skysight-inc/HackerNews huggingface dataset:
> I think you're under a mistaken view of what OS distro packages exist for. The "system ruby" and other such packages aren't for end-user (or developer) consumption; they exist for the sake of other system packages, in case a piece of system software needs to run some Ruby code.

Read the conversation thread. Original parent (and many of his respondents) are explicitly complaining about secondary package managers, and that distributing any software, not just "system software" via any mechanism other than the distro-specific package management system is "for chumps".

I completely agree that most application software should be distributed via some method "above" the system-specific page infrastructure. I'm attempting to explain to people who don't agree with that just why their Apt-Get Uber Alles desire fails in practice.
This has been done before: https://en.wikipedia.org/wiki/INTERCAL

"The INTERCAL manual gives unusual names to all non-alphanumeric ASCII characters: single and double quotes are "sparks" and "rabbit ears" respectively. (The exception is the ampersand: as the Jargon File states, "what could be sillier?") The assignment operator ... is in INTERCAL a left-arrow, <-, referred to as "gets" and made up of an "angle" and a "worm"."
Comments moved to https://news.ycombinator.com/item?id=10279853.
Prepare your audience for the name/domain change. Write a newsletter, blog post, social media post, add a banner to your website etc.
Do we want to live in a world where we have to actually read things like Apple's terms and conditions instead of just clicking I agree?? Only trivial stuff should be in fine print imo. Something concerning the charging of your credit card should be clearly visible.

From reading the link below to the JustFab investor though it doesn't really seem like they are intentionally being that deceptive but idk
Well, driving around in a $300k car that you can't explain purchasing is a HUGE clue that you're a drug dealer but it's not enough on its own to charge you with anything. You won't get thrown in jail until you cough up the location of the stash house based on the car alone.

What do the proponents of these encryption laws expect the penalties to be for 'suspicion of possession of encrypted material'? I don't see any way to create effective deterrents here without making it easy to persecute anyone for any reason. Imagine cops planting USB keys with random bits on minorities they don't like, etc.

Edit: or worse, 15-year-olds planting USB keys with random bits on teachers they don't like and claiming it's CP and then watching them get fired and go to prison for 'refusal to decrypt' shudder
it's free for open source though. And provides more than server space for your repos...
Neither do I. One of the very first things that guides on how to speed-read tell you is to stop yourself from internally reading aloud.
The primary point of my post was that the law doesn't actually matter in practice. Regardless of if your points 1 and 2 are demonstrably false (thus the person is protected by 2870), someone trying to commercialize a side project (or a project started immediately after quitting a full time job like Shred) may very well see it die because of an aggressive previous employer.

Thus my closer: when you are a full time employee, don't do side projects that you have ambitions to commercialize.
I disagree entirely. Indeed I find the suggestion that your employer owns the fruits of all your free time to be absolutely asinine.

Employees aren't indentured servants. Full time, salaried employment in the United States is de facto 40 hours. If you work less than that (without prior agreement), you can expect repercussions. If you work more than that, you can expect... nothing. Ergo what is being purchased under a full-time agreement is clearly the customary amount of work. Anything beyond that is being done so at the beneficence of the employee (or more likely as part of a long-term strategic play). In any case, it is the very definition of "above and beyond the call of duty".
What you're talking about is defending the site. That's great and of course you should do that. What the paper talks about is defending the user. The example they give is being able to inject cookies then override the GMail chat widget with the attacker's account.

Such an attack doesn't put the site at risk - Google is fine. But it puts Google's users at risk, as they are signed in, yet chatting on another account.
For others who didn't get the PG reference:

http://paulgraham.com/ambitious.html
The official Nmap mailing list stores user passwords in plaintext
> Now a user, or malware, or a MITM, is not in the position to take over

I fail to see how this fixes this issue. I can just set my cookie to $their_session_id:$hmac_of_their_session_id, or I can set their cookie to $my_session_id:$hmac_of_my_session_id

Sure, I can't modify signed cookies. But I'm still in a position to take over their session.
There were 8 years between c++03 and c++11, and in terms of substantial changes to the language you have to go back to c++98.
See https://news.ycombinator.com/item?id=10280246.
"It's an old mistake and not very costly in practice, but the intuitive rightness isn't worth the pain in the butt."

