skysight-inc/HackerNews huggingface dataset:
This is so blatantly incompetent that I can only imagine the situation being a result of corporate dance.

While there are many oblivious developers, I highly doubt that incompetence was the root cause. I'd point to a lovely mix of a) deadlines; b) slow internal procedures to approve the usage of third-party libraries; and c) requirements being passed to developers without context. It's hell, what corporate environments can push us to do. I'd bet that most of the people who worked in big corps have their own stories about internal procedures making them do things they objectively knew were wrong.
I it is not that we don't need it but it is finally obvious that there is no reliable way to detect harmful software. All we are left with is putting each and every application in sandbox, unable to interact with any other software or user data. It is just very hard to make that user friendly and acceptable for average Joe.
The 'hidden' cost of traditional RAID for your home NAS:

I've learned the hard way that the 'R' in traditional RAID truly does stand only for "redundant" and not "reliable". Reliability in traditional RAID is predicated an complete, catastrophic failure of a drive such that it is either working wholly and completely or failing wholly and completely.

In a traditional RAID, for any failure mode in which a drive or its controller starts to report bad data before total failure, the bad data is propagated like a virus to the other drives. The corruption returned by a failing drive is lovingly and redundantly replicated to the other drives in the RAID.

This is the advantage of ZFS (or BTRFS). Blocks of data are checksummed and verified and corruption isolated and repaired. Yay for reliable data.
Following atoms is a lot harder than following bits
Nice! I've missed this since Netflix started to dumb-down the list of categories displayed for a movie a while back.
> Imagine if they had oil and how fast we'd invade before [...]

Except, China.
NGINX Amplify: New Monitoring and Configuration Assistance Platform
It's Time to Drive Russia Bankrupt – Again (2014)
Press the "web" link near the top of the page on HN just under the title. That will take you to a Google Search. Click the top search result.

FN will let you see the page because the referrer is Google.
If you take, let's say, 10 thousand years, and try to explain every single detail of our planet, in all branches of science involved, you get the whole picture completely painted, without contradictions.

Big numbers are just imagination, there's nothing you can prove about it. The so-called "measured" numbers of the age of different fossils etc. found are actually selected numbers of years: they pick the ones they agree with their theory, and discard all the others (that is, the majority). Very scientific, indeed :/
Show HN: Browsertime, bringing popcorntime to your browser with webtorrent
This makes perfect sense for classes like ".article51_footer_wrapper_margin50", look up the rule, and sure enough it looks like `.article51_footer_wrapper_margin50 { margin-bottom: 50px; }`

Seriously, just inline rules like that. If it is only applied in one specific place across the entire site either because it cannot or does not need to be made more general, then inlining it is easier to maintain and understand.
Note they mean inlining the css rules in a <style> block.

Not inlining the css as the style attribute of a tag.

The goal is not to have to fetch a second css page.
Global Sea Level Rise Map
The relevant Wikipedia page has some decent diagrams - from the original Ivy Mike Sausage style cylindrical secondaries through to very modern designs like the W88:

https://en.wikipedia.org/wiki/Thermonuclear_weapon

I can also recommend "Dark Sun" by Richard Rhodes for more details.
Get Start with EmberJS Online Tutorial
Who talks about God? We're talking about scientific evidence. Big numbers are just imagination (see my other comment).
Are you kidding? There's tons of things you can do and put on github if you have an embedded systems background. It's just as rich a playground as web or mobile apps. (Ed: not to mention you can at least have a web page dedicated to showing off your most interesting school projects even if you can't release code.) I do agree though that open work isn't necessarily a good filter -- nevertheless fun side project work is a large subculture and it doesn't surprise me if companies want to get people from that group.
Linux mdadm supports re-striping raid5 devices in place. I've done it, it's fun. If you're raid doesn't support that, it's deficient.
if you use the google pagespeed apache/nginx module it has an inline_css filter which does this for you, no need to cause yourself a maintenance problem.
Do you know which provider/s you'll switch to? I'm in the same position (albeit with fewer sites and fewer logins).
Not quite sure I understand what you mean by an unemployable mess, i.e. do you mean this positively, or negatively, if you get what I'm asking?
Who's gonna rehost it?
Related: I'd run across an article some time back that discussed what it was that Aaron might have been up to by doing massive data collection of JSTOR data. Unfortunately I cannot find the article and don't recall just what it suggested.

