skysight-inc/HackerNews huggingface dataset:
>The telescope’s camera—the size of a small car and weighing more than three tons—will capture full-sky images at such high resolution that it would take 1500 high-definition television screens to display just one of them.

If that sentence doesn't sound particularly impressive, that's because it's wrong. Each exposure only covers 3.5 degrees, and the telescope will take a 15 second exposure every 20 seconds for hours. The full image will apparently be 8.4 terapixels.
http://ghcc.io - Tool used to continuously monitor a Github org for mistaken public commits (& lets you monitor repos you care about but might not be able to enforce commit-hooks for).
So you like Python.
Interactive map of people killed by the police in the US
I think it's more that it can be confusing for the reader.
How do the endresult code size look compared to handcrafted javascript ? 2x , magnitude ?
When I was in high school, my girlfriend texted me a photo of me kissing some girl (not her) who was sitting in a swing.

At first I thought "Woah who is taking secret pictures of me?!" but then I realized I didn't recognize the girl I was kissing in the photo.

So at that point I'm really confused -- there is a photo of me kissing a girl I don't know, in a park I've never been to. Photoshop? Is this a prank?

My girlfriend then quickly follows up with "Weird right? I met this couple at the park and he looks just like you from the side. From the front he has a bit of a wider face, though. And he's Italian."

Had she not told me that, I would have completely believed that I'd been photoshopped into a photo. I couldn't spot a single dissimilarity.

I wonder if any relationships have ended because someone's significant other saw what looked like them with another person.
Distributed artificial general intelligence app, probably something like using deep learning with a virtually embodied agent.

A digital circuit IP or maybe separate USB dongle that does path tracing in hardware, maybe based on procedural generation from a built-in Forth.

Various business and government ideas built on Ethereum, promoted with the intention of displacing existing more centralized institutions with decentralized ones.

A backyard exchange website where people can rent out or share their backyards for tiny house 'parking' and/or high-tech gardening like aeroponics or aquaponics, or whatever they want besides being a big waste of space collecting dog crap.

A unification of computer science, programming, and math. Or, a metalanguage and representation tying together classical programming and mathematical notation with interactive and/or visual programming, with the common part reused in all types of informations systems.

A new operating system for virtual reality.
Because anyone who ever says "I didn't think it was possible that I could be the victim of a data breach" is dangerously delusional, and in case I'm not being clear - wrong.

Also putting keys in (even a private) cloud-hosted repos is at least a step under what I'd describe as "very security conscious" for someone who self describes as working in the financial industry.
Amazon would save some money by doing this, since they usually reimburse "victims" of public AWS keys (at least on the first instance) and eat the cost.
im impressed how fast a bot fetched the key from github, set up a trillion instances and did what exactly on them?

edit: my guess, some kind of crypto currency mining?
Interactive Brokers and Tradestation didnt have much issues, but yes, getting filled on trades, especially options trades was a nightmare.
The 1% Career Advice That's Actually Useful
Mine bitcoin?
Here's a hypothetical, what is the real cost, he said they were using spot instances too. A huge spike in demand might have an effect on price, pushing the cost up for all legitimate users. As far as the reserved instances, they were there, not being used presumably. They don't really lose anything except possibly some electricity and bandwidth costs?
obviously someone is good at detecting it considering 6.5k in usage got racked up with data scraped within 10 minutes of commit
You can get a None type when you are expecting a String type... that is exactly the bug they are talking about. The fact that Python makes this problem BIGGER by allowing other types as well doesn't make it less bug prone.
Right? Who spends 12 years in the software industry and doesn't actually test their work after doing shit?
I'm using GCE (=Google Compute Engine), not GAE. I considered using GAE long ago (seriously testing it and writing a first version), but was scared off by the vendor lock in. I don't want anything to fundamentally depend on a 100% open stack. GCE's pricing is competitive with AWS and Azure.

