skysight-inc/HackerNews huggingface dataset:
What else do people expect on routers, firewalls and switches with closed source. Once again, the power of open-source is shown to be superior (a challenge and not always easy yes). I recently did a big network upgrade and I got so tired of hearing "Cisco/Juniper/$BIGNAME never got anyone fired."

I spent a long time looking at all the options, the main issue with the open source ones is a lack of performance usually due to lack of asics/fpgas for encryption offloading.

When it came down to it, I went with Ubiquiti and their fork of VyOS called EdgeOS. Runners up router OS's were VyOS, PFSense, IPfire, routing engines being Quagga, XORP, and Bird Internet routing daemon.

The point is that open-source isn't an instant solution for these kinds of issues (code obfuscation, code review complexity, weakenesses in many-eyes theory) but it's still better than proprietary because at least you can fix it yourself if you please or at least someone else can.

I am a huge proponent of open-sourcing as much as possible, even given it's higher resource investment (hiring *nix-beards) because it gives a company freedom to be more agile than standard proprietary systems and their licensing-by-a-thousand-cuts and lock-in style.

Sometimes it doesn't make sense, and even as a FOSS proponent and a heavy GPLv3 supporter, I have to recognize sometimes that's not the best option either. I tend to still use Cisco on industrial controls, but it's mostly because of the service & support options, not because of Cisco's security. I just assume that just about every manufacturer based in the US has been NSL'ed and has backdoors in software & hardware... in the meantime, the solution for people like us is to push people like Juniper away from their old business model and force them into competing with FOSS. We can fix the software, but the hardware will be much more difficult. I have heard some interesting ideas on hardware checksumming lately though.

Just my two cents at least.

edit: Forgot to mention I am very fascinated by the networking features in DragonflyBSD, especially ipfw3, so if you haven't looked at it it's worth a peek. Also HAMMER2 is going to be awesome and is already on par with BTRFS and ZFS.
For me, it is - I love the fact that the News, Weather, Email, Calendar, Calculator, Timer/Stopwatch, Cortana, Office Mobile (word/excel/onenote/powerpoint), Skydrive apps on Windows Phone 10 are the same, with the same UI and funcionality that on my Windows 10 desktop. It works perfectly with touch and it works perfectly with mouse and keyboard.
Now I only download an app if it is UWP because it is so much more convenient.
I think it's a Chinese Black Flag operation.
Update, I've made a static version of the site (http://betterexplained.com/static/) which you can browse. I'm redirecting requests there.
Ways to get a free trusted SSL certificate
> Why no other re-usable rocket since 1996 if this
> was doable?

Economics, technology, motivation. All were in short supply in the 90's. One of my favorites was Rotary Rocket. It made great strides but didn't have the right team to get it into production.
"SudoAlex" adjacent has the correct answer. We'll make it default at some point in 1.8.x. We decided last minute to remove the default so that any bugs that are found can be flushed out. So far, none on this feature. But yeah, you have to enable it.

After you enable it, you'll have to `vagrant destroy` before you see the benefits though. Linked clones are from scratch.
The Memorial-Labor thing wasn't hard and fast, either. Growing up I remember it being either Memorial-Labor, all of May, June, July, and August, (I'm from Phoenix...) or "whenever I didn't have school".
New Year's Resolution: How to make a new start by deleting all Facebook posts
Facebook posts can be a liability. They don't age well especially if you've written something risque or insulting or posted a compromising photo or video of yourself. People have been sued, lost their jobs and had their lives ruined by what they thought at the time was a harmless Facebook post.

