skysight-inc/HackerNews huggingface dataset:
Some friends of mine decided we're going to bring webrings back. This was my attempt: http://rcr.io/webring.htm
Adobe Type Manager bug shows, when coding, think 'security always'
I live a modest life by US standards. My point is that both Quality and Experience of life change over time. Backloading time to the second half comes at an irrecoverable cost.
This is the problem I have with the widespread use of pixel art. Most of it is ignorant of why the old graphics looked the way they did. Like you said it is adopting one of the limitations but ignoring the others.

The developers of Shovel Knight actually emulated the way NES graphics work (and added some enhancements to it) and the result is a much more convincing retro feel.
How is a platform that supports over a billion people not a meaningful investment into the content? Even if they are not directly producing content, they are more like an aggregation/distribution content system. That's not really a fair comparison.
Krebs on DNS and booter services
With a solid electrolyte, it means "we are not aware of any process that will limit their lifetime - but it must die some day".
Only because we make it hard.
There are a couple of qualms I have with this article:

1. He's looking at Safari 9, a version that is not yet deployed anywhere, rather than Safari 7/8, which are the versions that everyone knows and loathes. Yeah, if you move the target, then of course some criticisms will miss their mark.

2. Even ignoring version numbers, he's looking at the "best" Safari that exists: desktop Safari. iOS Safari is where the real nightmares are, and is the target of almost all of the complaints about Safari that he's supposedly refuting. Again, when refuting someone else's case, you have to refute their actual case, not an altered, easier-to-fight version of their case.

3. The case he's making is that Safari's not the worst because Edge is worse. Except that Edge is not 100% complete (it's more akin to the early days of Chrome: yes, you can use it, but it's a work in progress), is in fairly-transparent, visibly-active development, and is an "evergreen" (continuously self-updating) browser, unlike Safari, which only gets updated either with the OS or when there's an absolutely-critical-enough security hole.

4. His basis for comparison is number of features listed as "supported" on caniuse rather than standards-compliance, rendering consistency, actual usability of purportedly-complete APIs, and general how-bad-does-this-browser-screw-up-my-app. For example: iOS Safari supposedly supports "position: fixed" (which has been around basically forever), but in practice has significant rendering issues, particularly around when it decides to stop positioning things because the keyboard is present.

5. His initial premise (and, tellingly, his conclusion) is that people complain about Safari because people want to complain and poor Safari just happens to be the current target, rather than that Safari might have some actual problems that make web development painful.
On the nature of timers
A developer’s dream but an operations nightmare?
In general, I like to think of it as:

Facebook knows the facade that you want to present to the world.
Google knows what you want (or what you want to know).

Now, each of these is actually only addressing the front-facing portion of the business. Each company obviously has much more information when you begin to consider their link tracking, advertising network tie-ins, communication mining and external domain 'likes'.

But it's good to remember that Google's advertising is so damned valuable because you're already looking for stuff when you go there.
Show HN: Lookiwasthere – Book guided tours from local operators
No they won't sell the information to Coke. What Facebook does as an advertiser is basically make money off of derivative of surface personal information or a large number of people. Coke would be able to target their ads to you, but will not know anything else about you.

The whole business model of Facebook is targeting, that's the derivative they get out of your information. If they start selling the information, everyone would have the derivative. In your example, if Facebook sells information to Coke, Coke can use any cheap internet advertiser on the street. Why would it buy facebook ads anymore? No company would sell their only value prop, you've got it backwards.

There is slight amount of information leak in terms of ad targeting and public profiling. Insurance companies can just put up fake beer ads and try to extrapolate how many 25 year olds are clicking in each area. But that's what you get for not living in a cave. The same insurance company can also sit on the highway and count beer trucks. They can also sit outside a shop and see how many 25 year olds are buying beer.
I've always thought the VC model for software is fundamentally flawed.

Software is so easy to get started that if it can't bootstrap from a bare minimum product, maybe the idea isn't that great as a business.

On top of that, I think there's a bit of circular logic and wishful thinking involved in getting VC money. It encourages companies to spend more money than they need to on things like scaling and fancy design and excessive marketing, because they need to scale to meet VC expectations.

The VC model was essential for the hardware oriented companies that pioneered it because they needed a lot of equipment and capital to build chips and computers. There's so little capital cost with software nowadays, I don't know why VC still persists.
My former company (a telco) offered me an amazing "promotion". Way more responsibility, way more accountability, AND formally on-call off hours and weekends. The schedule was vague, but it looked like roughly one week in three I couldn't be more than 30 minutes from the office, had to respond all the time, etc.

All of this for the amazing salary raise of zero dollars and zero cents over my existing salary! Needless to say I no longer work there - but they found someone else to do it.
Analyze Node.js errors down to the code level
> Given that the pre-takedown content of the site is still present on Archive.org...

