skysight-inc/HackerNews huggingface dataset:
git should really make it possible to use openssh/openssl keys for signing - so that I have one key both to push to github and sign my commits. I know that they can be converted from one form to another ... but its really inconvenient, especially on Windows, etc.

The GPG key is designed for a email based collaboration flow - that Linus uses. But most of us use Github or Bitbucket's UI to collaborate.

Github/Bitbucket should use this key in their UI as well - to show verified users.
The more I read about what's going on in NYC, SF, London, I have to think of the visions from utopianist architects like Paolo Soleri and Buckminster Fuller who foresaw the over population of cities and not just the economic side effects, but the lifestyle and chaos inherited from the haphazard design of entire cities.

[image from Paolo Soleri, on "Archology", cities as ecosystems co-designed]
http://alastairgordonwalltowall.files.wordpress.com/2013/04/...

All these megacities have lacked expansion efforts driving up costs of rent to unaffordable levels for most normal people.

As jobs are automated out of existence, and productivity increases, unemployment will continue to increase, the % of the population stuck in poverty level will likely continue to increase. Sooner or later these issues will need to be addressed with long term answers.

It seems like if anyone might actually implement newly designed large scale planned city architecture, it will be China.

https://en.wikipedia.org/wiki/Arcology
Those will be raised soon.

AWS introduced API Gateway because they want back-ends being built on AWS Lambda. They will raise the limits, but this is all bleeding-edge tech and they are likely moving forward with caution.
I think the criterion for optimization came about from this line... “If there is a large amount of time between one word and another related word, that means you have to hold one of those words in memory, and that can be hard to do.” They're basically saying you can pop things off your mental stack more readily with smaller DLM languages.
Or explaining this better:

The objects of ObjC work very differently than C++ objects.

In Obj-C for example, there are no "methods" like C++, in C++ when you put a method in a class, (although implementation details may vary) it works like a function pointer in a C struct, and calling that method is just executing whatever code that pointer points to.

In Obj-C in contrast, to call a function of a class, you actually pass a message, that first must be interpreted, then the runtime that interpreted the message find the correct function definition to use and run.

For most apps people don't care about this, but game developers for example frequently make iOS and Mac games that in time-critical parts use pure C or even Obj-C++ so that they can skip this messaging part (that can cause significant performance problems sometimes).

Example: yesterday I was trying to figure why a open source game I like was slowing down, I ran a profiler, and the most called function, and the one with most execution time, was a simple "GetSomeRandomVar()" for spaceships (it is a spacefight battle game), I looked in the source, and saw that every frame, every spaceship call this at least once for every other spaceship, if the spaceship has an AI it calls it many, many times, I inlined it and the code became much faster.

I am very sure that if it was a ObjC call (with messaging) it would be so slow that the original author probably would not even have uploaded that to github. (by the way, the game IS an OSX game, but the original author wisely decided to go with C++ instead of ObjC)
It's a bit what Couch Apps where supposed to be, without the vendor-locking part...

> no server

But you have to rely on AWS infrastructure. So what you meant is no server management.
> Maybe it is related to how the mismatch from base rate in prison populations in regards to race is a sign of systematic racism against the over-represented groups

I've usually seen prison population cited not alone, but along with (and as an example of the outcome of) more direct examples of disparate treatment, such as unequal sentencing for like offenses, and the definition of different sentencing categories for different categories of narcotics, with the higher sentences being for possession or sale of categories disproportionately in use in the black community at the time the differential treatment was adopted.
Ooh goodie, we get to re-open the argument about whether it was bad of GitHub to publish the public keys![1] Pick your talking points: "They're called public for a reason.", "This could enable identity tracking.", "If your security model prefers public keys to be kept secret, it's absurd -- security by obscurity.", "This could enable factoring weak keys.", "This is good for security research.", "It's wrong to reveal metadata without consent, even if it doesn't break the crypto."

