skysight-inc/HackerNews huggingface dataset:
Reprogrammable ROM with jumpers for write-protect is what I did in mine way back. Even game consoles had removable ROM on cartridges. ;) Another scheme, independently designed before me, was to use two memories with a ROM being root-of-trust with trusted boot and flash having most firmware for update purposes.

Far as Joanna's idea, this has been done before twice. I posted a business and legal analysis of it here:

https://news.ycombinator.com/item?id=10788617

What do you think of the analysis? Aside from I should patent my ideas more. ;)
> I know you say they don't have this information, but it's not hard to get access to it if they feel they want to.

The protocol makes it impossible for the identity provider to know where you're logging in, so they can't even if they wanted to, really.
I have to ask why bother apart from a personal exercise for yourself. I have no idea why this got over 150 points on HN.

You could do this with anything.. Facebook, HN, my kitchen, a newspaper. Some things could be better but don't need to be.
I have a tremendous amount of experience with the 12 Factor book having worked with at Heroku for 6 years. I am also working on an open source 12 Factor platform called Convox.

One reason the factors are presented as prescriptive because apps that don't do this won't work on Heroku.

Is there a specific factor you'd like to deep dive into?

I'll pick one to start: Environment.

There are many ways you can set and read configuration for an app: env, config files, config tools like chef or puppet, config database like zookeeper or etc. if we are talking about config like a database URL you could also use a service discovery system.

Env represents the simplest contract between your app and whatever platform is running it (the OS, Docker, Heroku, ECS).

If the platform can update env and restart the processes to get the new settings, no other config management is necessary.

It's UNIX, it's simple, and it helps you bootstrap any more specialized config management if you need it (set ZOOKEEPER_URL or CHEF_SERVER_URL).

So ENV feels like a factor to become very prescriptive about.

The biggest debate I can see is if ENV is sufficient to build our micro services on, or if service discovery "magic" is necessary too. I.e Zookeeper, Airbnb SmartStack or Docker Ambassador containers.

For the vast majority of apps, ENV is sufficient.

I personally still build my more complex apps around ENV and at all costs avoid needing to use a service discovery system. The added complexity and operations isn't worth it to me.

I have a strong hunch that service discovery won't become an app development pattern that everyone uses until a managed platform (like Heroku) offers it. Perhaps this is where Docker, Swarm and Tutum is headed.
16.04 LTS planned release date 2016-04-21, will be the next great release.
Couldn't find an example of a generated résumé or themes.
Why would you make a throw-away account for this?
The client that wants to login always needs to execute a browser (or at least a render and JavaScript engine). See this (stalled) proposal to make it more compatible with non-browser/simpler agents: https://groups.google.com/d/msg/mozilla.dev.identity/L2ETKkd...
> You just had a $50k loss from your startup option tax bill? It's going to take 17 years before you can deduct all of that loss

Unless your next startup options (or Google/Big Co RSUS) have a 50k gain the next year(s). Then it only takes year(s).

Or if you have diversified and have market investments that likewise increase 50k and then you sell them.
Hollywood’s Christmas is being ruined by unprecedented leaks
Angelica Herb
To your second question, yes, it is. Your identity provider can do whatever you want, so as long as you can make a website that shows you a "connect with your SSH now" prompt and have that turn green when you connect, then Persona can go on top of that.

Persona is just a way for your email domain to say "yes I know this person". The way the site does that doesn't matter to Persona, and there was a service similar to mailinator that just let you log in with a disposable email address everywhere, with no other authentication.
They gave me a Mac at work, but... it's not for me. I got a Dell XPS 13 with Ubuntu as soon as they let me.
Emotional Computers (1998)
As Animats said, solving that problem just requires making the firmware read-only at the chip level. Which is cheap. The current problem exists so devices can be easily updated and contain more features. Users demand both with both benefiting hardware market. A a ROM + Flash setup solves the problem but adds a little to cost. Most companies won't do it but it's another viable solution.
I'm not a boot guru, so take my $0.02 with a grain of salt.

I've been using boot for smaller and experimental projects because by default it feels so much leaner then leiningen does, however, because the support tooling around leiningen is still so further advanced, for project we're putting into production here, those are still all lein based.

The other thing I'd say is, I've found what tool lein vs boot gets minimized over time as the project evolves.

