skysight-inc/HackerNews huggingface dataset:
Not true, I rode an UberX without a TCP sticker. That's why he had to get the temporary license.
That's the reason they're careful about it.

Presumably, they want to it in ways that are limited, reasonable and predictable so that people can have open discussions without worry. This is obviously a good goal, but it's the sort of thing that can easily get swamped in implementation details.
Show HN: DuskJS – enable your single page apps for offline use
I'm perfectly aware of your talk, I even once linked to it on this very site (https://news.ycombinator.com/item?id=8850229).

And I have no reasons whatsoever to think ekr could be an NSA mole...
By subpenaing Uber records and fining them for allowing pick ups at the airport.
if someone leaves the NSA because of that, they are the exception i think. but point taken, but then how do trust someone who worked for the NSA, despite them saying they disagree?
I would just take the Parking Spot shuttle to the one near the In-N-Out and hail an UberX from there. Tip the driver and it's perfectly fine.
I'm not sure it is either, but as far as I'm concerned when a sentence is over it's over, and as a society we ought to give ex-cons a chance to prove they can become upstanding citizens.
IO is by-definition mutation.
what are the major differences between this and paper.js?
> when Ann is yelling stuff Bob can put his fingers in his ears, but can't cover Ann's mouth nor Catalina's ears

I really really wish more people would get this. Too many people in Bob's position try to go beyond just coving their own ears. And that extends beyond Reddit.
MIPS goes to Pluto
People need to be careful about casting these kinds of aspersions. Eric Rescorla is first and foremost one of the longest-serving volunteers on the IETF TLS working group (also: the author of ssldump, which has saved my bacon on numerous occasions). He was the natural point of contact for anyone, at any large organization, looking to amend TLS with a custom extension.

His "involvement" with extended-random, so far as we know, is that someone in the Federal Government told him "here is a sketch of something we need to deploy TLS within the US Federal Government" (so far as I've been able to find, nobody has ever recommended that general-purpose implementations should adopt extended-random).

Moreover, if you look at the mailing list at the time, you'll see tens of other TLS standards people looking at extended-random and OpaquePRF, shrugging, and saying "this looks whatever ok fine". Are they all damaged goods? I'm sure there's more than one person who voted this story up who thinks so. That's an especially easy position to take if you're an anonymous rando who hasn't donated a single hour to the IETF.

It is only in the wake of BULLRUN --- which generated enough circumstantial evidence to turn the far-fetched story about Dual_EC into something plausible --- that any crypto person looks at big random blobs with skepticism. Until about 4 years ago, for most professionals, "more random" meant "more secure".

I think this is a recklessly, negligently written abuse of "Ask HN". I flagged it, and I'd ask that others join me. Thank you.
Well to be fair, Google has a completely different ad model, so they don't need all that cruft on the search page. Instead they cruftify the search results page with ads. At least they're just text ads so the speed is good.
Yup, that one. I planned on simply filtering a pandas dataframe using the request.args that are passed in. The javascript components can be used directly, but I wrote the python wrappers as a convenience for really simple dataframes.
If your trade is building things and you have nothing to show for it, then it's probably a good idea to have at least one thing you can point to.

But trying pin and dismiss the intention behind someone's open source project would be uncalled for, wouldn't it.
Nope. You're staking out a position that's counter-intuitive, so you're the one who has to get the data ball rolling.
Brian Smith, Eric Rescorla, Julien Vehent... all of these individuals have dragged their feet on certain security/privacy issues in the past in ways that could have benefited intelligence agencies, particularly pre-Snowden when scrutiny was arguably far lower. They've also all done pretty positive things at one point or another: there's some nuance there.

I would encourage anyone with time/interest in these issues to get to know these people personally if possible and to think critically about their pre-Snowden attitudes toward engineering choices related to privacy/security as reflected in their code contributions or policy decisions, rather than simply wielding pitchforks..
the same really. I don't think anyone will know for sure. The poor guy might just have not caught the issues back then. Or maybe it was malicious and still is.