I did run SageMathCloud on a lot of dedicated hardware that I hosted at Univ of Washington from March 2013 until May 2015, but had to stop due to University rules. I had planned to buy computers and rent hosting in a data center, but when I looked into the costs of commercial dedicated hosting, bandwidth, and the time and people required to maintain physical hardware with the availability requirements I have, it started looking much worse than using GCE (especially as GCE prices kept dropping). I don't have any employees at all, so when something goes wrong with the hardware, I would have to drive there and fix it myself. What if asleep or traveling across country? No matter what, the odds GCE will fix any problem in a timely manner is much higher than the chances I will. The middleground is something like Rackspace, etc., which doesn't look that much better regarding cost than GCE. Of course, the price of hosting on GCE is a lower order term compared to the price it would cost to pay myself to admin everything, if I wasn't doing it in my spare time.... and then there is development work too.
All the SquareSpace hosted web sites are down
Why does somebody pushes AWS Keys into a Git Repository? Why should somebody ever push some Authentications?
Currently when I code an app I create a database with name of the app and have new credentials with just name:name so that the only thing that I check into my config if the app needs a application.conf or resource.conf are default username:passwords for development, so that bootstrapping is easier. However EVERYTHING else gets read from the Environment Variables that even Works on Windows since Visual Studio has a Feature for that, but be aware the sln file we keep the values. So however never ever put anything into git / source code repo which shouldn't be read.
"letting people shoot themselves in the foot like this over and over"

Stop doing it in the first place, problem solved. I don't see why GitHub or Amazon need to hold my hand through a serious process. It would diminish the importance of what you're doing.

Also, this guy didn't just use AWS keys...he clearly used AWS master keys...which has not been the recommended course of action for AT LEAST THREE YEARS...if he had used a proper IAM user with only the access he needed, this wouldn't have happened. Sorry, but that was just irresponsible.
Could you add a strikethrough and an addendum noting that it is like Haskell's nullPtr? It can be educational for others to see why you removed it.
This is awful. Some reasons, in no particular order

- Straight up, this isn't data oriented. You're dealing with one object at a time.

- This code is vastly harder to understand in its entirety, much less extend, than the data oriented approach. This is template craziness to it's fullest degree, and what it's doing is going to be unfamiliar to the vast majority of programmers. Hell, I've read an article, and have been staring at for 15 minutes now and I'm not fully sure. Admittedly, I'm a bit rusty with my templates, but that's a very bad sign for maintainability.

- Memory access patterns aren't the only reason to do DOD, a big one is being able to easily simd optimize your code. This defeats that.

- If you're not going to simd optimize your code, then storing everything as SoA is often not a great idea (you want to group the things you touch at the same time, so that you have fewer cache misses).

- You can still have encapsulation with data oriented code. It's just encapsulated at a different granularity (you encapsulate access to the data arrays).
Apple's Ad Blockers in iOS 9 Raise Tensions with Publishers
You've probably started using it more recently, but if you want to see what it used to be like, check out this XMLHttpRequest wrapper and see how many browser bugs it fixes:

https://github.com/ilinsky/xmlhttprequest/blob/master/XMLHtt...
what right does a government has to force a private employer to fire their employees

I'm perfectly fine with that following due process for the specific matter pertinent to the firing, or as part of an issued sentence or punishment for an original crime.

E.g., sexual predators (and no, not someone urinating in public) not working in seclusion with children, or those convicted of business fraud and related crimes not being officers of a company, losing accounting, actuary or similar licenses, etc.

But "thou shalt not work" doesn't cut it.
lol the null / undefined issue in javascript is further exacerbated by the fact there is no int type and everything is just a "number".... yet the number 0 is still treated the same as null/undefined by js special forms like "if" and "==". This is particularly hilarious because it leads to some null-check bugs like:

if ( user.getScrollPosition() ) { whatever(); } else { die(); }

99% of the time, the code would be fine, but if the user scrolls just right, the whole thing would die. Stuff like this is literally death to debug because this bug is effectively indeterministic and can't be reproduced.
>In the U.S. we are culturally taught that we are supposed to dislike our work, especially if it isn't prestigious. If you dance around and have fun at work in the U.S. people look at you weird and generally discourage any such thing. But there's no reason not to bother enjoying your time.

