skysight-inc/HackerNews huggingface dataset:
I think a better way to put it is, sufficiently complex social software doesn't work on an MVC model that was originally developed primarily for single user interactions.

I've encountered it in my work work on ultra large social projects. The complexity and number of states created from so many players leads to a mess of user journeys and exponentially more code.

But in my experience this is more of a product design problem than a architecture one. Social software is funny in that two user clients can technically work fine but social bugs can still arise due to poor design. Sorting these out requires a great deal of care in the initial product design and goal setting, the later complexity problems in the code being an outgrowth of this stage.
Can you give examples of how on Unix systems you can get root access having a local user account?
From what I can see, we have mass surveillance because it is what the people want. We have the TSA because it is what the people want. We have drone strikes because it is what the people want.

From what I can see, most people just don’t understand and don’t care. Just like I don’t understand and don’t care about my local football team, most people don’t understand and don’t care about security.

Worse, they have the relentless propaganda machine of government and access journalism to mislead them. Ask an ordinary American to apply common sense, and I think the majority will say: of course I don’t want the government looking at my dick pics[1], of course I don’t want to be processed like cattle before I enter the airport, of course I don’t want to execute people without trial with lots of collateral damage. But hide all of that in a veneer of: the experts say we need this, the government says it’s fine, and look at this cute puppy and the weather is beautiful and who is the latest celebrity and our sports team is doing… and I can understand why most Americans don’t do anything about mass surveillance.

[1]https://www.youtube.com/watch?v=XEVlyP4_11M
Since you're a theoretical physicist (which you didn't originally sound like), and I'm not, that would presumably mean you know a lot more about the subject than I do.

Further, my past experience is that physicists tend to frequently misunderstand physics that is outside of their own narrow speciality, so since you're more interested in being insulting than in educating, I can assume nothing about your supposed superior understanding. Seems like just ego.
Many more times than I have energy for.

Your oft-repeated claim/insinuation/smear that we censor anti-YC stories isn't true, nor fair, nor even reasonable, since to run HN that way would be stupid and the whole thing would have fallen apart years ago.

It's also mean—you have no idea how hard we work to make sure that stuff like that doesn't happen.

And in this case it was lazy as well: https://hn.algolia.com/?query=airbnb%20horror%20story&sort=b....
I did something very similar for my blog last year with Twitter data. Used R, Tableau, and a package called Rserve that lets R handle numbercrunching while Tableau handles visualization.

catch it at haagajoe.wordpress.com/2015/01/01/change-of-plans/
"This was becoming a serious problem for developers new to a certain codebase because they were afraid to touch the code"

Sounds like "We don't write tests and blame MVC for that"
My experience from a decade ago was different than most here, I had not so much luck with CPAN.

Many libraries and projects, but most of them alpha or abandoned. It took a lot of time to find stuff that was built well enough for production and was still maintained.
Key Points for Choosing Best Memory Card
^^^ Now you're just showing your age! No but seriously, "Second Reality" by Future Crew in 1993 was voted one of the top 10 hacks of all time by Slashdot.org. I remember watching this thing on a very low end 386, with something like 4MB of RAM and maybe 512K of video memory and I was mesmerized. They might as well be showing you this demo in 3D holography today, you'd be just as impressed as I was, it was borderline magic back then. It gets hella good after about 1:50.
SECOND REALITY - BY FUTURE CREW, '93

https://www.youtube.com/watch?v=rFv7mHTf0nA

https://en.wikipedia.org/wiki/Second_Reality
http://hunterwalk.com/2014/03/08/new-grads-midstage-startups...

is a good pointer.
I meant by San Francisco standards.
How to Set Background Image or Color Using CSS
> and yet we can do nothing to stop it

You live in a democratic country, right? So you can. But you won't with that sentiment. If everybody thinks like you then you indeed are helpless.
Paul Vixie: Lack of Talent is Not the Problem in "Cyber"!
I love the comment of "defending against complexity by adding more." That defines a lot of the tricks we use in every day programming to defend against complexity.