You could build in another PoC by doing the trick where you hide a command inside the copy-paste version of the ssh command line you gave.[2]

[1] https://news.ycombinator.com/item?id=9645703
[2] https://thejh.net/misc/website-terminal-copy-paste
This has nothing to do with emails serving as identities and everything to do with not believing user's input without verification.

If github was linking to user's profile based on first/last name rather than email the issue would be the exact same.
To guarantee the origin of the commits in a Git changeset, you need either PGP-signed commits or the authenticated push logs for a centralized server.

http://www.sunstarsys.com/essays/git-and-non-repudiation
I don't have any experience with writing Firefox plugins, but a port should be pretty easy to implement.

All the logic is included in a simple JS file: https://github.com/morgante/hn_blocklist/blob/master/src/inj...
Well, I guess that's one way. Wouldn't it be easier to just not get too worked up about other people's comments?
Athens 1944: Britain’s dirty secret
I'm a big fan of Guix/Nix and would love to see them in greater use.

Whilst I agree that they provide many of the reproducibly benefits of containers, isn't the other big advantage of containers the (theoretical) security benefits they bring? i.e. a process can't break out of its container and access other data.

Perhaps I'm missing something but can such isolation be provided by Guix/Nix?
What do you want to achieve?

(1) Learn more about the startup world
(2) Help out some startups
(3) Business development for new clients when they raise $ and can afford you.

The answer will depend on which one you're aiming for. My guess is that -- depending on how early the startups you're working with would be -- technical founders would end up looking to you as advisor on topics like negotiation, business development, and fundraising, rather than strictly legal advice. Generally after you help a startup 2-3 times they should give you some equity as an advisor.
One of my companies recently hired a 58-year-old who had majored in electrical engineering, worked as a project manager for decades, and then wrote a few iOS apps in his spare time before applying to jobs as a developer.

It turned out that he was absolutely terrible at coding, but my point is that we gave him the job regardless of age and unrelated experience. Since he had been working for so long, we paid him a much better salary than an entry-level person might have gotten.

My suggestion is to write code in your free time, complete some real (hopefully interesting projects), commit to a few open-source projects, and then give you resume to some recruiters.
The opportunities are there for those females who want it. Maybe most of them simply don't want to go into the computer field

You seem to take that as a law of nature... as though it's natural for there to be a truly massive gender bias in computing, a gender bias that was far less 20 years ago and has gotten egregiously worse since roughly 2000.

The real question should be: why the hell aren't women enrolling into and graduating from CS programs?

The answer is probably enormous and systemic, but the current situation should not be seen as acceptable, IMO.

Incidentally, the same questions could (and should) be asked of, say, men in nursing. And, again, the answers are certainly enormous and systemic, starting from childhood socialization, running through peer group issues, and on and on.
Yeah, IIRC the error with too many identities is hard to diagnose (something generic like "too many authentication failures"), until you add -v and see all your keys being presented.
World's Smallest Digital Dosimeter [video]
> FWIW, I think Apple can't ship any base libraries that uses Swift until they finish ABI-compatibility

You hit the nail on the head here. Until the ABI is finalized, Apple can't ship dynamic libraries to developers that are written in Swift. Swift won't be ready to fully replace Obj-C until this happens.
I don't want to pay for a Tor exit node.

But back when it was okay (for the network -- slow nodes now do more harm than good), I ran one from my house.

I would not say that anything that has a <1% frequency is a "very legitimate" fear.

What there actually is, is a legitimate chilling effect. Horror stories about running Tor nodes are direct attacks against the Tor network via a social channel. It wouldn't surprise me if typical actors were behind them, either, given the proclivity of virtually all governments to sockpuppet on social media.
He's questioning normalisation, not base. "Just over 2^30" is a bit more intuitive than "Just under ten times 2^27".
Ghost Sighting Caught on Camera
Timezones sounds like the most likely reason.
Link to the sources of this miniature opensource project:
https://github.com/shodanx/ultramicron

Link of the blog (in russian):
https://www.xn--80aighkbzclf7a.net/
It is really not possible for github to track the origin of commits.