Why is it intuitively right?
I'm confused:

> I'm not saying it's stupid to prefer a stable currency, I'm all for price stability and making a consistent amount of money.

>I understand, but is the volatility really a problem as some people think it is?

You seem to be contradicting your own idea. Yes, volatility is a problem.

Why? Because your rent, utilities, and other living expense aren't based on the same volatility. The "money going out" has the potential to be valued very differently than the "money coming in".

Do you really want to be evicted because the money you were paid was valued differently than your rent? Completely possible with BTC.

Fiat currencies work because a large collection of people around you agree on & depend on their value. If my landlord disagreed about the value of a dollar, my getting paid in dollars would be just as useless as getting paid in BTC.

For a fiat currency to be worthless to everyone around you it would requires a failure of Government, or some other very large catastrophe. At that point, paying rent is the least of your problems.

Edit: and to reflect your edit, yes, I have tried BTC. I made a not-unsubstantial amount of money by essentially gambling with it's value. But had my timing been even slightly different, I would have lost money instead, and a lot of it. I bought it when it was priced around 50 dollars, and sold when it got to 680 dollars a while back. But what if had been the other way around?

Edit2: If you change it out immediately after getting paid, the risk is lower (you'd basically be operating like many Payment Processors who process transactions in different currencies). That would also eliminate any possible benefit, as it's being used purely as a transfer currency.
nope, it's pretty bad for me too. w10 with default display everything.
"Subvocalize" has a literal meaning (micro-activation of the vocal cords) which good silent readers avoid. But you're still activating the vocal areas of the brain [0]. If you read much poetry, you'll see that the connection between reading and sound is pretty inseparable.

[0] http://www.ncbi.nlm.nih.gov/pubmed/23223279
How We Built a Scalable Malware Detector
The rating on this posting has been going up and down every few minutes. It's amusing to see what happens when you criticize Google or Apple. Apple seems to have a response time of about an hour before criticisms get down-voted. Google is faster.
Keybase's New Key Model
It can be useful for blackmailing prominent figures of adversarial foreign regimes, though to be fair Britain's spies will have to sift through their own Parliament first.
I can't speak to Elixir/OTP, as I've not -yet- used Elixir. However, every time I've gone to use something in the Erlang/OTP standard library [0] it has always been far less complicated and far more well designed than I feared it was going to be.

Maybe this is a reflection of my pessimism, but I feel that it is actually a reflection of the quality of the software. :)

[0] Yes, I know that Elixir is a BEAM language and -as such- has access to both Erlang and OTP, so this distinction is terribly fine. ;)
How so, Brian?
Especially since all of these peripherals are COMPLETELY modular for desktop form factors, since you could theoretically buy motherboards without these optional hardware features, and purchase them as completely separate devices, implying that they are assuredly unpluggable, and therefore, without question "switch-off-able" in very real terms.

So, yeah, why all the solder and "chip" modifications?
They use the newest version of Mailman (https://www.gnu.org/software/mailman/index.html), which has no password hashing features whatsoever. The last release was 4/28/15. What is this, '98?
> Traditional punctuation names suck. "Ampersand", "at sign", "caret"?

Hence why geeks and programmers rarely call them by name. See http://www.catb.org/jargon/html/A/ASCII.html .
I am not talking about migrating the whole app but how about for new features? I noticed that they redesigned their friends request page, why not build that with react native?
Ethereum is distributed: the network acts as a single organism, and computation only co-occurs with (perhaps can only be considered a side-effect of) consensus among nodes.

Urbit is [de|para|un]-centralized, with each node capable of independent (possibly antagonistic) action.
>It's amazing how accurate Google voice recognition is.

I can't say how accurate it is, since I've used it very little so far. But adding my 2c:

I first tried it some ago (2 years+) on my mid-range (at the time) Android phone, and it was not really usable. Set it aside for a while. Then tried it recently - on the same phone, mind - which is 2 or more years older now, so not recent at all. Surprisingly, it worked a lot better than earlier (based on a small sample of tests, note.) Going to experiment with it more.