I also love the juxtaposition of this comment and the other top comment.
Oh, shoot, that was the one I thought I was linking.
Virtualization: turtles all the way down
This was the first decent thing I've ever seen in LinkedIn Pulse.
Maybe he took a signing bonus and a relocation package and will have financial troubles if he quits too early? Maybe not, but I would see that as a decent reason to stay a bit longer.
> There's a web gateway in our cluster that receives binary blobs over REST and puts them onto the message queue. In total not much over 100 lines of Ruby. We've thought about reducing the server load a bit by porting it to Go or some other more performant language.

On a note unrelated to the actual thread, how do you port a piece like this to another language? Is the Golang part another webservice? Do you fire up a thread to start a process? Is it called via a bash script? If there's an error how do you get the error back from it?
Let's try to do better than reflexively repeating the #1 dismissive meme about someone's work.

https://news.ycombinator.com/item?id=9722096

All the more so when the work is beautiful and the meme is about the wrong guy.
Soylent Is Compliant with California Proposition 65
AppArmor can't do a *.pdf restriction. Even if it could, you still let through access to every pdf on your system.

The point here is that the sandboxing needs to be watertight, or it's simply not effective. pdf.js runs in the JS sandbox, but here the file origin checking failed. Placing an OS-level sandbox around it doesn't help unless it is just as tight.
Good point, but that low "average daily intake of plain drinking water" is because most people drink other beverages, many of which are made from tap water.

I'd love to know how both limits were decided.
A Git Versioned Country
Show HN: Trend.In – Tag any photo in imgur
Trend.In is a small webapp which can be used to tag any image on imgur.
To use, paste http://trendin-mecofficalsite.rhcloud.com/ before any image url on imgur.

Example:
http://trendin-mecofficalsite.rhcloud.com/i.imgur.com/DaqHj6...

Once it opens up, start tagging and click anywhere on the photo and type in some text. Press enter once you're done and type in your name and email in the header and click on 'save tags'.
Now you can give this url to anyone and the tags will be there.

Trend.In was made yesterday under 24 hours at the unihack 2015 hackthon in melbourne by three Monash university students.
We had to use the default openshift domain because our preferred domain wasn't available.

Let me know how you guys like it!
The keyboard has a CPU that can do encryption and signing, in addition to decoding for key presses. Ditto for touch screens.

The reason for putting the encryption in system B AKA the keypad and display controllers is, if you want end to end encryption, the keypad decoder and the display controller are the closest to the end points you can get. And they are single purpose devices that don't run arbitrary code nor accept arbitrary input.

Compare that with laptop CPU's and complex operating systems with their huge attack surfaces. Running software written by completely untrustworthy corporations and individuals.
I appreciate the article. That was an interesting read. Might have to look at that book at some point.
Well, educating random people on the internet in physics is not my job.

I was just pointing out to a piece of misinformation before someone takes it to be true. And again, it wasn't meant to be an insult, I literally meant it and it is true --you literally didn't know what you were talking about. I only meant to state a fact. There's no need to make this something personal. For what it's worth, I'm sorry if it offended you.

In my view, not knowing things is not something bad. You can always learn things. But spreading misinformation about something you don't know (and insisting on it) is not.

> Further, my past experience is that physicists tend to frequently misunderstand physics that is outside of their own narrow speciality

???
Are you talking about physicists (faculty), or students?
Physics is a lot more connected than you think, and I haven't yet met a single physicists who doesn't know undergrad-level classical mechanics.

Edit: After reading your reply, I take that "sorry" back. For me, you're not someone worth spending even single second for. You can take this as an insult if you think otherwise.
Documenting Common JSON Formats
There is a good video on Flux's website that explains through an example. They make a very good point about dependencies between Models and Views.