It will be until a crawler-hostile robots.txt is "accidentally" added to the site. :(
So much cheese. My favorite:

IF YOU STUDY THE MATERIAL ON THIS WEBSITE YOU WILL HOPEFULLY UNDERSTAND WHAT OUR PURPOSE HERE ON EARTH HAS BEEN.
I believe YC read applications as they came in for the fellowship (just as they say they do for most batches). This means that they likely spent a bit more time on the earliest applications since I imagine the flood came in on the last day. That being said, 6.5k applications to read split between likely not THAT many people, even though founders did help, is a lot of applications. The applications likely got more read time than the average resume does for a job application and the readers likely had to read more than most recruiters do so props to them!
> From my understanding you're not "working illegally"...

Yeah, she was never working illegally.

In fact, assuming she'd started her job before April 2015 and her employer had properly verified that she had the right to work in the UK (which they could do by checking that she had ILR, even if it was in an expired passport), everything was fine. She wasn't working illegally, and her workplace had no reason to suspend her.

Mind you, she'd still need a BRP (or at least have applied for a BRP) to get a new job.
The hate is when they are used for code where a parser would be better. (e.g. parse an e-mail address).

I don't think anybody has an issue with regex search in an editor, but we are more talking about regex as a core language feature.

Even in an IDE there are times that regex is the wrong solution. e.g. regex based refactoring can introduce bugs in most languages where a parser based refactoring wouldn't.
The thing that so many people fail to realize is that the internet needs a totally different structure or service that operates on a totally different premise that retains data with their owner, their person.

I relish seeing the day that Facebook is jettisoned for a system of distributed and individual ownership of profiles and data, like the internet should be. Humanity strayed at some point when the nefarious actors like Zuckerberg and his predecessors came in and started stealing your data, stealing your person, removing the information from you that your liberty and freedom is built on. You are not a free person when you are on the internet, your person is being smeared and skimmed everywhere you go and things against your choosing or even awareness are being done to your person and identity by people and for reasons you did not authorize. That's not liberty, that's not freedom.
> "It's been so stuck in a rut, relative to the demands of what we use it for, that it'd seem utterly magical for it to improve dramatically."

Sure, it'd be nice to have a sudden jump in battery capacity, but I think it's important to recognise that batteries have been getting better, just through incremental improvements rather than big leaps. This graph shows the change in battery density (between 2007 and 2013) and battery cost (between 2008 and 2013):

https://onclimatechangepolicydotorg.files.wordpress.com/2014...

"Source: US DoE report published as part of their EV programme."
Right, that's why I said it's not valuable in and of itself. It helps them make money, no doubt, but there's not much of a market for that data alone. The only other potential buyers would be the people who already have a platform to display ads.

But let's play devil's advocate and say they could sell the data for $100M (I think that's extraordinarily high). Given Facebook's 1.4 Billion monthly active users, that values the data at about $.14 per user.

Facebook's market cap is $270B ($187.5 per user). In other words, using obviously sketchy numbers, your attention is worth approximately 2,800 times more than your data.
Actual title: How hackers hijack the net's phone books
hopefully some of these gets incorporated into the real specs?
Introducing technical preview of Docker Engine for Windows Server 2016
To clarify, you need to have a certain number of points, which I understand is sometimes adjusted to reflect the growth of HN.
In your profile settings, it's the "topcolor" setting.
CMU professor at forefront of machine learning research
Is anyone ignoring the Angular team's advice and going to prod with Angular 2 already? I've got an Angular 1.3ish app rotting on the vine that needs serious love but I don't want to touch it until I can at the very least make use of the new router (I never used UI router and now regret it) but I can't wait on that forever.

They may warn us that the alpha bits change frequently but if it works on one alpha build there would be nothing forcing the move to the next alpha.
The problem is that you have all your corporate customers who still insist on using webapps written with ActiveX and webpages that are still accessed by IE6 users. They would be more than a little upset if Microsoft told them "we're not supporting you anymore".

Microsoft is stuck here: they want to move on to modern web standards, but they can't afford to piss off their corporate customers.

Their solution is to split the web browser, shipping Edge for the consumer market (and the modern members of the business market) that wants to interact with the modern web, but still continuing to provide IE11 along with the OS to keep their corporate dinosaur customers happy.
Regardless of whether that statement is true or not, 20% time is alive and well, based on my own experience, that of everyone else I know who's also done it and (if to a lesser extent), all levels of management having asserted so repeatedly since rumours started. I've even found it to be encouraged by certain managers to alleviate the "itch" to work on something different without having to leave one's current team.
Morality and ethics are relative though.

There are many couples that have open relationships and might have used this site. They would be fine with finding their spouse in the data.

However, the same person's boss might not agree, and now they have access to this information. Someone might find themselves on a performance plan for no obvious reason.