With a New Years resolution to post safely, you can give yourself a fresh start by deleting all your old posts and relax.
Phonebloks.com website opensourced
The Perfect Gifts for the Nerd in Your Life
Then you don't even need a crank - you just get a tall desk.
I want something where I can sit comfortably and stand comfortably :)
One uses inertial systems to cover for disruptions in service of the other systems.
Can we just use the term "duck-typed" already? There's a significant difference between weakly-typed C, strongly-typed rust, and "strongly"-typed JavaScript/Ruby. Besides, weak-typing is relative. Javascript does some type conversion, but because it does less than C, it is more strongly typed than C, but it is more weakly typed than some other languages.
Why a Bad Hire Could Cost a Business $12k (on tops of their salary)
This is how ALL technology changes happen in the government, unfortunately. I've done plenty of public contracting and a vast majority of the people involved are simply terrible mostly because when you're rewarded a contract in order to get all of the money possible you have to fill every empty seat which means a butts-in-seats mentality versus a lean or better team.

But progress isn't made when we sit there with our thumbs up our butts either. Essentially you're saying USPS can never be improved because contractors suck and because it's hard. That's unacceptable. It's hard yes but it's possible.
They were traced to "North Korea". There.
Is Houston the next great transit city?
If you have to ask this question maybe you haven't seen much "production" code. It's pretty variable. Open source projects can be a great help to see what's possible. If it's easy to understand and well used it might be pretty good.
A Life Decoded: My Genome: My Life
I worked closely with Mozilla during the first few years of Firefox.

It's only the same in name and logo these days.

The hard truth is internal and external politics in the organization were so toxic senior-level programmers who were more risk averse were pushed out.

Imagine taking C++ pros who advised in the creation of W3C/IEEE/etc drafts, and tossing them out in favor of node.js programmers.

The gray hairs were betrayed in favor of node hipsters. Whatever happened to respecting those who made you.

This hits hard. The truth is Mozilla's days of glory are numbered.

Over the coming years the decline will come to eventually wrestle Firefox out of Mozilla's hands and into a normal open source project.

Was all this office backstabbing worth it?

This is what happens when you lose the hacker ethic. It's disappointing.
I will take all of that thank you.
Learn the actual reasoning behind popular math concepts
I'm not Javascript's biggest fan, but the weak typing argument is a little... weak. You never run into problems with weak typing as long as you follow a few rules like using === over ==. Javascript is poorly designed because there are these rules you need to learn and because there are some language features that you just don't use. Some other reasons too, but the way people write it, Javascript may as well be strongly typed.
Seems kind of like "The pot calling the kettle black"
Could have been planted by a different party. It's wildly different in terms of sophistication.
GoshawkDB: A distributed, transactional, fault-tolerant object store
Check out Giant Swarm as well. Full orchestration stack, team based in Germany/Europe, and are preparing a release of a downloadable version in the first part of 2016.
I don't think per capita is a valuable number here.

China's got a twofold problem: They pollute a lot, and that pollution happens over a much smaller area of land, while the USA has it spread out a lot more. Per capita emissions doesn't tell us if the air in the largest cities is going to be the consistency of pea soup...
I know. I game a lot, so some of this stuff would be quite useful.
Frankly consolekit was/is a mess (but at least it could be run on anything), and logind makes it one worse (systemd only).
MVC Podcast Episode 13: Tech Mentorship; MS Vis Studio; Bitcoin; Gigster; More
This article is written in an odd way .. I couldn't bear a straight-through read. It is from 2014 so not sure why it is being posted.
MVC Podcast Episode 13 is up! This is a geek podcast where a university CS instructor (Marty) and a developer at a major tech company (Victoria) talk about the week's tech/geek news, with a focus on topics of interest to computer scientists / programmers.

This week, Victoria and I have a discussion about mentorship in tech; Microsoft open-sourcing Visual Studio; Bitcoin; Yahoo; Gigster; and we give our hot takes on Secret Santa and White Elephant gift exchanges. Check it out, and Happy Holidays!
Great, I thought my chimney was a back door accessible only to Santa. Now anyone with this database has the key to my chimney.
Reminded me of this awesome ACLU Christmas video:

https://www.youtube.com/watch?v=8pcWlyUu8U4
Even of the part that varies among humans, it's hard to believe that English people share only 11% with some other Europeans.
Use PostgreSQL for Your Segment Warehouse
So you see increasing split between web sites (mainly content) and web apps (mainly functionality)...?

