skysight-inc/HackerNews huggingface dataset:
It's interesting work. It's what my niche would call medium assurance software: a regular development approach that selectively uses higher-assurance tech or practices to produce stuff with fewer defects or risks. Aside from issues in x86 or security policy, the other big risks it will face are how it handles error states, how much apps can affect its internals with function calls (static helps), covert channels (esp timing), and what effect compiler has on it. I recall IRONSIDES was "provably immune" to single-packet DOS and correct W.R.T. specification thanks to SPARK... until a compiler bug decided differently. ;) Ada really needs a compiler like CompCert C or FLINT ML for safety/security use-case.

Good news for people wanting to try it out is that it's been integrated into Genode OS per recent newsbite:

http://genode.org/documentation/release-notes/15.08#Genode_o...

They claim it's also ready for day-to-day albeit still early so problems will happen. Patient, early adopters and contributors are target audience. Have fun! :)
Hackers Stole the Biggest Number of Apple Accounts Ever with iOS Malware
Wanted: Programming Models for the Cloud
> > I think the article states that he did //report on it// for his newspaper.

> I don't see that in the article.

It is at least implied:

> "For the last year of the Biafran War I was sending... both journalistic reports to the media and other reports to my new friend," he said.
I remember reading an interview with either Dunning or Kruger at one point. They were really disappointed that everyone had used their research to point fingers at others.

In actual fact, the authors had hoped the real value of their research would be in getting people to question themselves.

I.e. Instead of saying: "look at that dumb person, he doesn't know he's dumb."

The authors hoped people would say: "what if I'm not as smart as I think I am?"

I guess the "other people are dumb" meme is so much more comforting, though.
Different beasts. A direct comparison is unfair to either of them.

Uglify does minification and dead code removal. That's really it.

Closure does a lot of type checking, code rewriting, and has a very specific subset of JS that you'll have to use if you really want to get the best performance out of it... and does minification and dead code removal.

If you just want minification/dead code removal then Uglify is waaay faster, javascript native, and almost as small (105-120% of the size of Closure compressed code, depending on the code). It also doesn't use the JVM so that can make dep management/ops simpler if you don't already have java in your stack. YMMV.

If the advanced stuff sounds like something you'd want/need (if you have a large project and don't mind writing to the Closure optimizations) then Closure is certainly worth looking at. It's very good at what it does.

Choose the right tool for the job and all that.
Many of the other recommendations on this list are similarly 'conservative'. Basically it's an attempt to reduce surface area as much as possible.
I'm not sure if there is an official explanation but a pretty good analysis of it is in John Siracusa's review of OS X 10.7 (Lion):

http://arstechnica.com/apple/2011/07/mac-os-x-10-7/12

http://arstechnica.com/apple/2011/07/mac-os-x-10-7/13
Wow, that's a really good, easy-to-understand description of Ethereum.
People will learn that market share is not a proxy for technical superiority the precise moment they find themselves advocating something with a small market share, and not a moment before.
By all accounts, it works as well with iOS as the Pebble does, which is to say "Barely."
What is the point of this sarcasm? It's not even clear at whom it's directed: are you suggesting that Forsyth was doing something wrong by reporting humanitarian issues when requested to do so by his government?
See, this just seems overly investigative. If they were physically fusing the arm to your body, sure, that's a reasonable time for the FDA to investigate. But just because it is related to your body in any way doesn't warrant that sort of careful consideration. Similarily, if the radio was controlling a pacemaker, I wouldn't want it using bluetooth, I'd want something FDA approved. If it's an arm, I probably wouldn't want bluetooth (stupid pairing issues....) but something like the xbee format would be great, not some proprietary and less reliable RF protocol.
For weight loss/gain? If you're in a caloric deficit you will lose weight, if you're in a surplus you will gain weight. I'm not sure how much simpler I can state it.
Ask HN: What is the highest fidelity timestamp of a stock exchange trade?
It appears that most exchanges use Price-Time-Priority in their matching systems. Does anyone know what is the smallest increment exchanges use for their timestamp (e.g. a single millisecond)?
Ceres is big, so the rover can travel only a small distance. Where are the interesting point to visit? Where is the safe terrain to travel? You need a preliminary photograph mission.