It's hard to say. In these cases, the wisest option is "innocent until proved guilty". False positives are worse than false negatives.
I don't know where you are, but here LG G3, Motorola X2, Sony Xperia Z3 Compact all cost about the same as an iPod Touch, and I'd say all of those are fairly high-end.
Uber is now legal in Mexico City
You want to tell a man that he can't spend all of his money to hire the best lawyers he can afford to try to defend his freedom?

As for being able to come up with some "well-thought-out legislation", maybe you don't live in the same world as me, but the 20th century is strewn with the folly of those who think they can engineer society. I don't understand why so many of us are eager to repeat their mistakes.
That's because spam is an attack on the service. More like DDoS traffic than commentary. It's a matter of operating the site, not policing the ideas therein.

"Hate speech", on the other hand, is about voicing particular modern taboos. It's inherently politicized and controversial. Banning it site-wide would be little more than moralistic.
Developers Are in the UX Business
This is a pretty good idea. A friend of mine ran a startup in downtown SF for a while, which had some extra desk space in a nice office. They rented out desks to people who wanted a space to co-work. It went pretty well, AFAIK, and I bet there's a market segment in matching workers with workspaces, especially if your app handles all the brokering, screening, reviewing, and payments.
This webrtc local network IP leak definitely looks like a "bug" that was inserted...
I'm scared to participate this witchhunt / blacklist! Obama's America!
You mean Weyl _fermions_. Weyl fermions obey the Weyl equation, and Majorana fermions the Majorana equation. Majorana fermions are their own anti-particles, while Weyl fermions are not. They are cousins of the Dirac equation (think about how a Dirac point and a Weyl point are related). There is still some debate about whether neutrinos are Weyl or Majorana fermions.
Once you use it, you'll be amazed at how behind the times Reddit is. The main improvement is loading all the images on one page, rather than needing to click and read each individually. RES has had this feature for years, it blows my mind Reddit hasn't made their feature set default for the site. Besides its impact on bandwidth, its such an obvious improvement to UI/UX.
ahh, the hartford... where opening your mouth might get you punched.
I do not believe that you actually believe EKR is an NSA plant, Mr. Kamp.

I'm familiar with your writing and believe you could produce any number of valid, incisive critiques of the IETF TLS standards process (I'm no fan of it myself).

That being the case, you might want to be wary that you're unintentionally lending your name to a whispering campaign. The question of whether TLS is inept is orthogonal to the question of EKR's motives. Nobody involved in the IETF TLS effort during OpaquePRF did an especially great job of honing TLS into a coherent and secure transport protocol, but many of them worked very hard and in good faith to try.
If Facebook kept its original design it could be argued they wouldn't be where they are now. Most people don't notice how much Facebook changed its UI over the years because the changes have been gradual. If Facebook as a site had not evolved, there is chance that they wouldn't have survived. Reddit has hardly seen any update in its appearances and I believe within 5 years it will be at risk of losing its user base if it does not evolve its front-end to make the slight improvements that are so obviously overdue (looking at you, Reddit Enhancement Suite).
I'm not sure we've established that. If reddit is stricter than the law in banning cyber harassment and some non-consensual photographs, they aren't much stricter. There are laws against those things in California.
Considering the philosophy of Python, how likely is it that this idea of return/parameter independence be introduced into the language (via a PEP or whatnot)?
Basing decisions only on past associations is something to be avoided, but that this particular case is not just about the past: much of the complaint is about the current issue involving the stonewalling that you mentioned. The past associations become relevant when they directly affect a current situation.
The Princeton group's has a different title, and was posted March 9 (I downloaded it about a month later so pulled it off my hard drive when I saw this comment)

http://arxiv.org/abs/1503.02630v1
Feds bust through huge Tor-hidden child porn site using questionable malware
I should've heeded your warning. Holy hell.
> the tech community has already legitimized social shaming as a method for getting people out of jobs cf. Brendan Eich

We shouldn't treat dumb shit like that as any kind of binding precedent. Just because the "tech community" has gone on silly witch hunts before doesn't justify any and all future witch hunts.
Can you point to a specific comment?

There is one where he is called a religious nut, but that seems as bad as it gets. I don't see any problem.