Web sites get replaced with point and click page creators, in or outside of a platform walled garden.

Web apps have React-based front ends that don't need a lot of custom skinning.
True. True. But I can't get him to leave. There doesn't seem to be an opt-out. Should have read the EULA more closely, I guess.
How Giving Away T-Shirts Made Me Over $500K in Revenue
That one's in the article.

My contribution: when we have a new CEO and she starts asking how much revenue cost centers generate.
What'd be a use case of strncat(s1, s2, SIZE_MAX)? It seems like this would be hard to find in the wild
That behavior is well-disclosed, and is only for job ads. It can't link to the product itself, for example.
> ...I was somehow able to connect to the psql database...

Yeah? For posterity, mind detailing how did you do it?

> HN these days is full of elitist people who think the people who are struggling with things are downright dumb...

No. That's not what happened. You said:

> I have never been able to actually download install and use [Postgresql] ... unfortunately it isn't as simple as installing mysql[.]

Everyone who has installed both MySql and and Postgres know that you need to do exactly the same things [0] -albeit in slightly different ways to get started from scratch. Initial configuration of MySql and Postgres is equally complicated. [1] This makes your comment look like an anti-Postgres slam.

Cynical people might suspect that your original comment was the time-tested "Man, thing X sucks, can't do Y, and is completely useless!" Internet tech-support bait, but that ain't me, baby.

Over the years, I've found great profit in assuming that most widely-used non-B2B software [2] is actually generally well designed and thought-out, and that any inability to do a thing is a result of my lack of understanding or familiarity rather than poor or difficult design of the software. Why? Because, -frankly- such failures are pretty much always a result of my lack of understanding.

[0] Configure listen IP, create a superuser account, set database access permissions, create a database, start the daemon.

[1] That is, (compared to writing software that uses SQL) not complicated at all, and just as complicated as configuring any other non-trivial daemon.

[2] And some B2B software, too.
> traffic people, child sex slaves

Mostly the result of outdated laws preventing legal prostitution.

By no means do I intend to defend cartels, but if you remove their financial incentive to exist, they will shrink or disappear altogether.
So violating people's personal privacy is okay if it's interesting to look at? I guess people who put hidden cameras in bathrooms feel the same way as you.
Getting vm clone and local ansible configured took some time, but now provisioning seems to work quite fast. Great!

I'd like to find a way to get Ubuntu to boot faster and Vagrant waiting unnecessarily long for the machine to become available. Judging by VirtualBox console, Vagrant could notice machine readiness a few seconds faster. Also, for a virtual environment 10 secs or more for startup seems a little excessive.

Though this bit is not necessary Vagrant specific...

Looking forward to using the new snapshot functionality to test my Ansible scripts in isolation.

Also, looking through these bits I found this:
https://gist.github.com/juanje/3797297

I noticed that for repeatedly installing same packages, like when debugging provisioning, using apt cache on host machine's synced folder speeds up the process immensely.
Introduction to Functional Programming in Swift
Henrik Joreteg: Pocket-Sized JavaScript [video]
Offering cookies and milk once a year doesn't mean I consent to a whole month of monitoring!
I think, if you really want to say something, it'd be more appropriate with your real name and as its own blog post, rather than trying to rain on the parade of some not-management-level Mozillians releasing a project.
No, duck typing is not a very good distinguishing characteristic anymore. "Interfaces", "traits", and "concepts", to say nothing of other things, all in various ways make static languages have something that looks something like statically-checked duck typing. Duck typing isn't unique to dynamic languages.
It was easier to find the source page via a search engine than from the bug reporting details page...

https://sourceware.org/glibc/wiki/GlibcGit

https://sourceware.org/git/?p=glibc.git;a=blob;f=sysdeps/x86...

https://sourceware.org/git/?p=glibc.git;a=blob;f=sysdeps/x86...

It's been too long since I've done any assembly programming, but this really doesn't appear to have good documentation for maintainability; or anything resembling sufficient documentation at all.
Any good tutorial on how to deal with passwords? In a site of mine I generate a salt with UUIDv4 and generate a sha512 of the passsword+salt and store both the salt and hash. When the user authenticates I regenerate the hash and check. This is good, right? I still don't know how to deal with cookies/sessions though. And have no idea how basic http auth works.

