skysight-inc/HackerNews huggingface dataset:
There is a Go AMA on reddit for the next 24 hours.

https://www.reddit.com/r/golang/comments/46bd5h/ama_we_are_t...
:-) His name was Gordon Preston. He also worked in the Newmanry, so yes they did work together! :-)
Break Up the Big Banks? Do This First
Despite being a great work, delve is slow and sometimes might skip some of my breakpoints and have problems in debugging goroutines.
Yeah, even if the DOJ ordered Apple the corporation, ultimately they would still have to force one or more Apple engineers to perform the task. That seems messed up. Would the Apple engineer at least have the option to quit?
Good thing they probably spent about 100k on this cloak and dagger circus, when all they really needed was a single gov employee taking an uber ride.
The reason I love Go is that every time I pull it out, I write a small amount of it and it runs beautifully. For example my company has a critical micro-service implemented in ~300 lines of Go, it's been running for six months now without a single hiccup, highly performant, very sexy.

The reason I will almost never use Go for web apps is because interaction with databases is limited (almost entirely) to raw queries. Maybe I'm spoiled by the likes of Active Record, Sequelize, Mini-mongo, Sql-alchemy, etc, but it's a huge drop in efficiency to spin my own SQL.

The point to take away here is that Go, more so then many other languages IMO, has its strengths and weaknesses. If you use Go in one of it's weaker use-cases you're gonna have a bad time. If you use Go for one of it's strengths you're gonna have a great time.

See you guys and gals in n weeks when we need to rehash the pros and cons of Golang again.
Sounds like Vancouver, or maybe Victoria. I wish they would tax the everliving fuck out of vacant storefronts. Whatever price the owner intends to rent for, they have to pay that amount to the city every single month the place is vacant, with strict enforcement and publishing the rent prices so that they can't jack it up once someone moves in. And let the tax money go to homeless shelters for all the people who are out in the cold because of vampires jacking up rental prices til they're too high for anyone to afford.
> Let me ask you this, out of the poor and the rich, which one is more heavily leveraged into assets (using debt).

The question is irrelevant; the wealthy may be more likely to be "leveraged into assets" (though, depending on the measure "heavy" relative to, I think you'll find that working and middle class homeowners often win this), but the poor are more likely to be net debtors (including, on both sides, in the credit offset against debt credit held indirectly through holding ownership interests stakes in net-credit-holding enterprises.)

Since low interest rates reduce costs for net debtors and decrease returns to net creditors...
404 when clicking this link.
CSRF and You (2008)
Thank you for your reply. Interesting you mention intercepting users passwords.

Our system already went through a similar transition years ago - when we had to migrate away from NDS (Novell), since we abandoned that technology.

In NDS we did not have access to hashes. We ended up having to "MTM" the passwords in opur web app to intercept them before they are sent to NDS and after a successful login store them in the database. To transition our entire user base took a very long time (more than a year), since we had no way to compel the users to login and had to wait until they login on their own volition.

Ever since we've been reluctant to lose the ability to recover the passwords. Transition to Active Directory has been on our agenda for quite some time - and having the ability to decrypt the password for this purpose - we can make that happen in short order (AD hashes the passwords, so it will be a one-way operation of course).

But the question still stands - is asymmetric encryption strong and secure enough to take place of hashing, assuming the private key is secured? I have not been able to find any relevant sources to answer these questions.
Yes, I'd say modern Java is a good candidate too. However, the verbosity is a deal-killer for me. Go's error handling can be verbose, but while scanning the code, if I want/need to, I can easily skip through the error handling parts mentally. Java, though, is verbose everywhere. EDIT: Actually mtrn said it better: Java feels over-engineered.
Yes. The target phone, an iPhone 5C, lacks a Secure Enclave.

The password retry delay, and subsequent deletion of keys, is enforced by iOS here. Apple could provide some kind of software to allow for unlimited attempts (and an interface to do so in an automated way, which the FBI is specifically asking for).