This is a treasure trove for people who want to force their version of ethics and morality on other people.
Sounds like throwing the baby out with the bathwater.
In theory, yes. I found, though, that the sort of non-urgent correspondence that often went unresponded-to by friends and family when sent over email resulted in comments and "likes" on Facebook, offering a higher sense of engagement.

I ditched my Facebook account two years ago, seemingly with a mixture of benefits and losses.
They have been saying this in the UK for the last 50 years :-(

And its not if Chartered Engineers (PE) earn anything like say a senior hospital consultant or a Barister.
Ah, cool. I was looking for a way to contact you, but couldn't find a way on your web site or on the GitHub page, short of opening an issue.

Not that I have anything really interesting to say - just that I really enjoyed reading your write-up. Really interesting and, as mediocre dev myself trying to make a little money here and there, inspirational as well. Thanks for sharing it. (I also used to do development in Tokyo too, and hope to be able to do it again some day, should the stars realign.)
As far as I know the only restriction they loosened was the number of VMs you could run on Apple hardware. OS X server hasn't been an actual version of their OS for a while, it's just an app in their store now.

That said, I would be thrilled to be proven wrong about this.
> A lot of people still seem to really like Meteor.

Meteor officially supports React and Angular. Meteor is a web and mobile development platform, not a front-end framework.
One thing I like about material vs e.g. Bootstrap is their treatment of widgets. In particular, the range slider & toggle slider (checkbox alternative) seem common but bootstrap doesn't address these.
Right before leaving my last job, I updated an internal web-based tool to add a menu item called "Add Unicorns." It just used cornify to show unicorn images when clicked. But I also made it only show that menu item at random and somewhat rarely, so I heard that it took some people a while to notice, which was fun. To my knowledge, that change is still there!
This is entirely my fault. I was the one writing This Week In Servo blog posts, and I had a rather busy internship over the summer which didn't leave me much time to write the blog posts. And now I have a rather busy semester -- I probably could carve time out to start writing again, but right now I'm too swamped to do it. I'm glad you enjoyed the posts, though!

Following http://twitter.com/ServoDev can keep you up to date for now.
You can get that any time a game starts dying or there's just no compelling reason to go to places because something so much better has been released since then.
I've noticed that, and been surprised every time. It's like finding a diamond at the bottom of a dive bar urinal.
According to this Ars article, project sunroof was a 20% project: http://arstechnica.com/business/2015/08/here-there-be-photon... (see next-to-last paragraph)
Traditionally, you had to bind each SSL certificate to it's own IP address. Today, if both you and your client support Server Name Indicator (SNI) it works to specify the certificate inside each VirtualHost.

EDIT: I realize after posting that you may be asking about the syntax of VirtualHost in Apache, and not about how TLS works in this use case.
Advanced Nodes-Which Platforms in Consolidating Semiconductor Industry
There are a couple of ways of looking at this, I'll give you my take.

Simple answer, you are making a good wage for the experience you have. From your description I am assuming you only have 5-6 years of professional experience, with a bunch more when you were playing and learning. Frankly, even in NYC or San Francisco I personally think $145 for an engineer with 5-6 years of experience is a solid wage.

The answer I really feel is correct. You are worth what you can convince someone to pay you, and not what the guy sitting next to you is getting paid. It really is as simple as that, although it takes some time to get into that mindset.

Toward the end of when I was working for others (with one exception), I would negotiate based on what I felt my value would be and the highest amount I could get out of the employer. That may sound kind of greedy, but the fact is I knew I would deliver value far exceeding my costs and felt it was fair for me to try and capitalize on the value I created not an arbitrary salary based on what an employer paid others.
SoftBank CEO in Waiting Nikesh Arora Buys $483M of Stock in ‘Personal Bet’
In any event, the ethics of the data publication itself is orthogonal to the behavior of people on Twitter...unless we want to blame Twitter for facilitating problematic behaviors by its users.

To me the publication of the data is not quite so black and white because ultimately the Ashley-Madison data was going to escape into the rest of the internet. This assumes it hadn't already been published prior to the recent event and that's an assumption because Ashley-Madison is and has been in position to monetize the data in standard ways [and perhaps rather non-standard ways] from day one.

Which is a roundabout way of pointing out that Ashley-Madison is and always has been in a position to publish this data via changing its terms of service or by selling itself to a successor company and transfer the data as just another asset. The key here is that individual users don't hold license to the data, and so a successor company can do with it as they please restricted only by actual law-enforcement Uber/AirBnB style [as opposed to hiring lawyers and restricting their actions based on what's on the books].

Web-scale infidelity [even if much of it is of the weaker Jimmy Carter sort: "I've looked on a lot of women with lust. I've committed adultery in my heart many times."] will inevitably be followed by web-scale exposure. Sharing a secret means giving up access-control to the information...someone else can read my diary or talk to my best friend or read it off a web-server, and the likelihood of someone doing so correlates directly to their interest in doing so.