Something that might be known to many readers here, but mentioning it:

Peter Norvig, Director of Research at Google, has said in the past that by training the voice recognition software on huge amounts of data (at Google scale), they have managed to improve it a lot, by using statistical algorithms. (Similarly for spelling correction suggestions in Google Web Search.)

Related: A couple of simple experiments by me with voice recognition (speech-to-text) and speech synthesis (text-to-speech) using Python:

1:

https://code.activestate.com/recipes/578839-python-text-to-s...

http://jugad2.blogspot.in/2014/03/speech-synthesis-in-python...

2:

http://jugad2.blogspot.in/2014/03/speech-recognition-with-py...
JavaScript needed to be able to read text document. Next.
So to put it simply: they are right because they have the guns on their side. Lovely.

Also, you word it as if this is society's legal system. Society has about as much control over the legal system as peasant has over the dictates of their king. Unless you limit society only to the wealthy and well connected.
Wow, out of all the things that may have occurred to me over the last couple years of using Slack, "this feels like 1999" is definitely not one of them.
Can your method block cookies and frames from a domain, but allow Javascript and XHR?
Maybe, as you mention in your excellent post, JustFab is paying an exorbitant fee to process payments? I have no idea what I'm talking about, but I can imagine some processors would be willing to take them on for a big enough slice of the pie. Especially since, as you mention, there aren't many laws mandating these things.
You're right, there are plenty of examples where that didn't happen. However, I've seen enough examples where it has. Enough that I think it's a bad idea to do side projects while you have full time employment. Unless those projects are strictly volunteer efforts for which you have no intention of turning into a commercial business.
Oh, I'm interested in the business decision behind that. For example why didn't they just buy (not acquire) the slack product. What were the reasons to host it in-house and manage it themselves.
I wonder how much of that is pronunciation and how much is grammar and parsing. The latter don't require sounds.
How do malloc and free work?
>Which brings me back to my original point

Your original point holds true for amateurs - people without knowledge, connections and money. Pay the right people, the right amounts and you're good to go. Billing is incredibly complex thing, it's no surprise you see so many startups with very high valuations and a new one pops up every quarter. Those are just the very tip of the iceberg.

For some more lulz, google instabill and Daniel Tzvetkoff who processed billions of dollars for Pokerstars and Fulltilt.
82M amendments stall [Italian constitutional] reform
It's mainly a poor summary of those agreements, of which the Key West Agreement was only the first. A better way to put it would be that the Army is not allowed to have fixed-wing aircraft, and the Air Force is not allowed to have helicopters. The Navy is just restricted to air operations that support a naval campaign.
For a more accessible alternative approach to all this madness see this mirror project

https://github.com/tibru/tibru
I have a similar problem wanting to promote a site I built recently. I know some relevant forums have a 'self-promotion' section for new products matching the markets the forums serve, but I haven't got much traction thus far.

My most recent idea is to offer free services some might want to utilize and linking/advertising on those sites. I don't know if it'll work yet, but I keep trying.

Hopefully this post will generate some new ideas, I'll keep checking back on this to see what people suggest.

Best of luck to you.
Not just fringe BS like homeopathy, but fairly-mainstream dietary supplements industry is full of dubious remedies. See for example, http://www.theatlantic.com/health/archive/2015/02/how-supple...
Not only water (vapor) is a greenhouse gas, it's by far the most important. Per wikipedia, its contribution to the greenhouse effect is 36-72%, while the next contribution, of CO2, is 9-26%.

https://en.m.wikipedia.org/wiki/Greenhouse_gas
The writing seems sloppy. For example, calling TCV a "small shop" is flat out wrong. Not only is it not small, by some measures, it is the biggest!! Having raised over $10b including an 8th fund at $2.2b! And Matrix is no slouch either having raised $2.4b including a $1b fund and seed investing in AAPL.
But what if I don't want the latest version?
Why would reinventing jabber federation require bitcoin?
Given how much British politicians seem determined to make life shitty for anyone making less than six figures, you'd think they'd at least let people spend what idle time they have high on drugs instead of questioning a system that seems intent on shredding the middle class.
"HERE WAS A SIMPLE AIM at the heart of the top-secret program: Record the website browsing habits of “every visible user on the Internet.”