For example, consider a fork. If you pull some commits from the original and then push them to your fork then that would look just like this.

The only thing I can think of is that it may be possible to track commits if everyone would sign them as they were created, but that would require all users to change, so I don't see how that can happen.
But why it can't? Assume that such an operation (alocate new adjacent memory cell without worrying about other elements) could indeed be performed by the vector. How in that case does it know whether or not the next adjacent memory cell is free and was not just occupied by another processor long time ago? There is no way (or they are too way hard and unrealistic) for vector to do that properly. Thus no choice left, vector has to reallocate the place for all items it already has plus additional one.

Isn't it what realloc is for?
Just remember that even the Supreme Court's opinion changes through the ages, so it's hard to say for sure that a law violates the Constitution.
"I'm not trying to start a fight here, but at no point did I ever imply that I was entitled to employees."

Yes, you did.

"There are certain realities to management and in many cases one bad employee who is thinking of leaving or planning on leaving can have a huge effect on other people in the office. When that behavior turns into "we should all go work at X" in a coordinated effort it can be hugely damaging and significantly more so than everyday turnover."

Then maybe you should treat your employees better. Either way, not my problem.

"What's more is that when something like this happens the owner/manager rarely even gets any reaction time to find out why the person(s) left or are leaving to address the problem."

Like all things with management, you have to be more proactive, not reactive. Again, not anyone's problem but yours.

"Sometimes, that one person just needed to go and everybody else will be fine"

If that were true, then everyone else wouldn't be looking at joining that person.

"My fear here is that you're dramatically oversimplifying and the basis for that is the shortness of your replies without seeming to read any of my responses."

That's because it is simple. You do not have the right to employees.

"Running a business is complex"

Nobody said otherwise. Still no excuse for you to be putting restrictions on your employees like that. You don't own them.
As a senior systems administrator? I'm surprised you're senior at all if
you don't have any programming skills. You can't tell how the system works if
you've never written a program that interacts with OS. Moreover, operatios is
a field with still much, much to do; I often find myself writing missing stuff
(I'm a sysadmin myself).

Funny enough, being sysadmin I'm not seen as a programmer, so I'm not tied to
any technology my employer is attached to and I can use any programming
language I find appropriate (Python, Perl, Ruby, Erlang, C, you name it).
A freedom that is rarely found among regular programmers.
T2Z – generate a 2D animation then turn it into a 3D printable sculpture
Love this. I took a few minutes and converted your image into an Illustrator/vector file. Not 100% true to your original, but pretty good. Infinitely scalable so people can print it if they want.

Preview in black and white: http://i.imgur.com/OhemZK2.jpg

Bonus! preview in Uber blue: http://i.imgur.com/gvFDtWN.jpg

Source AI files: https://www.dropbox.com/s/zw1oqdwhaqhqb6u/NYC%20Taxi%20Data....
There's only one other shoe that could drop, which would be an assertion that hosting a Tor exit node is illegal in general. I doubt the Feds want to argue that directly where it could be directly opposed.
What if these kinds of laws are passed via some kind of referendum? Grassroots initiative process based? These kinds of seemingly whacky laws aren't always pushed thru by conglomerates but by local support, like coal in west Virginia.
Actually I would argue that Docker is more flexible than Nix/Guix. The usecase for package managers are installing packages, whereas Docker combines package management along with configuration management.

Think about Nix+Ansible - that's what you really need if you are going to have a true stateless system. Take your base packages to create an immutable snapshot and then layer your configuration changes on top of them.
The text below was simply excerpts instead of the full transcript. The incomplete excerpts looked like snippets of context to guide people to the middle parts of the video. You actually had to watch/listen to the video to get the full text.