I'd search myself but I'm afraid to find a "bad" tutorial.
Clearly black frog freight who is secretly controlled by the Mittani and we all know Mittani is playing both the Chinese and NSA.
Imagine you have a user configurable buffer size. Then imagine that the user wants to throw as much ram as it takes at the problem and sets the maximum size to that value. It happens more often than you'd think.
No, because even this would be a total cock-up. Don't give anybody your password, and just can't mess it up. So i'm not really in favour of fixing backends at all. I think the password problem is entirely the browser vendors reponsibility. Solid password authentication already exists in TLS (which you need anyway), it's just not widely implemented or exposed via browser UIs.

There are too many vested interests from the big players, where the hope is that deliberately making authentication ever more burdensome for users will just lead them to give up and select 'login with Facebook/Google/Live' and hand them the keys to the kingdom.
How did this take her 10 'flips' to figure it out? I figured it out with one glance...
Fitness Band Sends Kids on Digital Humanitarian Missions for UNICEF
That was over a decade ago, things change.

Firefox is more relevant now than it was before, I welcome their efforts to change with the times.

They are taking massive risks now, simultaneously developing an entirely new programming language (Rust) and building an entirely new browser engine on it (Servo) is ambitious. It is clearly self-evident that it has paid off.

There is nothing wrong with node.js programmers, your implication that they're inferior is a broad-sweeping and baseless generalization.

The grey hairs are most certainly still around, and they're most definitely well-respected. Rust's C++ roots is evidence of this.

Mozilla is flourishing, that cannot be denied.

Firefox is a normal open source project, Mozilla receive's contributions from around the globe.

The hacker ethic isn't gone, it matured into something better.

https://github.com/mozilla/
The elephant in the room is what you return when you SELECT.

My POV is you should be able to verify user sign-in with something like "SELECT COUNT(*) FROM users WHERE email = 'maaku@hellokitty.com' AND password='hunter2';", which has the added bonus of not informing the client whether the query failed because the user didn't exist, or because the password was wrong. Imho, all queries for the column content should simply fail.
Commonly, a policy declared that all use of `strcat` must be replaced with `strncat` and at one or more locations in a codebase an actual size bound could not be ascertained without more engineering effort than management was willing to spend.
It sounds like bullshit salespeak, tbh. "Hey we are doing what we can at the price point you asked for. If you want more, it costs more."
Does anyone know if more complex extensions such as Tab Mix Plus or Tree Style Tabs will be supported?
The Startup, the Burnout
No use case I can think of, but a credible scenario is an attacker somehow being able to manipulate the size parameter, due to another vulnerability, and then being able to further exploit the overflow.

Quite a few recent practical attacks chained what looked like mostly harmless vulnerabilities taken individually.
My link gives a bunch of other measures, and the US is lousy on most of those too.

I'm not saying the US is worse than China. Parent poster said that the US's democracy meant that it wasn't a big polluter, but that's clearly bollocks, the US has been, and is, a huge polluter.
One thought is that it puts the computational load of verifying user-provided passwords in your database tier, rather than in your application tier, where it exists today. Let's say that right now, you have a 200ms computation necessary to verify a bcrypt-secured password. If you have that in your application tier, you can easily scale that horizontally with more CPUs if necessary. It may be a bit more difficult to scale CPU capacity in the database tier.

However, another approach would be extension of the database's client-server protocol and driver(s) such that the hash verification occurs within the application tier (as part of the driver). Or, moving further along that path, the field could be annotated in your ORM, exposing special set and verify methods. But at that point, you're very close to the current condition, where the hashing occurs within your web application framework.

Or hashing could be done on the client side.
iOS App Icon Colors in the Year 2015
A similar anecdote from one previous employer: at that company, we had a lot of remote B2B sales people all over the country and even one overseas. On rare occasions, there would be a sales meeting where all the sales people come in to meet with the top executives personally and discuss strategy.