Jesus fucking christ.
Slightly less insanely, Forth did this too. The ANS Forth spec defines official pronounceable names for all words:

http://lars.nocrew.org/dpans/dpans6.htm#6.1

The names are a mix between the visual (* is 'star', and ; is 'semicolon') and the semantic (<> is 'not-equals', and ! is 'store'). Some are a mix (+! is 'plus-store').
Looks interesting, curious about the motivation for creating it and the differences / advantages over hubot? (other than the obvious different choice of language).

Perhaps I missed it, because there's plenty of documentation, which is great of course, but I somehow felt a bit overwhelmed with detail so couldn't really see the wood for the trees.

EDIT: a few key differences as far as I could spot (although not sure what's the most fundamental difference):

* plugins can be dynamically loaded (e.g. from a git url), even via the chat interface itself.

* more focus on security / permissions to administer (I'm guessing that's also partially connected to the dynamic nature of plugins, because without security it's very easy to mess things up)

* plugin eco-system seems a bit thin(?) could only find a strange list to github repos[1]

* built-in per-plugin persistence (not sure how it is actually stored though)

[1] https://github.com/gbin/err/blob/master/errbot/repos.py
> POS stdlib

Try Jane Street's Core. I hear it's a better situation.

> "highly-performant"

On one core. Erlang and Elixir will blow it away when employing more cores, naturally.

Though OCaml would probably perform similarly or better (for certain CPU-bound tasks) when running N processes to N cores. You'll need to bring your own IPC mechanism - this is probably the key BEAM value add.

> syntax and alternative MO are still a big sell
> web engineering
> it's just not an easy sell?

You sell based on productivity, performance, and correctness:

"By using this technology, you will have less bugs, which is cheaper and more productive in the long-term."

Granted, this is a very hard thing to prove, it has anecdotally been my experience with ML-derivatives.
Yeh there is an account updater service you can integrate with. So if you change cards it will expose that through the service and a company's billing service can continue unperturbed even if you change cards and credit card numbers.
I don't know about Siri, but there are various means to integrate commands into both Google speech recognition (at least on Android) and Amazon Alexa (Echo). Amazon at least is looking to get third-party devices integrated. Probably not what you were hoping for in either case, but it is enough for a lot of potential uses.
Hey man! Great work and thanks so much for so diligently answering all your user's questions. You're an inspiration for sure, and I've learned a good deal just reading over some of your code :)
Why is stuff being "solved" part of the discussion at all?

Are you accounting for very-low-probability catastrophic scenarios? People are notoriously bad at that.

Is this the study that took all roof-related deaths as solar-panel-related?

Can you seriously not tell the difference between the danger of centuries-long contamination and waste that is dangerous for thousands of years, vs the very regular, understandable, and limited liability of everyday accidents?

Are you a part of the nuclear lobby?

Do you like to waste money?
U.S. And China Reach Agreement to Stop Commercial Cyber Espionage
Unfortunately, buying off Congresspeople is currently legal. It doesn't make it any less horrifically immoral. And anyways, your comment is irrelevant, as I was responding to the parent comment.

The parent commenter suggested that Google was not one of those "egregious abusers of the system" that exploits the system by buying off legislators. Unfortunately, that isn't true, as I've demonstrated here, by proving Google has certainly heavily paid legislators (via "donations"), who have in turn advocated DIRECTLY for Google.
Ladies and gentlemen. This is how you do blackmail, corporate espionage, and sway politicians on a truly industrial scale.