Generalize much? While I don't doubt your experience, I don't think this is a very accurate characterization of the culture distribution across the US.
Nakōdo – A first-of-its-kind translator search engine
It looks like X doesn't have any hardware acceleration for forwarding. With 64b packets, X can only push 130k PPS while ERL should do at least 1M PPS. This doesn't matter in a home network though.
I use Todoist for a simple mobile solution and link it to a spreadsheet with IFTTT.
Maybe not, but it think it is the web service company's responsibility to alert and contact you on suspicious activity ... like a sudden $6,000 jump in service usage of spot instances in regions you have never used before.

I mean a quick automated email would be enough for you to take action. The way it is set up now, you pay for it and humbly beg Amazon to deduct those charges if they see fit.
Rust's error handling (try! and error-interoperability) do this well.
iFixit will inevitably perform a teardown. You are aware of iFixit?

> Microphone was a guess actually. But I would place a bet on it that it is there.

I'll take you up on that bet. What are your stakes?
Doing a PIC on precompiled code is tricky, especially when you want to enforce a security model.

Global caches perform reasonably well for many cases, and if you can exclude the long tail and keep the common cases then you'll get okay performance. Combine that with static analysts to deal with the cases you can resolve at compile time and you do okay.

I'm still a fan of PICs when used with a JIT, but I'm not sure they are always the right answer.
Is it really on the web service companies to make sure you (the developer) don't do anything stupid?

Yes. The web service company should look at it as basic security - if people are using their service to discover private information and use it to defraud their users, even if the users have been stupid enough to upload that information publicly, the company should do what they can to mitigate the problem.

If I post a photo of my credit card on Twitter I would expect my bank to limit the damage as much as possible by declining obviously fraudulent transactions. Ultimately it's my own fault, and I would be liable for the costs, but that doesn't mean the bank should just let it happen if they can do something to stop it.
The original ("Government officials in Amherst County, Virginia can now require employers to fire any ex-con") at 93 characters wouldn't fit HN's length limitation (80 chars).
The financial industry's major corruption stories seem to never end. They undermined the world economy and even LIBOR was fixed. Its participants portray themselves as champions of the free market and technical geniuses. How is this the 'free market'? It seems more and more that it's merely theft, and some are better at it than others.

Yet I read about its particpants complaining they are "demonized", and every time regulation or oversight is suggested they are outraged and say it will ruin their hallowed 'free markets'.
The most important part of this story seems to be glossed over – how did an IAM key that the author insists only had access to the Alexa service get used to spin up EC2 instances?

Either the author is just mistaken/lying about that point, or there's another leak he doesn't know about, or there's a serious privilege escalation vulnerability in AWS.
The Blog Post for People Who Actually Want to Do Shit
Maybe secure keys are a lot secure than passwords?
There is not. Linux users have to use Wine or a Windows VM.
I agree, and it seems this sort of thing is already in place on AWS, but the author didn't heed the first two warnings. Short of just blocking things from happening and risking inconveniencing other customers, I don't see much more AWS could have done that would be reasonable.
Freedom to Fail: Heidegger’s Anarchy
Simple question to the founders, in a world where software is increasingly the sum of not just code, but cloud services and APIs; how does Sandstorm scale to real-world SaaS? Are you going to require your users to configure lots of API keys and services manually and manage these vendor relationships?

How does Sandstorm create an update-model for SaaS when developers are deploying hundreds of changes a day?

I like the idea, but I wonder if this idea would have worked better in an era when software wasn't always continuously evolving to the needs of customers
> Is it really on th web service companies [...]

