equivalents, granted, but they're still water (more precisely, water ice) clouds. That is, unless NASA is misinterpreting them, but seeing as they're, like, the end-all-be-all experts on Martian climate, I reckon that's unlikely.

Even barring that, however, dust clouds would also cause issues for celestial navigation.
At least, approximately...
right but also, one thing to remember is, an old domainname; depends on the extension, but some of them were not cheap as in these days. maybe it was my inexperience, but I have some domains I paid 50$ for back in the days/year. so, in 10 years time you get to the point of: should I let it go, or am I already too deep in? But letting it go for $100, well, just would be a big loss. In that regard, letting it go for say 100-200, for an old domain, is just breaking even or even making a loss. though it's likely not to be perceived like that. some of us are just too deep in, and just would like to break even..
Even despite Reddit's troubles, you probably do not want to make a Reddit clone as a business model to capitalize if you don't have one already. One or the reasons for the protest is bad tools.
In case anyone was confused and thought you had a Wildcard EV certificate for subdomains/customer-specific logins, that (still) isn't possible, what you probably meant was that you have a regular wildcard certificate for the subdomains in addition to the EV certificate for your primary domain.
Newbie here. With just two or three flights per month your're exceeding the $1,500 prize. How can this be profitable?
My guess: Because it's Monty Python. They weren't around in the 1930s, but they are still funny today.
I'm on nightly, and popup is blank for me. Have some extensions though.
What some HFT traders are doing is economically equivalent to front-running, but is not legally front running since they are not front running the orders of their own clients. All of this is explained in the article, so if you disagree, it would make more sense to read it, find the parts you disagree with, and argue against them, rather than skim the article and then argue with our collective rehashing of the article's argument.
Rails has ActiveSupport::SafeBuffer for doing XSS protection, but ruby doesn't track external strings as dirty like that.
This /r/OutOfTheLoop thread is the go-to recap at the moment:

https://www.reddit.com/r/OutOfTheLoop/comments/3bxduw/why_wa...
I wouldn't trust elm-lang articles. They are very dishonest and misleading. Write an app with 10 nested sets of tabs to see why - you will quickly realize what I'm saying after going through the documentation and talking to the elm people on irc in your attempt.
Thanks, changed from http://arxiv.org/pdf/1507.00604v1.pdf.