The upshot though was that there may have been some quantitative / bulk analysis that such a corpus would have allowed or enabled, potentially turning up interesting or unusual elements of large-scale academic research.

Is this ringing bells with anyone?
Aren't they the same thing?
Thank you. You're a hero in this thread.
If you have public-facing SSH daemons running, adding 2FA seems sensible. Google Authenticator essentially turns another computing device (the smartphone) into an ersatz hardware token. While this does increase security, I don't like the trend of turning the smartphone into a universal second factor.

Alternatively, you could go for a dedicated hardware token such as Yubico's FIDO U2F [1] keys [2]. Hardware tokens that use the fledgling FIDO U2F standard can also be used with PAM and SSH as well [3].

Two U2F keys (one backup) will cost around $40, and can be used with a growing number of webservices, including GitHub, DropBox, and GMail as well. The small form factor means you can put the key on your (physical, real world) keychain.

1: https://fidoalliance.org/specifications/overview/

2: https://www.yubico.com/products/yubikey-hardware/fido-u2f-se...

3: https://developers.yubico.com/pam-u2f/
Here's a google link to be able to read the original FT.com one (click top result)

https://www.google.com/search?q=site:ft.com+skyscanner+fundr...
I never mentioned spare time or working for free.
I couldn't find anything in English, but local media had discussions along these lines at the time, with incident responders blaming ESP systems. They had ambulances with flashing lights being hit by new cars coming to the scene of the accident, i.e. it didn't happen within just a few seconds; in this case it's apparent that drivers were oblivious to just how bad the conditions were.

I'm not saying ESP is a bad thing, mind you. The technical system works well and has reduced accidents overall, this is proven in several studies. There's been a few faulty ESP systems causing accidents, e.g. the Audi A3 and the Alfa Romeo Spider around '05 (fixed in recalls), but overall it's a success. But the more abstractions you put between the car and the driver, the more your run the risk of drivers ignoring, or not being aware of, bad conditions. Educating users about proper operation of any system is notoriously difficult.
Does anyone have any insight into how Skyscanner differentiates from the many other flight booking websites (Kayak, Expedia, Travelocity, etc.)?
Interesting, let check out "Modern Compiler Implementation in ML", perhaps I can start with that and then move to the Dragon Book when I'm ready for it.
Not in the slightest. I'd rather have some redundancy up front than try to restore a bunch of junk from backups.

Backups are important, but not ever having to use them is even better.

Not only that, but having RAID or mirror sets gives you flexibility in ways that you might not think about up front. For instance, I just replaced some old 750GB disks with new 5TB disks. I added the new 5TBs to the the mirror set and let it bring all the data across automatically. When it was done, I dropped the 750s out and resized the raid set to use the whole 5TB (I told it it was already clean so it didn't have to sync up a bunch of unused space). Then, finally, I resized the filesystem that was mounted on that mirror set. This was all done live, with data actively being read and written to while all this volume manipulation stuff was happening.

That is why you use RAID at home (and lvm, too).
You can upload them to redbubble.com and set your royalty to 0%.
Does anyone know of a similar project that I can use as a replacement to Persona? I was very pleased to be able to stop storing passwords and running an auth system and outsource it to a trusted third party whose motivations I trust.

Can anything fill Persona's shoes?
You can also have a bunch of workers with persistent APNS connections open, doing the same thing, but without AWS. Last I checked, SNS had a few second delay for sending push notifications.
If you have single-page web apps, you might as well inline your entire site's CSS, since it's never going to look for the CSS again.
Pretty impressive valuation for a UK company. There aren't many tech unicorns operating here.
I hire and manage software programmers.

In the majority of cases the best candidates are those that "code for fun". This means that they build shit that they find useful, interesting or to showcase a particular skill or new technology. It would be trivial for them to make some of this work available for me to see.