On newer phones, the Secure Enclave contains the keys, and enforces both the retry delay and the deletion of its contents. There isn't a way around this without also upgrading/flashing the SE system (and it isn't even clear if Apple can do this in a way that preserves the keys).
We are the Go contributors: ask us anything
I've really enjoyed the time I've spent with Go but feel like the state of dependency management has kept me away.

Am I being stubborn in my longing for an npm, Ruby Gems, or pip? Is there a reason why one of these hasn't emerged/been adopted by the community? (I'm aware of the 1.5 experiment with vendoring.)

Semver and pinning versions has always just made sense to me. I can easily adopt new features and fixes automatically without worrying about things breaking.

How does the community feel this far along?
The front page of golang.org announces the release of Go 1.6. It has been officially released
You would expect the higher level officers and directors to be in plain clothes, normally.
Agreed. This would be analogous to the watch (subscribe) and star (vote) mechanics for repos.
I mean, it's an accurate statement. It's just also true that people usually don't want to be deposed even if they have nothing to hide. The "when they have something to hide" part is just superfluous.
Nr 1 on the front page already... https://news.ycombinator.com/item?id=11121734
I thought Apple already had backdoors. I feel relieved that my iPhone is not backdoored and I'm also very happy for a company who's products I use daily.
I think the FastMail webapp is better than Gmail.
I guess you can argue semantics, but it's an order accompanied by a credible threat of violence if the order is not obeyed.
They're good tools. I'm okay with that.
Rebuilding our integration docker image right now. If all our tests pass I expect to have go 1.6 binaries in production by this evening.
> They store their customers data in a way they can access and subsequently have to give it to persecuters

What has to do your post with this claim?
I upgraded and it broke our app, something to do with the way it handles https has changed, not sure what
When different code needs different JVMs, it gets to be a pain. The Go advantage is a fat binary, no dependencies.
> Yeah, even if the DOJ ordered Apple the corporation, ultimately they would still have to force one or more Apple engineers to perform the task.

More likely, they would impose consequences against Apple-the-corporation were it not to cause the task to be performed, rather than forcing an Apple engineer to perform the task.
Is "alternates" a euphemism for "code duplication?"
How do you load balance a Flask application since it's single threaded? For optimal performance shouldn't there be a single Flask instance (process?) for each request being processed? What kind of load balancers are usually used with Flask and how do they decide to spawn new Flask instances?

And why should Flask be used instead of asynchronous Tornado or Node.js?
Will fantasy football get cut soon?
> Most other countries they are losing

Maybe by share of units shipped. By revenue share they dominate, and their margins are estimated to be very good.
Yes, it would be awesome.

> they rather be rich than free

But don't most people want to be rich so that they can be free?
Okay, ditch Java if it's too verbose and adopt one of Kotlin, Groovy (w/ @CompileStatic) or Scala.
My issue is with talking to the media. The people at the conference (should) realize it is just a high level overview (usually with preliminary data) presented to let them know what is going on and get them interested in the topic. It is not taken as a serious venue to make any claims.

Also, did the link change? I can't find the line I originally quoted anymore.
With Rust, we already had a mini-template inside of our CONTRIBUTING.md. Doesn't seem very different to me.
I wonder why they have restriction based on file extension in place, it's just inconvenient that you have to rename .patch to .txt only for the UI to accept it.
> Heck a decent sized apple or an orange have more sugar than a can of coke should we stop eating apples?

No - it's not that simple.

There is a significant different in how blood glucose levels are affected by eating an apple vs drinking apple juice (or indeed any other fruit).

Juice lacks the fibre that was in the fruit, along with some of the nutrients that were in the flesh and skin. Fibre slows absorption, so the GI of a piece of fruit is lower than that of fruit juice.
I just got this email:

"Hello gophers,

We just released Go 1.6.

You can read the announcement blog post here:
https://blog.golang.org/go1.6

..."
> The out-of-band network tap that Joyce describes is exactly what a product like ExtraHop delivers.

...

> Well? Can you see those intrusions, and see where they try to go next? Do you have the visibility into the East-West traffic that Joyce describes as being so crucial to stopping advanced, persistent threat actors from exploiting you?