Want to push a bill through the House of Commons to curb GCHQ's powers? Think again Mr. Politician. Someone might just leak your sexual deviances to the newspaper.
On a tangentially related note, there's a project that aims to redesign some of Common Lisp's semantics to be more modern [0]. Its name is CL21, as it's meant to be "Common Lisp for the 21st century", and it's written entirely in Common Lisp, relying on the kick-ass features of reader macros to introduce new syntax to the language. In my humble experience, integrating it with Shelly [1] and the large swath of Quicklisp [2] libraries can turn it into a terse and reasonably efficient scripting language. (Sadly, you still need a CL implementation and runtime, and they are mostly quite slow.) Definitely worth a look if you like NewLisp's syntax and libraries, as I can see some similarities in the philosophies.

[0]: http://cl21.org/

[1]: http://shlyfile.org/

[2]: https://www.quicklisp.org/beta/
> To be honest, I'm not sure what point you are making.

I'll repeat it for you: Lisp dialects are defined by a common core language.

Newlisp does not have that core language. Even if it uses the same name for functionality, it does different things:

Lisp:

(cons 1 2) -> (1 . 2)

newlisp

(cons 1 2) -> (1 2)

Lisp

(+ 1.2 2) -> 3.2

newlisp
(+ 1.2 2) -> 3

That's just the trivial stuff.

It's basically impossible to run any Lisp code in newlisp without completely rewriting it.

When I say Lisp, I'm talking about a language which is in the tradition of McCarthy's Lisp, where I don't need to throw away my books, implementations, libraries, applications.

newlisp is a derived language just like ML, Logo, Javascript, Racket, Clojure and countless other languages. Just like Java is not a C dialect, but somehow influenced by it.
What do you mean? Google Voice Search works for me with my phone in airplane mode.
They do say noitatimi is the highest form of yrettalf...
They got the team behind it, who now work on other parts of Dropobox
Growth Is the Only Thing: 3 Lessons We Learned Growing 34% WoW [video + article]
My Xbox Live account did this. I couldn't be bothered cancelling it but knew my card expired in two months. A year later I look back and notice they've collected the money all the same. It only stopped working after a couple of years later (yes, I am that averse to calling customer support).
Fyi, you can fix the usernames issue in Preferences > Message Display > Message Options.
And it made less than half of the orbit since discovery.
Okay, then given that it's open source, hopefully we'll see a smaller version soon.
What happens if i keep passwords on ram only servers in Elbonia, that self destruct if code is not entered once per week?
Do you use a special methodology (agile/scrum/timeblock) and need something to fit that or are you running your project ad-hoc?

If it's a case of the latter then I would advise to look into adopting a methodology and a systemized way of working before locking yourself into a tool.

In my experience there is a big correlation between using a methodology and having a solid foundation to build a solid business.
That's a main point of the paper: taking legit sessions from Attacker and shoving them into Victim, then being able to spy on Victim even when Victim is on HTTPS. Apps aren't handling this case well, as in the example of being signed into GMail under Victim, but showing the chat widget of Attacker.
Have a look at Code Triage if you haven't already. http://www.codetriage.com/ - I believe I found them here in a thread a while back. You'll get an open issue for projects you'd be interested in contributing to sent to your inbox daily. May be of some interest to you
Now that Chromium has moved over to Git, any plans or timeline to migrate Chromium over to Gerrit, rather than Reitveld?
I'm not sure about "incredible expertise", but to illustrate with some - rather basic - points that I've seen people miss:

- mailbombs exist
- you can generate input that takes a lot of memory and/or CPU to process for almost any real-world parser - DoS is usually trivial (and compromise is within reach of advanced adversaries)
- you really want to limit the depth to which you parse MIME, doubly so if the parser is recursive
- decoding headers is really hard even if you just decode everything to UTF-8
- just because something claims to be text/plain doesn't mean that it's actually 7-bit, actually the character set it claims to be, doesn't contain any "interesting" Unicode characters, etc etc etc.
- receivers can and do MIME-sniff
- UTF-8 is actually pretty damn scary (rendering an arbitrary bytestring as UTF-8... should be safe, but there is at least one Linux graphics toolkit that will just not show the textfield if you include any application-specific characters, and rendering combined characters has had bugs in the past)
- ...

I assume you're familiar with the above; I just mean to point out that securely handling e-mail is hard.