Where this work isn't available we pay potential hires to work on something for a couple of days.

There is usually nothing on a CV that will convince me to hire a person over and above actually seeing some of their work. In cases where I've skipped the "show and tell" step as we call it, my chances of making a bad hire increase exponentially.
Hmm that's odd. It's on my personal blog and set to public. Anyone else have this issue too?
The title here is click-bait. FTA:

> It doesn’t appear that anyone exploited this flaw in the open
Peach is pretty neat all in, seems like they've made social 'fun', something that's been lost by the current crop of social media companies.

With regards to the command line, it's really clever, it frees up so much UI space, the app appears uncluttered and inviting. If anyone has been near a Bloomberg terminal you'll know this is how Bloomberh has worked for many years, and the users love it.
MyRealOnlineChoices: an ad blocker that conciliate privacy and economy
Paying for Journalism That Matters
> Imagine if they had oil and how fast we'd invade before they even had their first scientist write the first formulas for nuclear power.

> Imagine if they were next to Israel, how fast we'd sell them the jets and bombs to take out the reactors while they were being built.

> But nope, we don't give a damn.

This is not even remotely true. The reason nobody invades North Korea is because the DPRK holds millions of people hostage. I'm not just talking about their own citizens. Any invasion of North Korea would certainly result in the artillery bombardment of Seoul. It would likely also result in a nuclear exchange. The death toll would be higher than any conflict since WWII.

The US definitely gives a damn. It gives food to North Korea and military aid to South Korea. I'm sure US officials would love for the Kim regime to fall, but there's simply no way to make that happen without risking millions of innocent lives.
I hope you don't try and write a post with a singe quote in it!

(You're directly interpolating the post content into a SQL query, rather than using parameterization. Similarly, you've got an injection vulnerability in your get, someone could infect arbitrary SQL into the post id.)
Not on the list and also not profitable yet is all the money pouring into development of self driving cars. They are robots too, aren't they?

Maybe the funding from Google, Apple, Uber, Volvo, GM etc. isn't venture capital, strictly speaking, but I would assume that it easily dwarfs most of the funding mentioned on the list.
"The only intuitive interface is the nipple. After that, it's all learned."

(Discussion on who coined this phrase at http://www.greenend.org.uk/rjk/misc/nipple.html)
It might not be the best plan, but it's not the worst plan.

Step one: Do something mildly skeevy that skims from the public weal, e.g. by using monopoly power to suppress competition (hurting the ability of the invisible hand to give hand-jobs to the rich) and thereby profiting more than an "honest businessman" would. Step two: take actions that will actually benefit the least fortunate on a massive scale.

More concisely, steal from the rich, give to the poor.

Bill Gates is Robin Hood. We who read HN are the rich from whom he stole. I used to mildly resent it, but now I only resent that he couldn't figure out how to do it without side effects like giving a cut to Steve Ballmer and giving Paul Allen the capital he needed to start Intellectual Ventures. Until those guys start Robin Hooding too, at which point I abandon all comprehension of which white collar bastards are actually bastards.
12 web development trends you must know about in 2016
GPIO Zero: Developing a New Friendly Python API for Physical Computing
Fascinating. Would something like this connection be cocaine specific?
This is a tool developed by members of my research team at Inria, Privatics. Note that I'm not involved in this project at all. We are a research group that mainly focuses on two topics: 1- understanding and formalizing privacy (that's what I work on), and 2- building privacy preserving systems (such as MyRealOnlineChoices).
Are there any findings about whether such godawful class names affect rendering performance? I mean just matching strings such as this one:

com-google-api-explorer-client-history-EmbeddedHistoryItemView_HistoryItemUiBinderImpl_GenCss_style-showHideHeaders

It's generally really hard for me to take HTML advice from google seriously, their page sources at best look mediocre, and at worst they make my eyes bleed. How can code so complicated lead to such bland looking pages? I know I'm kind of being snarky, but I can't help it. Just look at the source of that page and the linked stylesheets, look at google.com, heck, if you can find me just one elegant page I'll be grateful, because to this day I haven't seen a single one.
Which mandates 'unsafe-inline' if you're using a content security policy (CSP).