> ExtraHop can give it to you. Our platform auto-discovers and classifies every device, every interface, and every application that touches your network, and can observe and analyze ever transaction in real time. We give you all the information you need to stay one step ahead of anyone who might be trying to break into your network.

> Read our security operations use cases or try our free demo to see how.

This reads like an advertisement.
The title of the main project ("SMCRoute - A static multicast route tool") probably would make a better title for the submission because it contains at least some hint what it is about ;)
>I'm sitting here having to refresh the page every 5 mins because it won't update, or it's lost a toolbar button.

Yeah, I assume you mean the manual refresh button that has gone missing? Pisses me off too when I know there is new mail.

You can click "Inbox" again to force a refresh. Still sucks, but better than reloading the entire page forcibly.
Is there any way to download the actual GIF yet? Last I looked it was impossible, which sucks for small-palette aliased animations.
This is something I commented on recently. Retraining programs and those already in the industry say social networking will get these people jobs. But they have the weakest networks in their new career. Yes, I could reach into 100 companies through my network and get an interview. A new person cannot. The assumption of using social networks is true only for those already established.

Longer discussion of that as a comment on this blog post (http://www.siliconsloper.com/2016/02/tech-hire-utah-initiati...)
You don't have to "get" anything. If Java works for you, great!!

Go just works better for some of us, and that's all the justification we need.
> Interestingly, people usually don't want to be deposed when they have something to hide.

You don't need to have done anything wrong to fear a deposition. Go to youtube and watch any number of "do not talk to police" lectures. An innocent person can end up trapping themselves in a lie, or bow to pressure. Or you may say something that you think is harmless but in fact damns you. Depositions should be avoided wherever possible.
I don't like Oracle. I don't like the JVM. I refuse to learn Java because I personally have a strong bias for native, compiled code. In fact, I really dislike everything about the Java way of programming. The mental image of a huge ram sucking IDE with code completion for frameworks is simply incompatible with what I would consider the ideal creative process for me as programmer.

That being said, if I were starting a web service as a business today, it would be very hard to persuade me to not choose Java. It's simply the best platform from a business perspective. For better or worse, CS departments across the US produce Java programmers more than anything else. This makes it very easy to hire Java developers. Java has stability, Java has concurrency, Java has hot reloading, Java has a good track record, Java scales, Java has really nice functional programming support, and Java is very popular with the everyday programmer. It Java has so many benefits outside of it's technical or philosophical specifications, that it's almost an obvious choice to me for web.

What's funny is that Erlang is the ideal platform for me from an idealist perspective, but I don't think I have the luck or experience it takes to successfully start an internet company with Erlang.
Rent is a tax on the poor by the rich.
emacs is an IDE wrapped inside half an OS
Projects at Apache have varying levels of integration with Github. For projects with good integration (and there are lots: Spark, Cordova, etc.), a pull request is fine.

As for why projects choose Apache over Github, there are lots of reasons. Some of them apply to choosing any foundation (Apache, Eclipse, etc.) over Github: legal rigor, known quantity for enterprisey consumers, and so on. Probably the biggest reason many company sponsored projects end up at the ASF is because the ASF has a reputation as a good place for competing companies to collaborate on a common code base.

Personally, I have chosen to donate a great deal of my own time and energy to the ASF because I greatly treasure its emphasis on governance by individual contributors rather than corporations. (That the ASF is a 501(c)(3) non-profit rather than a 501(c)(6) like some of the more slick, consortium-like foundations is related.)
Vend CEO seeks own replacement to focus on product vision & evangelising
> No, they can't. A quick update to recent hardware practices: modern SoCs like Apple's have something called "Secure Enclave Processor" that's on-die.