Also, the distance from Ceres to the Sun is 1.8 times the distance from Mars to the Sun, so you the solar panels need to be 3 times bigger. (It has almost no atmosphere, so you'll get a bit more light. It has a lower gravity, I suppose it helps to improve the millage, but I'm not sure if the rover will jump too much.)
As Moore's Law wanes, what makes one semiconductor design stand out?
Banks used to launder money? Shocking :-)
er... that's not in the client. That's in the cloud. ie - on servers.

That's just a fancy way of distributing data across services. It's not client-side processing of the data: it's server side.
Accountant services
> who remembers CEOs of Intel

You're right. We should pity those poor CEOs of Intel who have nearly no recognition except for daily news articles and a single wikipedia page, leaving their wretched souls with merely their 8 figure annual salaries to comfort themselves.

Surely we can do something to get them what they really deserve? Won't someone please think of the Intel CEOs?
Check out plovr http://plovr.com/
No. I think the phrase is "up and down like a whore's drawers":

http://www.bankofengland.co.uk/boeapps/iadb/Repo.asp

Presumably plenty of scope to make money in (eg) forex if you know about interest rate movements a few days in advance.
In no way does this stop people being 'the product'. For that to be true it would have to stop google amassing personal data on you, and stop them deliverering advertising to you everywhere.

This goes nowhere significant towards that goal.
Technically ~21% more reduction (e.g. saving 15k on top of 70k), but I suppose specific files probably deviate more than that anyway.
How to measure stupidity?
how is this not considered fraud?
Did anyone else get a kick out of seeing these two in a row on the homepage?

Closure compiler parses JavaScript code, removes dead code, minimizes what's left

Security concerns with minified JavaScript code

One of those moments where I pause to wonder if I should even read further haha.
Ask HN: Monorepos in the wild?
I've been reading up on monorepositories vs per-project repos and blog posts often namedrop google and facebook as places where everything is in a single, monolithic repository, but I didn't find any solid references to back that up.

Anyone here working on a monster-scale, multi-project/multi-component product that is managed with a single repo? what are your experiences compared to per-component or per-project repos?
Google Votes: A Liquid Democracy Experiment on a Corporate Social Network
Palo Alto Networks Blog
Actually if it was started at Google today, it probably would use Java or Go. Very few development tools are written in JS at Google. Angular and Polymer (and maybe Traceur) build tools being the exception. Our internal tooling works far better with statically typed languages.

It should be rather trivial to have a gulp/grunt task that installs Java and runs CC. CC could even be packaged as a EXE if desired.
I also can't stand when people down vote and not comment. I think that ruins the communication of ideas and just frustrates uses. I didn't down vote you.

I would say that when one thing is legal while others are illegal makes people think the legal thing is not dangerous when in fact it might be more damaging than other illegal drugs.

I don't drink and I choice to experience all emotions, the good and the bad. Other's just wash thema way.
Everything you just said is absurd.

> The thing is, less fructose, more fat, fiber and protein will put someone in a caloric deficit without them trying.

Silly to assume this would be true for all individuals and a broad statement.

> Remember that it isn't calories in calories out, it is calories absorbed calories out.

All digestible material will be 'absorbed'. If your body couldn't digest food fully you would literally shit out chunks of undigested material, unless you have some kind of condition that doesn't happen.

> A caloric deficit happens naturally which is why it is so effective.

I'm not even sure that this means. If caloric deficits happened naturally we would all slowly starve to death.
try per day, or per week?
Commodity CDN's will always have some amount of cache misses. For most services that's fine; there isn't too much additional overhead in serving a static Javascript file a few times. If you're doing computational work for each request, you want to try to avoid unnecessary work as much as possible.