According to that video, Flux isolates concerns in a more modular way than MVC.
You'd be surprised how true that is even for computers:

http://www.pcworld.com/article/249951/if_it_aint_broke_dont_...

It's why I keep reposting links like the Bitsavers manuals just in case someone needs them one day.
Flux isn't exactly easier to understand than MVC either.
I apologies, downvoted comments are usually interesting so I never ignore them, but my because my eyesight is slowly failing I find the greyed out comments very hard to read.
Thing about Google's services is the eternal dilemma between tech and business.

I suspect the techies that implemented the services initially had the best of intentions with them.

But then comes the suits further up the chain, that has as their primary motivation to maximize ROI.
This managed to get 15 points in under an hour despite being a not-extremely-interesting article from 2014 with an inconclusive 'update' that was simply a reportage of the subsequent discussion on reddit.

Details on the submission:

The account was created 698 days ago, but there is no record of any comment or submission until 240 days ago.

Submissions are infrequent (6) until 90 days ago; since this time there have been 30 submissions. Six of those are marked [dead] or [flagged].

Most of the submissions only score two or three points. Two were very successful.

Also starting 90 days ago is the account's run of three comments. All of them are root-level comments. The first, 90 days ago, is a lengthy quote with the words "Couldn't agree more" added to it. At 14 days, the most recent is a citation of a fact to a link with the putative source. The remaining comment, at 45 days, is a simple inference of a fact not mentioned in the associated article, albeit one that would impress me if an automated system had made it.

My own conclusion:

Probably fifteen of us clicked the arrow without reading the article because the link text contained the words 'Facebook', 'MVC', and 'Flux'.

I realize having written this that it's actually a bit small-minded and mean-spirited to think like that, and I would love to hear anyone's defence as to why this article about Flux would be a good one to read over a year after publication, if in fact I am wrong about the (current) value of the article in the opinion of anyone who has read it.
"In IPv6 when using address auto-configuration, the Interface Identifier (MAC address) of an interface port is used to make its public IP address unique, exposing the type of hardware used and providing a unique handle for a user's online activity." - wikipedia on ipv6. ipv4 is more fungible than your MAC address.
Fuzzing: "The program is then monitored for exceptions such as crashes, or failing built-in code assertions or for finding potential memory leak"

Fuzzing is more crude in that it doesn't really know what happens after providing the random value, it just tries to crash or fail asserts.

generative testing involves writing an invariant, in the test itself, that holds over the random values.

here are some examples of properties or invariants http://fsharpforfunandprofit.com/posts/property-based-testin...
I can write web services in Haskell, OCaml, .NET, Java, Ada, Delphi, D, Go.

All compile to native code and I don't have to fight with the borrow checker.

Rust needs a good story to be sold as alternative for web development.

We don't need system programming features in a web application. Unless maybe when offering a web interface to an embedded device, instead of coding it in C.

EDIT: Before the downvotes continue, I am not attacking Rust and feel it is good that it also gets web frameworks.

The point being that for web development there are already better alternatives and unless one needs Rust special language features, there isn't a compelling reason to use it instead of the more mature alternatives which also make use of native code.
It's great that someone is doing this. The person involved is affiliated with the Internet Archive, so they will know about their book scanning capabilities.[1]

Once they have the books in storage, the next step is to take a picture of each cover, and put those on line. With an inventory, people will be able to ask for (and perhaps pay for) digitization.

[1] https://archive.org/details/partnerdocs
The tech genie is out of the bottle, and the answer isn't more tech--it's getting people, and thus governments, to understand and champion these tools just like we do.

No, the answer includes better tech. OpenSSH and LibreSSL are doing good work in removing insecure codecs. HTTP/2 looks like it should do well, because no client implementation accepts plaintext. I’m hoping that protocols like OTR and Darkmail become more widespread.

PGP is basically unusable. You can use it to dump secrets on journalists, after you have trained the journalist. You can’t use it to lead a quiet, private life. I tried. It’s not integrated with anything, and nobody else uses it. It’s fatally flawed.