In general, I do think it's gaining traction and its a great project!
Increase the font size for mobile (s4) of the "sleep better..." text block at the top...it's about a third the size of the other text
Not in tech. Per other HN recent articles its relatively straightforward to make in the $150-250k range as a software engineer at BigTech. Even if you decide to stash $30k/year after tax for your own 'safety net' (equivalent to whatever net you receive in an EU country), you are still coming out way ahead of a EU software engineer that is probably making $70-90k USD equivalent before taxes take half.
It's a culture thing. The trick is to keep from disrupting the conversation flow. - Some natural languages outside of English are meant to interrupt the speaker. A community with a mind is less worried about finishing a thought vs an individual who wants to be heard by the community. - Who ever convinced you you are annoying is just pushing their ideology onto you and you're allowing it to affect you.
I used it two weeks ago for a weekend project (shameless plug: https://www.pastery.net/, a beautiful pastebin), and it's just not the same. Feature requests go into the void, although the team at Mozilla was kind enough to answer even though it's not their job any more, but you can't really use it for a "serious" site while it's very unsupported.
I'll do what I can to help you if you are serious about learning. Email me at partisanyc at gmail.
Don't know why persona never caught on, it was probably the best developer/user logon experience I've ever used.
When I created my last site, I was very excited about persona, until I realized nobody was developing it anymore, which made me decide against using it. I wish Mozilla would have completed persona before abandoning it.
There's Developer Tea: https://developertea.com/ that's 5-15 minutes long for each podcast.

Are there any specific topics you're looking for? Software development or open-source in general, or something specific?
A Beginner’s Guide to Deploying Production Web Apps to Docker
A decade or so ago, back when 256kbps was the average cable speed and there were caps for international traffic here in Portugal, our ISP had something called Happy Hours, which meant that all usage between 1-9am didn't count for the cap.

We didn't "plan which movie we were going to watch tomorrow", we just marked them for download (on locally-adapted forks of P2P software like eMule, with time/IP range filters) whenever we found an interesting one, and then we'd have 20-30 to choose from when we actually felt like watching a movie. And we could still watch a different one, it was just somewhat more "expensive".

It was far from a dystopian scenario, and frankly I wouldn't mind returning to that model if it could save me 20% on my bill.
Man, Linux desktops would have a huge gain to usability if we could get a distributed accounts framework in place for all the distros so if you signin using online credentials through Persona on one desktop all your config files and preferences are carried over. Its annoying to have to manually sync my laptop and desktops config files.
Interesting (and surprising to me) that the word 'laptop' is used instead of 'computer'.
You did not :) Have you talked to Dan Callahan yet?
I decided to dedicate my free /side-project time to my own biggest itch: how can we improve the way we learn and remember? In particular, I think the way we teach & learn software development could be greatly improved.

As a first step, I created http://www.codingbrain.com. It's a knowledge management app that integrates with your markdown notes.

I too posted on HN without much feedback https://news.ycombinator.com/item?id=10464525

However, I think codingbrain tries to do too many things at once and I have plenty of sub-ideas which I plan to implement in 2016
Not so sure about getting that pension. Just take a look at the balance sheet of the governments in the EU.
There's quite a few people at CloudFlare who run Ubuntu on Macbooks.

I run it on my home systems and my work laptop (a Lenovo, I'm one of the few who prefers it over Mac hardware it seems). My wife runs it on her work computer, she's a film academic and finds it just works well enough given most of her time is in web apps or watching films (though she does keep a Windows machine for creating Powerpoint slides).

It just works, and has done for a long time.
You want to be paid to write a compiler? Want to learn some techniques not yet covered in the literature?

Take a look at http://www.compilerworks.com/dev.html
Ask HN: Looking for a keybase.io invitation
I'm looking for a keybase.io invitation.
Could someone please send me one at andrea.tosy@gmail.com?

Thanks
You meant wasn't so bad (Win7). The Win10 privacy issues are a showstopper on desktop.
You would lose information from the texture of the image that way. It's already downscaled to 224 pixels square, so you'd really be restricting the amount of data available to the function.
So where's the use case for that? Sites offering tools like forums, guestbooks and counters worked because you couldn't host those things on 90s era free hosting where access to any form of server side programming was impossible.

Javascript snow (and other visual gimmicks like this) are client side; even Geocities would have let you host it yourself. Most hosted services let you add some form of Javascript/HTML code somewhere.
I go to a fair number of conferences and it really depends on the conference and its represented tech. AWS Re:Invent was about 50% Windows, 30% Mac 20% Linux, Mobcon (mobile dev) was 30% Windows, 65% Mac, 5% Linux, but PhpTek I would say was 10% Windows, 60% Mac, 30% Linux. I was actually taken back by how many Linux laptops I saw.
Be a “Real” Model
For the lazy:

http://research.microsoft.com/pubs/255952/ICCV15_DeepNDF_mai...

From abstract:

"(...) we introduce a stochastic and
differentiable decision tree model, which steers the representation
learning usually conducted in the initial layers
of a (deep) convolutional network. (...)"
Doesn't PowerPoint work in Wine?
The neural network should capture all the behavior of the relevant filters as well.
Intro.js v2.0 – JavaScript library to add guide and screen tips
How do you make money with open source?
I know it's Marc Andreessen and I know it's a nit-pick, but did he never learn how to use a paragraph? Short, standalone sentences can be powerful to make a point, but they can be tiring when used every single paragraph.
If you don't know how to install a script manually you definitely don't have any business to install remotely hosted javascript, especially not from a source that has terms and conditions that all but guarantee abuse of the fact that you installed their scripts.