It's helpful for us to hold onto master images after fetching -- these images can be large and may not be served to us from a particularly fast source. The speed of light does come into play, so anything we can do to shorten distances is beneficial. This cache layer respects the Cache-Control headers of the original objects, so the behavior there is under our user's control.

There's a similar need to cache rendered output ("derivative images"), because while most operations are very fast they do still add a little bit of latency. This helps with our rendering capacity, but it's really about improving time-to-serve latency wherever we can.

We evaluated a few open source object stores and decided on MogileFS. It largely came down to the simplicity of what Mogile does and how it does it. We figured that we could rip pieces out and adapt it to our needs with a lot less work than more elaborate systems (like ceph). With that said, we didn't actually do an implementation test with ceph, so it may in fact be great for our use case.

Not sure off-hand about the number of servers deployed for use with Mogile, but it isn't a gigantic deployment. We aren't storing anything that can't be re-acquired, so we can adjust our storage to hit particular cache hit ratios rather than storing the enormous long-tail forever.

The first generation of storage servers are 16 core / 32gb / 6x4T systems -- more like what I would use for computationally related storage like HDFS than a large object store. We could stick with this hardware spec, or we might move to SSDs if latency becomes an issue (I personally doubt it will). We might also move to more dense systems, with more like 20-30 drives. That's all based on our metrics and how things perform in practice.
When the Stock Market Falls, What Do Venture Capitalists Hear?
While I agree with him on a lot of things, this isn't one of them; security is all about layers, and it's not like OpenBSD hasn't steered clear of other forms of sandboxing (like chroots and systrace). This doesn't mean that virtualization should be relied on exclusively or even near-exclusively as a defense (which is what I suspect Theo was more objecting to, along with the point of "well if you can't write a secure operating system, what makes you think you can write a secure hypervisor?"), but rather that it should be used as an additional layer on top of (or rather, underneath) a bunch of others.

It's like bulkheads on modern ships. Yeah, if you get a hole in your hull, you're gonna be in some (literally) deep water, but that bulkhead (so long as it's built right) could mean the difference between limping to the nearest harbor or sinking to the nearest seafloor.
Designing a garbage collector in Rust
Gene leads to nearsightedness when kids read
Indeed - surface gravity of 0.029 g and escape velocity of 510 m/s (about 1000 mph) according to wikipedia.
Does the Wearality Sky have any kind of input mechanism like the Google Cardboard magnet? I wish Wearality was taking preorders, I like so many aspects of the product (open-source, wide FOV, low price).
First question: "What is your company name or website?"

Pretty sure that guarantees you'll get watered down answers for the rest of the survey... At least, I'm not comfortable associating my company with Ruby advocacy/disparagement.
I've found that playing back a recording at 90% speed can make speakers sound strangely hostile and sarcastic...
Show HN: Sankey Visualization Creator
Donald Trump and the White Nationalists
Exactly! We should all just give up and go home!

/S
I don't think the TEF has a very large effect honestly. I think the other things that come with a high protein diet such an increased lean mass probably have a larger effect. Still in most low carb studies the low carb group is really just the high protein group. It's pretty obvious that you can't draw any kind of reliable conclusion if you change more than one variable
Cisco 2015 Midyear Security Report
In addition to a new VMM, why not enable OpenBSD to run as a guest VM on AWS/Xen?
Now if only they could eliminate defecating in the streets. [1]

In India, nearly half of the population
- more than 590m people -
relieve themselves in the open

[1] http://www.bbc.com/news/health-33980904
Once you've built a system that works fast enough to handle image rendering work on-demand, then adding batch or precomputational features is largely just creating requester logic to ask for the image before the real demand arrives.
Personally I dismiss any "medicine" that only has anecdotal "evidence" until there is an actual successful clinical trial.. and even then just consuming the raw honey is probably not the way to go since you can't know exactly the concentration of whatever the active chemical(s) is/are. If you have a disease, see a doctor.
Too bad it's CUDA and not OpenCL. I wonder what the rationale was. Seems natural to use an open GPGPU framework for a Java application.
I don't agree, it seems to be a subtle attempt to spread the Office brand by means of trying to make it's styling more prevalent. The first line of the release seems to point at using the UI outside of Office as well as with add ons:

Office UI Fabric is a responsive, mobile-first, front-end framework for developers, designed to make it simple to quickly create web experiences using the Office Design Language.
> They are telling you what you can and cannot do with THEIR NETWORK.