Being riddled with fatal flaws is an aspect PGP shares with the lucrative Certificate Authority system, with S/MIME, with the DNS security system, with IPsec, with cell phone encryption.

Worse, actual solutions are orthogonal to big business interests. Decentralized trust? Google has no need for this; Google has its own intermediate CA (which, through the totally broken CA model, means Google can issue valid TLS and S/MIME certificated for any domain in the world). Federated content sharing? Facebook has no need for this; Facebook needs all your data to keep it safe for you, and also to analyze and monetize it.

What we need is to follow the article’s plea: Truly understand that the network is hostile, and design our systems to make security the easy default. And drop insecure protocols already, wherever there is a viable alternative.
Amazon.

Really, everything else pales in comparison in terms of rigor and scale.
Yep, the vfs layer in most unixes won't let you use / or \0 in a filename. And for good reasons.
This site feels totally modern and up to date!
I think it's simpler than that: there's a war on between the SEO lot and Google. As SEO teams get better and better at mimicking a signal, Google needs to keep upping their game to let the valuable stuff get through without being drowned in about.com spam (sometimes the same text can be found in 10 successive clones of about.com) or companies upping their ranking. Then you get feedback loops as people's expectations adjust to the new reality.

Right now, if I type "!g clothes" my top result is missguided.co.uk; if I go to google.com and type "clothes", my top result is nastygal.com (ironic that both of these companies have "naughty" branding, when they are so good at spamming search results). Clearly both of these fashion companies have excellent SEO teams, but there might also be a factor of people expecting shops when they type a non-brand keyword.

DDG is also filled with shops (presumably affiliate links, since that's their business model) but the top/separate result is the Wikipedia article for clothing, which is actually informative if I wanted to read about clothes.

It's a good business decision for Google to have high quality search results. The problem with the previous search companies is that they sucked. Most/all of the top results were paid. There was little thought about relevance. Google won so hard because it allowed people a way to browse the enormous amount of information on the web in a structured way taking into account relevance. The ads need people to keep coming, which won't happen if other search companies are more relevant. The dynamic will be that whoever wins the search battle will end up being the new target for SEO spam and eventually develop the same problems.
On the one hand you say educating is not your job, on the other hand you are very concerned about misinformation -- which is a matter of education.

You thus contradict yourself for purely rhetorical reasons.

Worse yet, saying "you are wrong" is not correcting misinformation for the sake of onlookers. You need to tell them why -- which you failed to do.

I don't think you interpret English very well, and certainly you don't explain well, so it's impossible to see whether this is an area of physics you actually know or not.

So far, I am doubting that you understand this area well enough to correct others. All I see so far are two beside-the-point nitpicks.

Explain physics or stop kvetching. If it's not your job to explain, then it's unhelpful to say "you're wrong but it's not my job to explain!" Fish or cut bait.
You may be interested in the book Confessions of an Economic Hit Man, which recounts some stories of how the process was carried out by the author.
"Socialism for me, neoliberalism for everyone else" seems a common human trait. The people described in the article just seem a bit more successful at it, due to their access to wealth and power.

I've long been fascinated by the negative way unions are described in the US, while the unions that protect doctors and lawyers from competition aren't even described as such.
That is an excellent quote.

"If I know your sect, I anticipate your argument."

Put in modern terms, it virtually defines the combination of politics, marketing and labeling that defines our current system in the US.

We no longer discuss issues, we anticipate the version of the argument we're told to expect from the assumed "sect" and prepare a response to that. You can see this play out on Facebook or other platforms when you try to discuss an issue with someone and get a response completely unrelated to anything you just said.

Slap a label on a straw man, then campaign against that.
Spotify from terminal
This is like IRC and FB posts fused together. I love it. In traditional IRC you have many topics intertwined - very distracting / waste of time if you only care about a single topic and don't have time to sift through everything typed. Slack very much suffers from that same problem - you care about something important - and there's all that noise.