For example, at the beginning, he says the word "tricycle" and when I searched for that word, it wasn't in the text below. That's when I knew it wasn't a full transcript.
Oops, you're right. Here's the genesis block:

https://blockchain.info/block/000000000019d6689c085ae165831e...
It's new but is it really bad? It allows for more uniform code if you're using the new style for decltypes anyway. If I would make heavy use of that construct I would certainly prefer the definition used in the article.
They weren't flying in salt water fish to North Dakota in 1905. And so their sushi was probAbly local fresh water fish.

They probably all got worms, or maybe even had worms to begin with. The freshwater clam lifecycle is one of the more complicated life cycles and interesting.
> * Average income is $23k. If only half of households work, does that mean that the average income among working families is >$50k?

There are ~37% of families with someone over 62, so that section may be drawing social security (assuming that is included in gross income, which it wouldn't for the IRS, but it would make sense to for a housing agency)
At many finance shops, the CIO can even outrank the CEO, in reality if not on paper. For instance, during his glory days at PIMCO, Bill Gross was CIO while others, such as Mohammed el-Erian filled the CEO role, even when Gross was basically calling the shots.
Because in the paper they tested the attack with 1x2^27 requests, then with 2x2^27 requests, then 3x2^27, etc etc.
There's a Github help page explaining when commits show up in your profile (though worded as an answer for people wondering why one didn't): https://help.github.com/articles/why-are-my-contributions-no...

The criteria not fulfilled for this one are that you have to have interacted with the repository on Github in some way. Any one of these criteria would suffice: you're a "collaborator" on the repository, you're a "member" of the organization the owns the repository, you have forked or starred the repository, you have opened a pull request or issue in the repository.
German prosecutor sacked over Netzpolitik treason probe
Looking forward to this. Added you.
Over 9000 vulnerability POCs, hand delivered on camera
There's also the issue of "corrective" quotas creating new forms of discrimination (against asian Americans, for example: http://www.wsj.com/articles/asian-american-organizations-see... ). I think targeted outreach and blind evaluation of applications are less prone to result in new problems.
Surfing on a dirt bike, because everything else is too easy
The simple solution seems to be github just distinguishing between signed and non-signed commits.
related: https://github.com/will
Fair questions- I should have been more specific (and that will be part of my own thoughts once I have a few more replies). To be honest, I want to achieve all of those. 3) may not be that likely as they already have very well established legal counsel, though it is obviously still potentially there as an option and was how I started giving them a bit of help...

Also true that they weren't necessarily looking for strictly legal help but more analytical / advisory as you suggest.... so on that basis, what do you think?
> The majority of chemtrail reports are doofuses seeing contrails, but the rumor mill may have started around a kernel of truth.

Yeah, I'm perfectly aware that most "chemtrails" are just contrails, but I have a feeling now that it might have started around a quite solid kernel of truth.

You know, I used to post this picture as a joke: http://i.imgur.com/MM9YsTM.jpg. Now I realize it's exactly what the US military did in San Francisco.
Techbros are hilarious
She got a well-paying development job despite apparently being incompetent.

On what planet is this a "disadvantage"?
Depends on the project. If I ran the Linux kernel, I'd insist on clear commits too.
Join the military, then see how far your First Amendment rights extend.
It's the difference between a language that trusts you not to be a fool, and a language that assumes no one should ever be allowed to use dynamic runtime features.

I've enjoyed my time with Objective-C very much. For consumer coding, I think it's very close to the safety/expressiveness sweet spot.
How Netflix Handles 36% of U.S. Bandwidth with Chief Architect Jeremy Edberg
The examples are very interesting, as it's not necessarily cheaper, because if you could handle the same 3 million requests per month with a t2.micro for ~$10 per month, Lambda approach would be close to 2x more expensive.

However, the benefit here is that you don't have to provision to peak capacity needs + (some safety fudge factor), thereby having paid for, but idle capacity.