The hotspot is from the phone, not the network, so the only way they can tell is if 1) the hotspot is reporting it to them or 2) they are doing packet inspection.

Either way, T-Mobile is effectively limiting what I can do with my hardware and hiding behind a bad definition of "unlimited" with the caveats intentionally buried in a wall of legalistic fine-print.

Does this seem right, ethical or moral, to you? Because it kinda smells bad to me.
Snapshotting is sorta orthogonal to virtualization though, isn't it? Just snapshot at the storage level, no?
Yes, I understand that local laws would still apply. I've mentioned in other comments that this wouldn't be a replacement of those.
I think the main reason that it's a best practice for people to minify their JavaScript files is for a smaller download size for the client. With a smaller download size, the page is able to utilize JavaScript at an earlier point and be ready for the user to interact with the page. Minifying and gzipping JavaScript yields a greatly smaller file size than without either. Big win for performance.
It's not bad; I inadvertently did this trying to use the hacks to get my Moto 360 to work on my iPhone several months ago (which kinda worked but was really shitty). I just installed Android Wear on my old Android phone, paid it, it offered the update pretty quickly (though I can't remember if there is a way to force this or if it's only automatic), installed it and then I reset it.
anybody knowledgeable could comment on the list of disable services and agents? I can't find a good site discussing what each service/agent is and what it is for
Why This Correction Will Likely Lead to Another Painful Bear Market
I was tested for learning disabilities around the 2nd grade. At the end of the process they offered to let me skip the 3rd grade (I declined, but I only recently came to regret my decision).

I don't recall if I figured this out on my own or someone trained me but I do know this was about the time I started a process of metacognition, wherein my internal dialog became a deliberate process of repackaging the things the teacher was saying into something that made sense to me. Instead of trying to cram their mental model into my head, I would build my own hypotheses and test them against all the examples that were provided, then abandon them for a new one if they didn't fit. [Edit] And when I got the answer wrong I would halt the presses and try to figure out why I was wrong. I used to joke that if I wanted to remember something forever all I had to do was get it wrong on a quiz and it would stick in my brain for eternity.

Prior to that I assumed if the teacher said something that didn't make sense that I was stupid. After I assumed that the teacher was just speaking a foreign language and I needed an internal translator. I went from almost held back to honor roll in the space of about a year.

(this trick, incidentally, made me an exceedingly good troubleshooter in my professional life, and "If you can't figure it out go ask hinkley" is common strategy almost everywhere I've worked. Not only can I probably solve your problem but the mental tax is lower on my than it was on you, because it is my idiom to process facts this way. I am literally always thinking about thinking).
I imagine everything said in the article also applies to the Nix package manager[0]. One of its nice features is the Nix expression language (aka Nix) [1]. It has an elegant mixture of purity and pragmatism. I imagine guile scheme would have a lot more integration opportunities outside of just system/build/configuration management. It'd be interesting to see Guix expressions that actually mix other scheme libraries or concepts, rather than just taking Nix expressions and removing the syntax.

[0]: http://nixos.org/nix/
[1]: http://nixos.org/nix/manual/#chap-writing-nix-expressions
This looks great. However for a document that is so hyper vigilant about preventing little phone-home-to-Apple behaviors, isn't there some cognitive dissonance in the fact that it recommends installing Google Chrome? What am I missing?
Indeed. Why not?
I had to choose between PERL, Python, or Ruby. PERL was powerful but try reading others' stuff. Maintenance phase is important. Python was productive, readable, and fast, even for newcomers. Ruby + RAILS particularly were similarly kicking butt. I decided on Python because there's lots of effort pouring into it across the whole field: JIT's/compilers; numerical computing; scripting; web apps; cross-platform sys apps; integration with cutting-edge languages (eg Julia); security tech; cloud runtimes.