I'd also advise anybody installing such scripts (even locally) to read them to make sure that they only do what they say they do.
"Sitting is the new smoking"
Delivering value does not immediately follow filing a patent. It's great that you came up with something novel (chances are it's not, you just beat everyone else to the patent office), but it's not worth anything until you actually figure out how to get someone to pay you money for it. That's the hard part, and that's where the value comes from.
New Entrepreneurs Are No Longer Wise
MongoDB Aggregation
Thank you for this guide Kelsey.

I worked with countless apps and developers at Heroku on getting their apps running well on the platform. There was always one great mystery: why not build our apps a bit differently (dare I say better) to work in the cloud?

The database connection pattern is spot on. For any network resource, try to connect and if there is a problem retry with back off.

Also log the connection error events that a monitoring tool can notify off of.

I've seen apps that have the absolute worst behavior around this error that will happen. The worst is crashing the app in a way that triggers thrashing around restarts.

We had to build tons of complex restart back off logic into the Heroku platform to handle this.

I often wish app frameworks made this easier. I think most devs don't do these things because it is a chore for s problem that only happens occasionally.

But what if Rails baked this into ActiveRecord?

At one point Rails only logged to files on disk. We came together to add stdout logging to the framework.
For devcards, you can see the full strangeloop talk about the tool here: https://www.youtube.com/watch?v=G7Z_g2fnEDg
They don't do anything of the kind right now but the terms and conditions permit you to change that at any moment you wish to.

If you don't want to do this and will not do this then make it plain in your terms and conditions.
I haven't used it yet, but apparently Rust's FFI with C (in both directions) is quite good:

https://doc.rust-lang.org/book/ffi.html
> Even if your email provider does end up getting breached, you only need to change one password to be perfectly secure everywhere again.

I liked the article, but this is not true - if a service gives out password reset tokens or log-in-via-emailed-link tokens, a breach of your e-mail will still require a reset on that service. Even in a fully Persona'ified world, such tokens are likely to exist for at least some services.
I would discourage you from using production data in testing environments, even if writes are blocked. If you have any sensitive customer information anywhere in your production database, your testing environment would become an additional attack target. Depending on your industry, that might mean that your test workers will need to be compliant with HIPAA, PCI, or your production SSP.
I've been struggling to imagine how hypothes.is annotations can maintain quality and relevance. Will there be a reputation or social layer?
Mars Needs Plutonium, So DOE Just Made Some
TOOLS FOR SPORTS BETTORS
I'm interested in finding out and sharing about sports betting helpers. Below is my first contribution (I'm only writing the best in each category). Please help me improve the list by commenting.

For odds comparison:
http://www.oddsportal.com/

For stats:
http://www.sportstats.com/

For the actual betting:
Pinnacle, reasons here - http://gamblers-united.com/10-reasons-pinnacle-sports-best-bookmaker/

For news:
Google News

For assessing the meta on each match:
http://www.tipgin.com/
One random detail that came to mind: I guess the clock would now need to live on the trusted stick?
> There are undoubtedly things that I miss - and I wouldn't be doing this if I wasn't primarily writing C# - but it's not quite the purgatory I'd imagined / remembered it being.

Yes, I keep telling myself that I'm going to dual-boot my Surface Pro 3 with Arch, but I never get around to it, in large part because Windows 10 just isn't that bad.
By that definition, every action you undertake is gambling. Driving to the grocery store is gambling. But since regulating driving your car to the shop under "gambling" laws doesn't make sense, "gambling" as a legal concept involves wagering money on games of chance, and "games of chance" is a distinct concept which is separated from "games of skill". This is the line that DFS is trying to walk, because the skill side of the line is the side that lets them operate in places where gambling is more strictly regulated.
I created this Persona Advocacy mailing list 11 months ago, but didn't get any traction:

persona.advocacy@librelist.com

http://librelist.com/browser//persona.advocacy/2015/1/24/the...

You can subscribe by sending an email to (first message is ditched):

persona.advocacy@librelist.com
> just cloning the IPhone

Because it's considerably harder to do than you're making it out to be. It's not just the iPhone hardware that makes it valuable to customers, it's the support infrastructure Apple has in place, the software they write for it, the ecosystem of other products, etc. And let's be honest here - companies basically are cloning the iPhone for all intents and purposes and Apple basically clones other companies' successful products as well. They sue the crap out of each other as a cost of doing business and a bunch of lawyers buy new BMWs and lake homes and we all pay a few bucks more for our electronics. It's absurd.
I don't know if it will actually slow down aging (which is a very wide concept). But I do have a 'proof of 1' that cycling a lot will wear out your knees and hips prematurely.