>Banning inline script is the biggest security win CSP provides, and banning inline style likewise hardens your application.[1]

So which is it? Should we be moving away from inline scripts and CSS, and tightening it up with CSP, or is performance/fewer requests more desirable? Also, with HTTP2, the performance issue seems moot.

[1]http://www.html5rocks.com/en/tutorials/security/content-secu...
"It seems suspicious when a D student aces a big test."

More like when a D student marks their own test, scores 5% and announces they've passed.
And even to Alsace/Elsass imo as it also has a lot of towns ending in -heim, -haus, -hausen, etc.
Seems like it was just a while ago I first heard of persona, and thought that it's a great idea.

Then, I did not hear of it again. Now, this. I have a couple of observations.

Branding this as "Mozilla Persona" makes it look like all the other corporate "one-time" login things out there. Apple ID, Microsoft Live, what have you. I don't need one more account controlled by a corporation. Mozilla looks like a corporation to me (maybe it is not, but it looks like one). I do not automatically trust everything with the Mozilla brand on it.

Adding Persona to a website is not that easy, from the developers' standpoint. I looked at it for a while, and couldn't be bothered. From the server side, it's just so simple to authenticate users with passwords (or access tokens derived thereof). It would be wonderful if the browser could just take care of everything, if all users really need is a way to securely authenticate. Currently, it seems to me like password managers are winning this game.

I'm hoping to see something where password managers are extended with protocols to allow more data and access to be shared to services I really use.
Reading "British curry" feels like reading "British carbonara"
I love how they, in that example, use JS to load the rest of the CSS. Seriously?
Hacking into Your Immune System
Not necessarily. If the app changes seldomly, you could reuse a CSS file across multiple sessions, whereas the HTML (i.e. "GET /") is probably always served up fresh.

That does not apply, of course, if your initial HTML page is a static asset, too.
This, by the way, is a new normal. Organizations, teams and individuals within an organization, especially its buoracracy have self-preservation and keeping their status in mind rather than any engineering discipline, leave alone craftsmanship. Such is the nature of any bloated social formation, be it government, church, army or corporation.

The very first person who suggested Node http server must be fired that very day for offensive incompetence. I could hardly imagine any more satirical example. Hypervisor in Java, perhaps.

But idiots are bullshitting another idiots (PHP, Mongo, Node, Hadoop - you name it) whose only concern is to convince those one step higher in the hierarchy that they are still worth keeping, so any bizzare mix of trending [among idiots] memes would do.

Hey, Bivis, Node is cool, huh huh. Single-threaded callback hell in a language with implicit coersion, without standard module system (leave alone versioning) as a yet another useless layer of complexity to utilize lots of man-hours for o e more year? Lol wut? Node is cool.

So, all this is rather normal.
ah, I copied the wrong link in a hurry
here's a lot more about the method
http://highexistence.com/the-wim-hof-method-revealed-how-to-...
How has Sphero/Orbitix raised so much money? They have raised $88M total.
That is not the goal. Read TFA; their example specifically still loads small.css by dynamically creating a <link> element after pageload (in a RequestAnimationFrame or onLoad).

The goal is to have the CSS already present when the "above-the-fold" content renders, so that it's that much faster to render correctly, improving user experience.
What are the cheapest drives we can use for ZFS NAS for occasional media access?

Can we use the absolute cheapest Western Digital Green drives, with limited lifespans? Does ZFS spin down drives when not in use?

Actually, how long do the cheapest drives last when spinning 24x7?

I ask because Best Buy has 5TB Western Digital drives for $110 today: http://www.bestbuy.com/site/wd-my-book-5tb-external-usb-3-0-...

But these consumer drives never list reliability figures, unlike data center drives.
Google Web/Search History Disable Does Absolutely Nothing
This is basically what webpack's css-loader does.
Salary and perks at 37 signals(basecamp)
“Light recycling” to rival CFL and LED efficiency
Sorry, but, no.