That plus its good community, long time existence, low defect rate with static analysis tools (i.e. Coverity), and increasing usage in mission-critical applications (eg Bank of America). Seem like an excellent baseline until something better comes along. Plus, if your writing business code, there's a good chance what you write might stick around for a decade or more. I pity the poor soul that would be reverse engineering Java, C#, etc code to support and extend legacy 10 years from now. Python with decent documentation might be way easier on them, though. :)
Nowhere did I state that metabolism doesn't vary across individuals.

On the contrary I think that individuals have vastly different caloric requirements.

None of this means that a caloric deficit and increased activity won't cause all individuals to lose weight, just that the absolute value will differ between individuals.
> The title of this submission omits the best part

We reverted the submitted title ("Closure Compiler parses JavaScript, removes dead code, minimizes what's left"). Submitters: please don't use the titles of HN stories to editorialize. If you want to say what you think is important about an article, please do so in the thread, where all commenters are equal.
The biggest mistakes people make when choosing a life partner
Stocks in the United States generally aren't listed outside of NYSE and Nasdaq though (unless you count BATS).
Don't talk smack about IE 5.5, unless you think AJAX was a bad idea.
It doesn't deal with negation very well – the phrase "I have never had a sad day with you" is marked as negative because it contains the word "sad".
and why can't you do that with containers or jails? or filesystem snapshots? or instant re-deploy to a known good state from ansible/puppet/salt/chef?

Just because there's a nice mouse-navigable GUI for entry level Windows admins doesn't mean it's a good solution.

if you need snapshots for doing updates it's because your software is fragile, undocumented, and you don't have a deployment procedure. Fix that, and upgrades will be easy and not scary.
Judging from the number of people jumping on to Unreal and Unity, I don't think it does go without saying. And if you use the marketplace assets, you're going to end up with a game that looks like everyone else's game that also uses assets out of the marketplace.

It makes certain aspects of connecting art assets with gameplay code easier, but I don't think it at all makes it "very easy". We're still talking about a non-trivial amount of programming here. If you're not a programmer already, gameplay code is still going to be a struggle.
Just checking: are you saying that minifying and gzipping is better than gzipping alone? Where better means smaller downloads for the client?
Ask HN: Foreigner Health Insurance
I recently moved back to the US, this time on an O1 visa. I'm the cofounder of a startup, bootstrapping, living as frugally as possible. Something I'm having a hard time finding is information on a sensible personal health insurance plan for non-resident/non-citizens. Previously I rode out my student health insurance plan from school. Our company (my "employer") is too small to have a corporate insurance plan that I can get on. I have neither parents (in America) nor dependents. I'm a fairly healthy and fit 26-year-old male with no foreseeable medical issues. I have a somewhat flexible budget, but basically I want to make sure I'm covered for emergency dental and medical at the most reasonable cost.

Obamacare and other standard health insurance quote sites, besides being spammy as hell once I give them my phone number or email, do not address non-residents at all.

Does anyone have experience in this? A place where I can look for relevant information?
Passenger mutations in mouse models of disease confound studies
That's amazing. No more 70 vendors, just take your apps and host in your server. Cheaper and data under your control. I'm a big fan of this project :) Congrats!
I have been using Google Docs for the last year at my new job. It has worked out reasonably well as it is primarly me that reads it. But it is super easy to cut and paste (incl images) and as well as share docs. Auto-save, accessible on my phone etc etc.

But, I would love to hear what others use as I am not convinced Google docs is necessarily the best way.
Well it does say "Google stridently denies that it’s tracking any of your activity on the internet with this router."
Malware infecting jailbroken iPhones stole 225,000 Apple account logins