Yes. Or, it's not so much a responsibility as it is an opportunity. I'd choose the provider that stops me from shooting my foot.

I assume AWS has spending caps for each account. My credit card company blocks my card and calls me if I spend in a suspicious pattern. And so on.
If you're keeping your keys in source control, you're only one mistake away from a disaster. It could be your own mistake, a bug in a VS, an error in GitHub, a mistake by a teammate, anything, really.

It's similar to driving your car too close to the car in front - you will get away with it most of the time and get lulled into a false sense of security, but eventually it will catch up with you.

Don't be one mistake away from a disaster. Make room for at least two.
AWS SDK for .Net supports named profiles for VS so your source check in only contains a profile name. If you hard coded your IAM or account keys or stuck them in the app.config you're simply doing it wrong. There is no excuse. It's all here: http://docs.aws.amazon.com/AWSSdkDocsNET/latest/V3/Developer...

Also if you use a proper IAM profile locked down to specific resources then you wouldn't expose your entire account. The author stated he didn't use EC2 so why wasn't the key/secret pair an IAM account with a policy set for minimal access?

What I'd worry more about is that the VS bug exposed private source code, data and proprietary intellectual property.

We use github and I worry every day someone will public fork one of our repos by accident. That would be a grave fuck up but it's waiting to happen. We should have stuck with centrally controlled active-directory integrated SVN from a security perspective (even if it is a pain in the ass).
GitHub is a service. Its not their job to offer me issue tracking, or pull requests, or really much of anything. They CHOOSE to offer me things, and if those things are interesting, I CHOOSE to pay them. As users, we can certainly declare that we believe AWS key detection to be of foundational importance to a code sharing community, and signal them to thus take action or risk losing us as paying customers. I would certainly feel better if this was a feature, given its apparent ease of implementation and huge head aches it would solve.
That is not an option. Things like arrays need to be allocated with a default initialization and then filled.
GitHub is a value added service.

Making sure I don't do something stupid and expensive is a value add.
It's not "on" them but it would behoove them to perform better than this tale suggests. And they are not doubt capable of such.

Or just waive the charges.
Well, it would be pretty simple to test if they have access to information "out of body" that they didn't before. Put them in the scanner or whatever, put out a card with a freshly-invented message, see if they remember it when they come out.
The point was that they both created models of hardware, software, error states, and so on to use to ensure correctness of the software at every state. They even designed a safer, C variant and compiler to attempt to knock out that risk. Past that, they used microkernels and modular software (esp privileged) to further reduce risk + ease analysis.

So, the takeaway was that whatever code you're looking at better represent what's actually going to happen on the machine when it works and when it doesn't. Bottom-up verification methodologies like the above help to achieve that. Merely coding what you think works and proving that code has no common defects isn't enough.
This is what you have to do to concatenate a string with another macro:

#define VARIABLE 3
#define NAME2(fun,suffix) fun ## _ ## suffix
#define NAME1(fun,suffix) NAME2(fun,suffix)
#define NAME(fun) NAME1(fun,VARIABLE)

int NAME(some_function)(int a);

From:http://stackoverflow.com/questions/1489932/how-to-concatenat...

C preprocessor can be confusing at times.
> Why does somebody pushes AWS Keys into a Git Repository?

If one wants to use version control to track credentials, then this makes sense. Why would one want to do that? In order to track versions of one's production system. This enables things like one-shot rebuilds.

Now, it's obvious that such a production repository should be separate from one's development repo(s). And one could make a decent argument that it should never be pushed someplace like GitHub anyway, even as a private repository.
The profit margin on AWS is stupid high. It costs Amazon nothing but power and opportunity cost to refund unintended use.
> How did we get to a place where no one seems to believe this anymore?

It's technology's fault. Before the advent of widespread computers capable of indexing large amounts of data, in order for someone to know a person had a felony, they would have had to know where you were convicted, travel to the courthouse in that county, and go through stacks of dusty paper files.