It isn't useful presenting hypothetical situations. If there is a problem on /r/politics then point to it.
BURN HIM. HE'S A WITCH.
PSVita and the package installer on 3.xxFW by Xmaxkatsu
Both Lua and LuaJit.

https://github.com/LuaDist/lua

https://github.com/LuaDist/luajit
Yes. Trying to use brew on OSX, a lot of broken links now...
Words may hurt. No one denied this. Saying words killed because of the actions a person took after being hurt is incredibly disingenuous. Only the person who took the action is responsible.
So is Uber less expensive than the taxi 17usd? Or just polite about it? Or coming in from out of the city to get you ?

I don't get why 17 bucks to an uber driver is worse or better than 17 to taxi? Uber has to wait for their next to surely ?
SourceForge Site Offline – Multiple Repos Down
GPUs have evolved with about the same pacing. Nvidia's Kepler architecture has a vector length of 192 (single prec.) per core and up to 15 of these cores on one chip.

The question really is, do you optimize the chip for heavily data parallel problems, saving overhead on schedulers and having a very wide memory bus, or do you optimize for single threaded performance of independent threads and give it some data parallelism (Xeon). As a programmer, when you're actually dealing with data parallel programs, doing so efficiently on a GPU is actually quite a bit easier since you have one less level of parallelism to deal with.
There's no incentive for them to do this though. Cable TV uses a broadcast model, so it's possible that ads on subscription channels is a profit-maximizing strategy. But YouTube users have independent streams of video. If some users want to pay nothing and see ads, while others will pay a little for fewer ads, and still others will pay full freight for no ads, then that's a profit-maximizing strategy and it will happen.
His work at Mozilla is in the code base. Can you find anyplace where he has specifically weakened the crypto for his masters at the NSA? Or are you assuming that he has sprinkled evil magic fairy dust so the NSA can subvert any Mozilla code with a simple spell and unicorn blood?
I read through the discussion you listed. Maybe my NSA paranoia settings aren't set to ultra supermax high but most of the relevant discussion on that thread were about
the nitty gritty about how WebRTC works (that part was interesting BTW), not covering a black ops conspiracy for the NSA.
Yes. IIRC it was Henry Spencer who made this analogy:

If you think about the airship, it's the ship mental model transferred into the air. It stays aloft with buoyancy and needs a vast hull. In airships they had signaling devices from the wheelhouse to the engineers working on the engines, to set the engine speed. Large crews, cabins, dining space, everything.

Then came the airplane and demolished all that. It was small and lean - and it was fast and required far less infrastructure or crew. Air was a different medium than water and it required a different paradigm. There was no space for dining and the flights didn't last for days anyway.

It can be argued that the Space Shuttle suffers from airship syndrome: it tries to be like an airplane with a cockpit, wings, landing gear, payload bay, carrying big engines in the back.

The Soyuz is just a capsule. Because weight goes above all else in space launch, when your payload is about 2% of total launch mass. And the simplicity is for safety. If all guidance fails, it can go to a spinning mode that still enables a safe re-entry.

In a sense, the earlier Vostok and Voskhod spacecraft are even more extreme embodiments of the lean capsule philosophy, as their re-entry vehicles are just balls with an offset center of gravity. AFAIK they could re-enter with any attitude and always turn up right. IIRC most other capsules have at least two stable modes, and there is some care needed that the wrong one is not used.

The same tight focus and lean principle can be seen in many other vehicles. Take a look at the A-4 Skyhawk or F-16.

The Space Shuttle had some extraordinary capabilities, but it was so large and complex that it took a large amount of the budget, just for launching humans to space. There couldn't be much human launcher development while the Space Shuttle was flying. Imagine you're renting a castle - hard to buy a house when all your money goes to rent...
>" A mix of random chance and physical laws happened to create the right environment for hydrogen and oxygen and carbon and nitrogen to exist in the same place at stable temperatures for a couple billion years, and we got life."

That sentence just skipped over the most important part of the whole question! :)
A network where the users are in control of what they see and hear. A ... user net of some sort. You could probably call it usenet. Yeah, that has a nice ring to it.
Ha, I heard of this but never actually saw it. Catchy.
> I think this is a recklessly, negligently written abuse of "Ask HN". I flagged it, and I'd ask that others join me. Thank you.