Yes, they can. The particular phone in question is from before the Secure Enclave Processor
There are milestones for 0.11 and 1.0:

https://github.com/mitsuhiko/flask/milestones/0.11
https://github.com/mitsuhiko/flask/milestones/1.0

None of the 0.11 blockers are substantial, and 1.0 is mostly about having updated documentation. It just requires someone to actually finish them.
A common approach is to run Flask on uWSGI or gunicorn. You then put this behind nginx.
Does usability matter?
Create some basic model - for example fill CANVAS table within 24 hours and ask someone for feedback. The best option is someone working in related area or with real experiences. You will get very valuable feedback and you can decide whether if worth to spend time with this idea or not.
Dependency management is a huge weakness in golang and there isn't much point in debating it.

That said, my time in golang has crystalized something I'd been leaning towards anyway, that is dependencies are way more dangerous than we think they are. I find all of my code now (golang or otherwise) less likely to have dependencies, and therefore dependency management weaknesses are mitigated (not solved).
Embed the JRE then. You have to build packages for each platform you want to support, but that's no different than Go.

Besides that, different JVM's? Very rarely does code depend on a specific JRE unless we're talking between versions (say 7 vs. 8), but you would have the same problem in Go if significant language changes were made between releases.
Maybe they've mixed up ms and µs? Their claim of "between 100ms and 250ms" for NTP also seems way too high.
Something I never understood. If velocity (?) affects time, wouldn't time operate a different speed at different parts of the universe / solar system?
This has happened to Lessig on several occasions, too, and one time he fought back: http://arstechnica.com/tech-policy/2014/02/lawrence-lessig-w...

Would not be surprised to see Terry Fisher do the same.
Custom Machine Types goes GA, saving you up to 50% on compute costs
Green threads are awkward to express with the JVM threading/memory/io model. The runtime is massive (contrasting to the go model of statically linking deployment binaries). Some semantics (such as unsigned 64-bit integers) are difficult to express. Java's JNI is a PITA. I don't believe go's c bindings are much better, but the JVM definitely has its sore points.

Finally, the object-oriented nature of the JVM is sometimes a pain. This can be worked around, but there is something to be said for preferring the typing of Go.
I just added a comment up-thread with my experience in production with Falcon. Check it out.
Are you a broker? Because I suspect your knowledge of the rental market might be incomplete.

> Usually, the complaints people write stem from issues related to their inability / lack of desire to pay their rent on time.

That doesn't make much (any) sense to me. People complain about their landlords because they can't pay their rent?
Nicholas Merrill famously fought a 11 year legal battle (and finally won) the right to reveal all aspects of a National Security Letter (NSL) served to him. Almost all such letters are accompanied by a complete gag order.

https://www.calyxinstitute.org/news/federal-court-invalidate...

EDITED / CORRECTIONS - Thanks commenters - The battle was won by Nicholas Merrill not Ladar Levison of Lavabit fame as I originally posted.)
I like this. It's got a good "founding document" feel to it. It doesn't take sides. It allows reasonable accommodation for situation and person. I would be concerned that some may not feel protected enough by its language; it doesn't really say what the punishment is for not according by it. I wonder what the development process for it involved.
Great points! I've worked with Flask for a while, as I've gotten to be a better developer. I used to have a lot of my logic in the application itself. Now, I ensure my logic lives in its own modules. Flask is really just either a way to serve my templates or API.
Startup bets on "H5OS" device success by sneaking under Apple and Google radar
Watson A.I. XPRIZE,  a cognitive computing challenge
+ invest your savings, so they can start compounding and make you more money
dang normally comments when he changes a link, as he did here: https://news.ycombinator.com/item?id=11120948
Not only do NSLs not require approval from a judge, they also include a very intimidating gag order that prevents you from discussing the issue with anyone else (including even your own family).

One of the big problems with NSLs is that you can't let anyone know that you've received or acted on one, so there's very little accountability.

Hence the recent trend of some companies including a warrant canary on their websites, under the assumption that a NSL can't prevent you from _not_ saying something (e.g. deleting the canary).
>>If the most urgent question of our times is why we fail to care deeply about the most urgent issue of our times, then there are lessons to be learned in the shadow of Comox Glacier.<<

A sobering statement...

Nice write up, and spectacular photography...