It's a very intriguing proposition for new services where you may not be able to optimize costs as much for fear of losing up time, but I'm sure it makes a lot of financial sense for AWS. Nothing stopping this from being a win/win though.
First of all nice work!

Second there is already a product out there called jaws: http://www.freedomscientific.com/Products/Blindness/JAWS

The last time I checked (and my information is very dated, 5+ years) this was a fairly popular piece of software in the blind community. I also do not know the status of trademark around the term. If you were going to change names, its early days for you now would be the good time to do it.
How to Install Ethereum on Ubuntu
Empathy, compassion and success
You start by deciding the First Amendment allows the government to ban certain speech, likely by picking something no one would be opposed to banning. You then take precedence and use it to ban speech you were targeting from the start.
For std::vector<int>, realloc would be fine. But you wouldn't want std::vector<std::string> to use realloc.
White House Demo Day Live Stream
I also use it and recommend it. I didn't know about the hook script feature and will be looking for it.

My baby dotfiles here: https://github.com/tacone/dotfiles
Yes it can. The build daemon already uses containers to create the isolated environments to perform builds in so that we can view builds as pure functions. Nix uses systemd-nspawn for making NixOS containers. Guix uses a Scheme interface that I wrote called call-with-container to build GuixSD containers or simple containers without an init system via 'guix environment'. call-with-container is a work in progress, but some of the code has already made it to master, and the rest of it should land in master in time for the next release.
It is not advisable to mix malloc / free / realloc (C style) with new / delete (C++ style), and C++ doesn't have a "native" realloc because of trickiness with con/destructors.
Startups typically compensate in equity and/or some deferred payment contingent on the next round when they ask attorney's for services that can't be paid for in cash immediately.
It needs a magnetic surface to work. How is this practical?
Same. Apparently this server does not support any modern day crypto.
Their servers, their rules.
> It's no server because Lambda is not a server like VPS that you get it up and running 24 hours,

What you say makes no sense. There is a server , you just don't manage it yourself.

> it's a function on the backend

And where is the "backend" ? that's right , on a server.

> It's being called by the JS SDK on the browser,

What does the SDK call ? a server when your functions lie.

Lambda + api gateway are a BAAS. You might have some logic running in the browser but the lambda functions run @AWS. So there is a server.

It's a bit like Couch Apps by the way,except that you can scale at the 'design document level', not just at the 'node level'.
Got a good following here, everyone's commenting on the less ambiguous aspect, which I'd like to throw out the term amphiboly. We're speaking of an amphiboly in these sentences, which makes me wonder after reading all the commentary what a test would be for resolving amphibolies unambiguously using rules of grammar as folks have dived into in the commentary.
I should also ask, what qualifies as "help 2 or 3 times" and what kind of equity would you envisage? (I know it is highly dependent on multiple factors, but I am curious for people's experiences...)
Yes and no. Practical exploitation depends on how the RNG is being used. The good news is that, as noted, replacement code is available for those who want it.
So this is a Github feature, which might be useful in some cases, I get that. The good news here is that it only goes one level deep, i.e., it does not automagically show up on Linus' account in any way.

This also has been an issue with Git for a long time. In any repository, you can see the email of the person who committed it, and it can be spoofed, because there are no checks. So while here we see it linked to Linus' account, the problem with plausible identity theft has always been a part of Git.

There are ways to solve it. Git can just put "<unsigned>" next to non PGP commits. Github can also put "<unverified>" when commits are made outside of Github realm (not using their keys of https auth), or are unsigned.

Just be careful while merging pull requests, which one has to anyway. And because one has to, these issues never seem to get a fix.
Science Transport Protocol
Thanks for the test comment. :-)
> and closed a repo.

Did they? What's your source for that?
> Which is actually not a valid address

That means validation was working correctly. The email addresses are invalid even if the server will accept email for them.