Agreed. It's a thinly veiled, unsubstantiated, accusation shamelessly masked as a question. Easiest flag ever.
Fair enough, but you know you are !@#$ing up your software development when you have absolutely no mobile presence you can control or make ad revenue off of.

Reddit has been stuck in a development black hole for years. If they are pumping out new features, they certainly aren't features that user's can notice or appreciate. You can get away with this neglect for awhile, but too much of it and your platform will stagnant.

Features like better content blocking at the user level are definitely more difficult than UI/UX, but they are also necessary for Reddit to reach the next level.

Honestly, rather than pursue advertising, if they got their !@#$ together to find new content streams, they could easily bring in lots of cash. They are stuck in a mindset that only their existing feature sets should be the ones that exist. Contrast that with Facebook who made many bold additions to their platforms over the years (news feed, chat). There are ways of doing this without becoming Digg. (The answer is by not removing existing functionality, but by adding to it.)
I'm not interested in individual employees but to my ear the push inside Mozilla to deprecate HTTP in Firefox sounds like it could be part of an overarching NSA agenda to make web-scale traffic analysis far easier by reducing the web's decentralized nature. Not to mention it would make the web less green since more CPU would be needed to push all those extra bytes.
Here's "An ALGOL 60 compiler in ALGOL 60 : text of the MC-compiler for the EL-X8" http://oai.cwi.nl/oai/asset/13069/13069A.pdf (starting at page 29 in the PDF), with context at https://repository.cwi.nl/noauth/search/fullrecord.php?publn... .
Oh, yes, but it's not a vector format, which means you can't make high quality vector drawings that the user can export with it.
Fair enough. I actually, later, added a dependency injection example as well. It just requires some extra configuration.
that applies to any comment section. foxnews, cnn, youtube. any place with that much attention and low moderation fills with shit.
>Anything that harasses, bullies, or abuses an individual or group of people

This is incredibly ambiguous. I think it is important to specify what exactly harassment isn't, and explicitly permit that.

Most people claiming 'harassment' are simply using it as a tool to silence and persecute people who dare to hold opinions that differ from their own. For example, the Twitter harassment trial that just finished yesterday in Toronto. [1] Merely saying that one 'feels harassed' should not count for anything.

Furthermore there is a problem with labelling certain communities as being problematic, or whatever word they are searching for. This makes uncommon or novel viewpoints vulnerable to further marginalization if their opponents succeed in giving them that label.

[1] http://news.nationalpost.com/full-comment/christie-blatchfor...
Meditating for Hackers
Right? And it's not like Eric is going to destroy Mozilla or anything.
It's standard to remove local variables that are write-only, but globals aren't always defined to be unused even when you want them to be. If you're building a shared library and you exported the symbol, it has to leave it in as part of the API.

Link-time optimization can delete a lot more stuff when you're building a program directly, since it only has to keep main()… as long as you didn't go and use things like function pointers.

This is one reason I try to use '-fvisibility=hidden' in libraries, because it prevents anything from being part of the API unless you go back and specifically export it.
Searching for a cheap flight ticket with Clojure and Chrome
Paul Graham’s Startup Advice for the Lazy
> SRAM used for caches also eats a tremendous amount of space and power due to its 6T, always-powered design.

What gets in the way of using SRAM for main memory? I've always been told that it's the space multiplier (6T vs 1T+1C) but that never seemed terribly convincing because DRAM is cheap enough (and has been cheap enough for a while) that it would make sense to pay a 3x-5x premium to avoid page open/close latency even in the high-end consumer market. Heck, many consumer devices are already 2-4x overprovisioned with DRAM just in case someone doesn't like closing chrome tabs (or whatever).

By process of elimination I tend to suspect it's the power draw, but it seems odd that power from leakage current on inactive SRAM gates would dramatically exceed that of DRAM's active refreshes.

What gives?
This is pretty cool stuff, thanks for sharing.