I learned that there's actually a term for the remorse I often faintly feel when I think about the Earth my children and grandchildren will inherit...

"Solastalgia", which describes a form of psychic or existential distress caused by environmental change, such as mining or climate change.
Are there any similar shortcuts?
You typically use something like uwsgi or gunicorn to serve requests, and it's uwsgi & gunicorn that decide how many processes or threads to start. These typically sit behind a load balancer and / or a reverse proxy.

In terms of async Tornado / etc, it serves a different need. Like all wsgi servers, it is best to optimize Flask such that you serve a small number of concurrent requests that are fast to prevent a long queue waiting to serve web requests. With Tornado you have more flexibility in that particular area, but also another layer of complexity. Different tools for different use cases.
Release notes: https://golang.org/doc/go1.6

Mods, maybe change OP link to this?
> why do so many programmers think their job is inherently more special and difficult than everyone else's?

Probably largely because they get paid more than all of their peers when they start their careers.
Python – How to use functools.wraps
It's a bit unclear how enthused Mitsuhiko remains about Python development. He is one of the greatest contributors to the Python community and undoubtedly one of the most impressive software developers on the Internet. He is very "Python 2" oriented though and I wonder if his enthusiasm for Python has waned because he could never get onboard the Python 3 thing with enthusiasm. To his credit he updated Flask early to Python 3 and he has written alot of other stuff, most of which I understand to be Python 3 compatible.

As everyone here knows, it's hard to write software when you don't feel enthused about the programming language.

He has been doing stuff with Rust in particular. Maybe there will be a "Rusty Flask" one day.
To pay off a town house in my area in 10 years, you'd have to carry a $10,000 monthly note.
To clarify, on A6 and earlier this is enforced in software. On A7 and later this is enforced in hardware.
Chinese hoverboard firm counter-attacks US rival
Will do that next time. Thanks for the suggestion :)
https://www.youtube.com/watch?v=6wXkI4t7nuc
It's important to understand that Flask is really, really, really tiny. Most of the meaningful code about handling requests etc etc etc is in Werkzeug. Flask is really a small layer adding some convenience functions and tying into templating.
There really isn't a reason, I don't believe, to use Flask over X. It's just as good, and it comes down to your needs.

To answer your first question: you use something like uWSGI. Flask, by default, stores sessions entirely client-side. You'll have to use something like Redis if you want to use more than one server (properly, anyway), but a Python app like this should easily be able to scale. It won't be Flask that stops you, anyway.
Yes. http://archive.is/HUW8c
Homeowners also get a lot of deductions too. In general you end up paying more owning vs renting, but you want to make a good investment when purchasing a home. So, in the end you typically end up ahead when owning, unless you didn't make a wise investment.
This is the better solution. California charges $160,000 in taxes per home before it's built. Not to mention extremely restrictive zoning laws.
Ah, I see, so with newer hardware it wouldn't even be possible for Apple to enable brute forcing with a software update. But even with older hardware, presumably allowing brute forcing is still the worst they can do, right? (Assuming no prior backdoor exists.)
The post mentions Falcon at the end. At Cronitor, I rebuilt our ping tracking endpoint (peaks over 100r/s) with Falcon, breaking it out of Django, and I wrote a blog post about it:
https://blog.cronitor.io/scaling-django-breaking-out-not-bre...

Here's a tldr:

Logging requests to a flat file on a t2.small instance:
Django: 519.93 trans/sec
Falcon: 2083.19 trans/sec
Thanks, it turns out I actually starred that already.

A bit off topic: why isn't there (or is there?) an easy way to view all your starred repos on Github and search through them?
Oh, don't mistake my comment for favorable opinion. I only wrote a few hundred lines of Go in my life. It worked well for the particular problem I was solving, but I'm really more of a C/C++ guy.

The problem with lisps is that you need to know lisp, and relatively few people do. It also requires a different approach to program design. It may or may not be a better approach, but the fact is, that's not what most people are trained for.

In contrast, go is imperative through and through, and its syntax is similar enough to C that people find it easy to adapt to it.