If you've gone to the effort of getting a massive raid like that for home use, you need a backup.

If you don't have a backup, stop reading, you're an arse.

Run a full backup, check restoration.

Blast away your NAS (its ZFS, relies on free space. The fuller it gets the slower it gets (unless you have SSDs or lots of write cache)) It's probably due and upgrade, (OS/XFS)

re-arrange your array, you're changing the way you use it, so you need to do it.

Restore data back over the top (with compression...)

as for "it costs money" well thats why you chose zfs, for redundancy....
True, and you can always have a "Click here for more info" in the email pointing to a believable page.

But yeah, an image will most likely do it.
Https://slack.com/ is down?
I had a pretty simple query: "What's the cheapest flight from my airport to any given airport in Japan for the next 12 months?" I didn't care which city I was heading to because I planned on visiting quite a few cities and they're all connected by the Shinkansen. I didn't care about when I'm leaving because my dates were flexible.

Skyscanner was the only one capable of answering my query. All the competition required me to provide a specific destination and the approximate travel date for any searches.
Jaywalking is a textbook example of a failure of the criminal justice system. The offence was invented by the auto industry to shift liability from drivers to pedestrians. It became law through lobbying. It is highly pertinent to the Swartz case.

http://www.citylab.com/commute/2012/04/invention-jaywalking/...
Class names are interned (see https://en.wikipedia.org/wiki/String_interning), so string length does not affect rendering performance.
I was job hunting recently and I can confirm this. Work as a developer at a previous company is better than work in the open (side project) and work in the open is better than work you can't show, and some experience is better than no experience (but having raw intelligence, willingness to learn, enthusiasm).

Then, even if the work is in the open you have to sell it to them. At one interview I didn't feel very well so I couldn't do this. But the website was on their laptop and they could have try to use it a bit. Instead they relied on questions.

Then you have the not-so-smart but with experience developer that never changed jobs and so they are now team lead etc. They ask you "how long will it take you to learn X". You say "2 months". Their reaction is "this guy is bullshiting me, I've spent 2 years learning this thing, how could anybody else learn it faster?"

Then there are the guys asking question google could answer for you. But because you don't know the answer they don't give you "the points".

After all this, they turn around and complain about how hard it is to find talent.

I'm from Eastern Europe.
I was using it for years on our sites, IT IS very easy to implement for a developer, especially easier than dealing with oauth oddities from google,facebook,microsoft etc

Yes one can program own username/password etc login, but it is actually alot of work making a proper one with all the edge cases (, password strenght, email validation, verification, account recovery) and so on and so on. I know because I have done it dozens of time and each time the project has slightly different requirements

Mozilla Persona was dead easy to implement on the other hand! Also alot of people did not like and complained about having to login with Google, Facebook etc yet the same people had no issues trusting Mozilla due to the goodwill they built up with firefox and their fight for privacy
8 Business Lessons I Learned from Watching Steven Spielberg’s Work
That always depends on the market. While Chrome leads the US market like IE used to, Firefox is for example the most-used browser in Germany. Maybe it would have been a valuable approach for Mozilla to work with a specific market when introducing Persona, e.g. the big German webmail providers.
"and fend off takeover offers from larger rivals"

Why does a private company need to be concerned about takeovers?
The "Calendar of lowest fares" is seriously nifty.

Kayak and Skyscanner knows about Ryanair but Expedia and clones don't. In general, Skyscanner knows about non-GDS airlines. To see whether a search engine is Ryanair-friendly search for BUD-VDA (Budapest - Ovda) as this route is a recent Ryanair invention. http://corporate.ryanair.com/news/news/150707-ryanair-announ...

Same story for Allegiant, search for BLI-OAK.
(Disclaimer: I'm not a coder, so I easily get overwhelmed by what others might see as very simple)

It may be better for delivery, but the second example is unreadable compared to the clean one. I can see why it's much better to add 15KB to your HTML file than having to request those 15KB from a separate file (one or two full round-trips of added latency :)).