With the introduction of threaded conversations you could collapse and ignore threads you don't care about and drill into the details of the things you want/need.

Love it! Congrats Max and team!
State of the Haskell ecosystem
API limit :)
Pacapong == Pong and Pacman and Space Invaders
Biggest thing that nothing else has:

MORPHiS has TargetedBlock technology which enables Dpush technology which enabled Dmail:

Dead simple and fool-proof to use decentralized network hosted spam proof high performance uncensorable encrypted authenticated unsolicited messaging.

Email is deprecated already by MORPHiS as is.
No, assets are included in the byte count of these demos!

Not sure what you mean by RemoteJS though. You aren't allowed to load more JS code from the web.
It would likely be less effort to port those parts to Lua instead of the whole system to node. Does D3 even run headless anyway?
Reversi in Haskell: https://github.com/geon/Othello-in-Haskell/blob/master/othel...
I was listening to a story on the local NPR station about Octopuses the other week. The guest was a biologist and she had studied them for the past few years.

One (of many) interesting comments she made was that Octopuses can live quite a few years long if they're "fixed" (even right after reproducing). It does something to normalize their physiology so whatever makes them want to die after reproduction is nullified.

I was a great interview though if you're interesting in animal intelligence.

http://radio.wosu.org/post/consciousness-and-intelligence-oc...
An (Important) Disproof of the One-Time Pad
For those who aren't familiar with Paul Vixie, he's one of the pioneers of the internet:

https://en.wikipedia.org/wiki/Paul_Vixie
Estudio de Colombia relaciona el insomnio con antenas de radio
Strategies of Lucrative Apps
That restores some of my faith in humanity, thank you. We'll be looking at the kext today at work, but due to Apple's kext signing requirements I don't know how feasible it is to roll it out.
If someone expresses the sentiment that they feel powerless to stand up to those in authority, then they probably don't live in a democratic country.
Getting the “abc” right
so's your comment. the article makes an interesting point, while not riding the ruts you prescribe
Packet Capture, Injection, and Analysis with Gopacket
18F/USDS doesn't really work on the military industrial complex, but civil applications like social welfare. The beneficiaries of USDS's work are, for example, poor people who can get benefits more efficiently. In that sense it is "serving your country" like AmeriCorps or Habitat for Humanity or becoming a social worker. So yes, U.S. Cyber Command will use the same rhetoric and you shouldn't believe it, but this isn't that.
Keep in mind, you also have to remove just one unique copy of each set, and throw the rest away, being very careful not to accidentally throw out a "duplicate" that is actually a similar-looking, but unique, manual.
excelllent........
I hope we can fix this with sandboxing (maybe with containers, but maybe just per-process).

This is going to be the most exciting thing about SGX, which is allegedly coming out in a month, after many many years of anticipation.
"Most of the submissions only score two or three points. Two were very successful."

No comment on the rest, but that quote above probably describes my submission history and I do little more than submit things I think are interesting or might interest fellow HN readers. e.g., nothing out of the ordinary.

I've previously submitted a link that Paul Graham tweeted, and it was quickly marked as dead/flagged, so a number of dead/flagged links might not necessarily mean much either.
I rated 43 films, then selected "Top Picks for You" and got 0 results. So I decided to not watch a movie and instead go for a walk. Which turned out to be exactly what I needed. Five stars.
I find that literate programming is something of a code smell. If a program is so complicated that it requires that much commenting, something went wrong during the design process. The program should be the most concise and clear description of what is going on. That is the point of writing a program, to describe the problem to other developers.
Avoid Hardcoding HTTP Status Codes
I think the points about NIMBYism and fake environmentalism of the liberal upper middle class are quite insightful. It really would benefit the environment to have a higher population density in places like the bay area.
I guess it's based on context. I search mostly for JavaScript and HTML5 related things.