I've been following tedu's blog and one of the interesting topics that came up in OpenBSD was W^X memory, which apparently didn't get along well with JIT compilers, so they devised a new memory protection scheme called now-or-never execution.

Outside of OpenBSD land, do you see either of these two (W^X, nonexec) being used in a future version of Adobe Flash Player? (and/or in Chrome/Firefox?)
You could call it usenet, but someone would have to give it a better interface than the thing we call usenet now. People in general are not going to give up the modern comforts of the web for freedom.
Madison, WI has a cool version of this along a main bike path: http://www.spaceplace.wisc.edu/planettrek.htm
To be fair, Dual_EC being backdoored was never "far-fetched". It's been blatantly obvious since 2004, but few people noticed.

Here is a NIST email from 2004 acknowledging that the NSA classified how the Q and P parameters were generated: http://1.bp.blogspot.com/-ax86n-7Rb9U/VLa_Z_iC0WI/AAAAAAAABP...

With this, it's completely absurd to imagine that NSA cryptographers did not discover this possible backdoor, when they were explicitly aware of the relationship of knowing Q and P and knowing the state of the RNG.

Even assuming that the NSA cryptographers were incompetent and did not discover it before the public researchers and classified it for no reason, their continued endorsement for Dual_EC and their $10 million payments to RSA for making Dual_EC the default RNG paints a clear picture that -- yes, it's backdoored, and the NSA intentionally endorsed bad crypto to American companies.

It should also be noted that the NSA's public comments does not deny that the put in a backdoor. "The non-denial denial". And this is not counting the beyond-any-doubt evidence from Snowden that, Dual_EC was concretely part of BULLRUN.
> To work at the airport, drivers cannot have convictions for reckless driving, hit and run, driving under the influence, sexual crimes or terrorism

I get that some of these are sort of taxi or driver specific and that the rules are a little odd anyway, but it seems that murder should be on this list too?
Porting the GNU Hurd to the L4 Microkernel (2003) [pdf]
This is a bunch of nonsense. ekr was, for many years, the chair of the TLS working group at the IETF. He worked on TLS for years, which is why you'll see his name on the RFCs for TLS 1.1[1] and 1.2[2]. He's currently doing the bulk of the work on TLS 1.3.

The only hint of an insinuation that he's ever acted against the common interest comes from the fact that his name is also on the Extended Random draft. That's because the supposedly good half of the NSA (the Information Assurance Directorate) asked for that change and needed someone to guide the process through the IETF. Since ekr was so central to the working group and so practiced at it, he ended up writing it as a draft and thus his name got attached.

I bet he seriously regrets that now but, at the time, there was no hint that this was bad. Sure, it was odd, but it was totally plausible that some government process had decreed that some minimum amount of entropy must be included or something so, whatever. Nobody planned to implement it and nobody really cared.

In hindsight, that was naïve—on the part of everyone. But casting aspersions on ekr because of it is just codswallop.

[1] https://www.ietf.org/rfc/rfc4346.txt
[2] https://www.ietf.org/rfc/rfc5246.txt
What's the basis here for casting aspersions on a specific individual? It seems like nothing more than "I noticed this guy's name appearing in more than one place" and "Mozilla declined to comment". Surely the threshold has to be higher than that.

We're all for public inquiry into serious matters, but the internet is quick to smear people and I shudder at HN being used that way.

Lack of evidence or credible track record by the accuser makes this indistinguishable from concern trolling. That's a shitty thing to do to another human being, and you can't do it here.

User flags killed the thread before I finished writing my comment, so moderator intervention turned out not to be needed. Had it been needed, we would have done it, but I'm glad the community is on the same wavelength that we are.
Hmmm, I run Q4TD[1] and now I’m thinking I should implement my own QOTD service…

I wonder if I could do that with Google App Engine talking to the blog and just picking random posts.

[1] http://q4td.blogspot.com/ http://www.twitter.com/q4td https://plus.google.com/u/0/110672212432591877153/posts http://www.facebook.com/quote4theday
Ask HN: Good JavaScript codebases to read?
As recently April, uber wouldn't even let you try to call uberX within the airport.