Bodies are like machines, if you use them a lot they will wear out because of over-use. If you use them very little they will atrophy.

The balance is probably somewhere in the middle, yes, exercise but don't overdo it.
I would love for there to be a formalized CV standard to avoid having to reenter the info on your resume into a job application.
Actually "finished" a project for once.

I made https://stitchpics.net which is a website that converts an image into a cross-stitch pattern entirely client side (with some help from my mother-in-law for the idea)

Made it to try out Polymer and at this point I'd say that I'm not all that happy with Polymer's performance, but it is nice to work with components on the web.

The code is available at https://github.com/Klathmon/StitchPics
IIRC, nearly all of that behavior can be disabled during installation (so before any user activity exists). And if you're talking about backdoors/hidden privacy behavior, there's been a risk of that since Windows 95. I think that the defaults of Win10 are bad, but it's not all as bad as the FUD that's floating around.
Try Crystal, then?
The port to Linux will happen later. I forget the exact episode Casey justifies this but basically the problem for game developers is that every other platform other than Window is not a good target platform if you want to stay in business. So he's showing people how to target Windows first and will show us how to port later.

Just go look at the Steam hardware survey to find out why.
People are still using MongoDB for new projects after all the negative articles and comments about it?
Yup, I wanted to check a few PDF outputs. Shame.
Automated Security Updates for Ruby Projects
The author gives a good overview of the psychology of an anti-vaxxer:

1) Anti-vaxxers aren't paranoid misfits
TL;DR: Anti-vaxxers are normally rational people, but with an incorrect view on a topic.

2) It's all about fear
TL;DR: Anti-vaxxers hold their view out of an irrational fear, similar to arachnophobia, and simply using reason and facts won't work, as they're not in a frame of mind to accept them.

3) If you think something is dangerous, it's logical to avoid it
TL;DR: Though their starting premise is misguided, an anti-vaxxer's reaction to vaccines is logical. Thus, there is an emotional component in the initial premise that, when confronted with facts and reason, lead them to dig their heels into the sand and hold the line instead of thinking logically.

4) There's an industry supporting anti-vaxxers — and we're driving them into its arms
TL;DR: There are people positioned to exploit fear, and it is these people who are validating the anti-vaccination movement, despite various ethical concerns, and allowing it to thrive. Without these people, the movement would have died out shortly after it had started. Also, anti-vaxxers seeks support from loved ones and people who have experience with the subject matter to validate their worldview.

5) Changing someone's mind doesn't just take love. It takes empathy.
TL;DR: Anti-vaxxers come to their erroneous conclusion about vaccinations after bad experiences, not logic. The road to change minds is through empathy, not attack.

He makes an interesting quote in his article: "The anti-vax position was not a deal breaker for me, but suggesting that we should expose her daughter to grave dangers for no good reason was a deal breaker for my wife." This reasoning could (and arguably should) be applied in reverse: suggesting that we should expose children to easily preventable dangers (various potentially lethal childhood illnesses) for no good reason should be a deal breaker in any kind of relationship. While empathy could change an anti-vaxxer's mind, the dangers of having children unvaccinated while this strategy is employed is too risky, so a more direct approach, in my mind, must be taken. It's like trusting someone to drive you to the store while they're very drunk when it's better to never get into the car and to stop them from driving, if possible.

Likewise, he compares the anti-vaxxer movement to arachnophobia. His conclusion to drop his stance on vaccination doesn't logically follow from this comparison, however, as arachnophobia is a mental illness, treated by certified therapists when the phobia starts preventing people from living their lives or driving people to impact other people's lives. The logical conclusion to this comparison is to treat the anti-vaccination movement as a mental illness, encourage anti-vaxxers to seek out certified therapists, and enact laws to prevent people who don't vaccinate their children or themselves from spreading easily preventable but potentially life and quality of life threatening diseases.
10 most popular JavaScript libraries started in 2015
Same here, though Node is not my forte yet.
Playing blackjack is really, really, really boring (really!). There's a reason professional gamblers call it a 'grind'.

There are mathematical systems to beat blackjack (counting cards, change your bets when the odds are in/out of your favor). Are you doubting this?

The number of people that are going to successfully read the book, count cards, and beat the author are few to zero. The number that will buy the book? Many. Heck, I've read poker books, but don't play poker. It's interesting to learn algorithms, reasoning, and also to consider the psychological elements.

As an aside, blackjack is beatable if you count cards. The books are not bogus (not sure if you are implying that or not).
Not sure what's next in career – need a mentor, where to find one?
I guess I've gotten pretty lucky in my career, and feel like I hit a wall, not knowing what to do next. Unfortunately, I haven't had a mentor and don't really have anyone to bounce questions off of for what to do next, and how to get to where I want to be.