Which brings me back to the ethics. There's no clear deontological case for a universal law against publishing data, and the long-term Utilitarian optimum solution is intractable. So we're left with the normal social context of those aspiring to extra-marital affairs are worse than gossips or vice-versa.
The boardgames renaissance that I've seen grow ever the past 15 years has gone hand in hand with the increased fickleness of video games. I can't establish causation, but I'd wager that there's an appeal to a physical offline social game in contrast to the mandatory online, anonymity-fueled abrasive, potentially-unplayable-in-5-years digital games.

I like the idea that the boardgames I buy, barring physical abuse, will be playable by future generations in 20 years time. You can't "end-of-life" a physical product.
That is definitely not true of all software. Consumer and SMB Web applications, maybe, but domain-specific business software can be a rather nontrivial and capital-intensive undertaking. Those are the quiet companies engaged in the "boring" business of making money that you don't hear about.

That said, a lot of the money goes to marketing. Google AdAwords and low-touch web-based marketing doesn't work for all kinds of products; in an esoteric business market niche, the cost of customer acquisition is rather high, as trade shows, conferences and personal connections matter a lot more.
Intel and TBS Announce America’s Greatest Makers Reality Show, $1M Prize
> Beyond security, this highlights one of the main issues with the cloud. Was there no backup?

Unless I am specifically paying for backup service, I wouldn't expect/want them to do that for me. And even if I was, I'd still have offsite backups if the system was important.

If you aren't being responsible with your backups in a noisy environment like Google Cloud/AWS, understand that you are vulnerable to freak accidents like this. Google/AWS's job in all of this is to try to reduce the frequency of issues and to minimize the impact.
Curious - how do they know lightning hit four times? Was someone outside counting?
My HN account costs me hours of productivity, and a great deal of imposter-syndrome-feelings, in exchange for a curated list of really interesting things, not to mention every comment by patio11, tptacek, edw519, and just about every highly-ranked commenter on threads. It seems a fair trade, especially when you factor in that I learn about new frameworks and concepts.
I'm very hopeful some of these safe Deet alternatives become products. If you need a mosquito repellent, stand next to me and you won't get a single bite (my family is very appreciative).
I have a Ubiquiti AC access point at home and the only thing I could see the OnHub doing better is the auto-sensing other networks and working around them. I'm not sure how that would work yet since changing channels would kick everyone off wifi for a second but the Ubiquiti "auto" channel is only changed/detected at boot (probably for the reason I just mentioned).
How frequently does someone try to hack your service?
You guys that runs a (public) service today, how frequently do you see attempts to exploit your service ?

How do you work with security, do you have any daily checklists or any other process that helps you keep uptodate on software updates, threats etc ?
I'm not a lawyer but isn't provability kind of orthogonal to legality?
The Grumpy Economist: The decline in long-term interest rates
> how do you make a case that it's unethical for dragnet traffic looking for people who want to blow up civilians with homemade bombs?

Talk about a flawed analogy!

I would argue that it's totally ethical to hack/steal/gawk at the data from a "Terrorists R Us" website that publicly advertised itself as a social network for terrorists, and took money from terrorists and terrorist wannabes to help them connect with other terrorists and swap bomb-making tips.

In fact, that kind of targeted attack would be the exact opposite of "dragnet" surveillance. If we could steal and dump all the data from ISIS's central database, we should absolutely do that!

Edit: And before anyone jumps in here with "terrorism isn't the same as cheating on your spouse"--of course it's not--which makes parent's analogy even more ludicrous.
I can actually blame my car for an accident if it didn't respond to my brake press. The hammer can be blamed if the head flew off mid-swing striking my finger instead of the nail.

The tool can be the source of your issue if its not made correctly.
Regexps are like farts. Everyone likes their own but is disgusted by everyone else's.
I think it's less of a big breakthrough and more of a way to validate that Rust is the Right Thing for certain hard problems.
I still see security as the best feature of a new Firefox written in Rust.
> True, but giving the gov your blackmail file ...

You misunderstand me.

If you're blackmailable, you shouldn't be holding a TS clearance. If you're granted a TS, and later become blackmailable, you really should have your clearance revoked.
OnHub: Google's solution to old/slow routers
I really don't understand the hype surrounding material design.

I get the widgets as "material" metaphor, space, motion, etc., but as I understand it the redefinition of every widget's appearance and ignoring UI conventions is the opposite of good design.

The new design language (Material Design) is not made with any apparent metaphors in mind (e.g. the "tabs" are just plain nonsensical as elements), do not convey the system status or their use in any intuitive way, and is inconsistent with the widget look users are already accustomed to (as defined by their systems and by history).

As others have mentioned, it's hard to see any real value in this outside of Google's own systems.