Well, my first couple of years at the company, there was a sales meeting to coincide with the Christmas party. Basically, all of the sales people were flown in to attend the Christmas party and they justified it as a business expense by having a strategy meeting sometime that week. One year, that didn't happen. I mentioned offhand to somebody "too bad the sales guys couldn't make it", and I was outright told that they skipped out on the sales meeting to save money. So we had a Christmas party, but we cut back the invitations.

That was no surprise, given the events of the previous few months. They had been actively trying to shrink the company by attrition; i.e., letting employees quit and declining to hire a replacement. I also don't know anyone who got a raise that year. We ended up losing a lot of people just from that alone. They also fired a bunch of sales guys for underperforming and hired a bunch more who were almost exclusively paid on commission... and I'd heard that the CEO specifically intended to flood the company with commission-only sales hires because he didn't have to pay them more than peanuts unless they brought in money.

The next few months were brutal. January opened up with two executives being fired -- while the actual reasons for the firings were because of a power struggle, they weren't really replaced. One of them had his power distributed among the people who reported to him, and another was replaced by "promoting" multiple existing employees while still making them do their previous jobs. One of those was fired only a few days after being promoted, too. The next month, I was laid off. I heard through the grapevine that shortly after I was laid off, they laid off another guy and closed the entire India office, letting everyone go except one or two employees who were transferred to the home office.
Just use one of the existing key derivation functions. Scrypt and bcrypt should be good enough for most use cases, but you may want to google a bit before settling on one.
This is a solve-able problem.

First, we need to gather data regarding the frequency of leaving these notes. I suspect this is practically exceptional given the required costs associated with requiring a signature (only anecdotal but even more expensive purchases I've made almost never need a signature).

Once you collect data that's your baseline for the printer's reliability. It must work at a minimum that many times per delivery route (in practice it probably doesn't). There are dozens of options for small, portable printers that are relatively inexpensive. So even before you start custom designing a more reliable printer get the costs of purchasing them in bulk and pilot them in an area attached to mail carrier bags.

Fading / inking coming off would be an edge case; the vast majority of these notes are going to be basically warnings that you need to pick up your package or asking them to redeliver it and you have a very limited amount of time to do this before it gets sent back.

Packages have barcodes, have the printer scan that to instantly generate an appropriate label.

It's not the easiest thing in the world but I could put together a pilot for this inside of a week with proper USPS API access. Get into a fast iteration cycle, increase reliability of printers and prints, automate changing of ink and paper upon delivery route completion through some docking mechanism.

I almost want to just start building this thing, ha!
5 Activities Entrepreneurs Do to Unwind While Staying Productive
I want to just program without all the backstabbing and treachery.

In this case, the drama at this organization in particular is so intense it manifests itself in the news. The creator of javascript, a pillar of the internet, was publicly humiliated and crucified.

Why? They knew his name. They looked up his voting records. That's witchhunting. It's letting a bunch of people in the peanut gallery dictate what goes on - that's not integrity or leadership.

I already suffered enough due to office politics, I feel no need to compromise my identity to voice my opinion.
And for every one that has 1000 VMs to wrangle, there are 1000+ that have a couple of servers in a rack.
Java escape analysis – Help Completing this post required
And once more the whole debate goes of into file format lala land.
Maybe this random employee: http://www.technologyreview.com/emtech/15/video/watch/innova... ?
If you're interested in a more in-depth analysis of the free expression impact of this new privacy bill, my wife wrote a number of blog posts about it (she's a director at Stanford's Center for Internet and society). The editorial links to one of these:

https://cyberlaw.stanford.edu/blog/2015/12/final-draft-europ...

https://cyberlaw.stanford.edu/blog/2015/12/series-conclusion...
These news and reader apps have so much high value audience interest data that they should be very valuable (in theory), given enough engaged users, especially on mobile. Are they struggling to leverage the data to monetize for fear of alienating users? What's the disconnect here?
The Great AdWords Heist