This struck a good balance between making court records public (anyone can look at them), and the privacy of individual defendants (few people bothered because it's time-consuming and inconvenient, therefore expensive).

Of course software's eaten this market, there are companies that have digitized and indexed all those public records, and now you can run background checks on people with a few mouse clicks and a few bucks on your credit card.
> Why does somebody pushes AWS Keys into a Git Repository?

Wild speculation, but this is a side effect of "developer" centric operations. Everything is done via code, and developers are instinctively trained to check in code.
Sure, lists make a decent "poor man's Maybe"; and many dynamic languages have facilities that make that a decent solution. In dynamic OO languages, there's some Maybe/Optional-specific operations you might want to have to more clearly express certain patterns which make it with having specific types.
From the article: "It’s just a key-value store that you #include in your code. Intuitively it seems like it could be a building block in constructing a full blown relational database server."

IIRC, that's precisely how MySQL started.
Embarcadero released RAD Studio 10
1) Seems like an inherent risk of closed source tools.

2) Someone other than the OP should pickup/waive the tab.
There's a huge amount of value in a service that insulates you from mistakes like this. You really, really have to know what you're doing with EC2 because it is a loaded gun.

Personally, I don't like using things that are covered in spring loaded booby traps that require eternal hypervigilance in order to avoid nasty financial consequences. Certainly not when deploying something that would be right at home on something like Heroku.
Side question: is there any similar cloud service with hard billing caps?
Do you test the functionality of your git client or code editor? I personally generally expect them to work, as do most people.
Someone else in a thread above supposes that they actually published amazon master keys, rather than an AWS particular IAM role. The author of the post states they didn't even use AWS prior, so they are most likely not aware of such things.
Here is what is wrong with Option.

option.ifPresent(x -> System.out.println(x));

So instead of just checking to see if it is NULL you want me to create an instance of a specialized class that holds my variable that has a method that acts like an "if" statement that I need to pass an anonymous function to that receives the value I already have?

Why not just do:

x && System.out.println(x)

or:

System.out.println(x) if x

Or if you want to skip over the rest of the logic if it is null:

return unless x

System.out.println(x)

I don't see why I need to introduce a new type system and complicate things.

For default values you want me to create an instance of specialized class that holds my variable and has a method that allows me to get my value or return a default value?

option.orElseGet(5)

So instead of a memory lookup I now need the overhead of an entire function call?

Why not just do:

x ||= 5

Or better yet, just put it in your function declaration as a default value:

myFunc = (x=5, y, z) -> ...

The one benefit I see is type safety but it is extremely rare for experienced programmers working in dynamic languages to have bugs related to type.

You are layering on abstractions and forcing programmers to go through hoops just to get at their data. It is more complicated and increasing the cognitive load.

There's also the fact that you are going through functions and classes instead of just memory accesses. This makes code less performant as well.
> Even for private repos, it's bad practice to commit private keys to source control.

Is it, though? Committing them to the same repository as one's code lives in, sure, but committing them to a separate production-deploy repo seems okay to me (although I'd much prefer that private repo never to hit a centralised service like GitHub).
> Likewise, I think that in Scala and Swift, null is only present for compatibility purposes, and idiomatic code does not use them. I'm not sure about F#.

I believe though that with the exception of Swift, null can infect these language's quite easily via the FFI, and the guarantees aren't as strong. I haven't used them much though, so I could be wrong.
Real world use review of Java G1 GC
That is good to hear, but it also means the headline is a little on the click-baity side. This is a bug that caused a lot of headaches and cost time to fix, not one that cost $6,500.
It would probably be easy for Amazon to offer an automatic key blacklisting feature....
Regular hours for the NYSE are 9:30am-4:00pm (6.5 hours). 4-6 hours in that context is quite significant.
Driving whilst consuming five Whoopers and fries may be.