skysight-inc/HackerNews huggingface dataset:
And I wish that we could stop focussing on the ageism, as if that's the most important point or whether it's even a negative point. I used ageism to reinforce the notion that we should try harder to push for convenient security. It wasn't meant in a pejorative way.

Maybe your point was that ageism isn't acceptable in any form. We'll have to disagree there. I agree that pejorative ageism isn't acceptable, but doing away with ageism entirely is pretending that something real doesn't exist. Sure, not all young people are computer geniuses, and not all old people are computer illiterate -- I never said that, but that doesn't matter because focusing on that just detracts from the core point I was trying to make.
Hospital pays $17K ransom to get back access to encrypted files
You can't currently link to Qt statically though. (And holy smokes, that would be a huge binary if it did, just libQt5Widgets.so links to 49 other libraries, everyting from X11 libs to libbz2 to opengl)
The rumour a few weeks ago that Amazon was about to buy Ocado was pretty interesting. While almost every supermarket chain in the UK offers delivery, Ocado is the only one that is online-only without physical stores. They have a big infrastructure with warehouses around the country, but most importantly they have excellent software, which they white label for other companies. As well as jumping into the UK grocery delivery market (which is the most mature in the world), they'd also get their hands on the technology to take it to other countries.
Mine often makes the beep without registering the press. Drives me nuts.
PTT Eleman Alımı 2016
The "Architecture The Lost Years" talk is a real gem
@LinuXY thanks for this. Looks pretty useful!
Ewwww, this website...
Interesting article but the title is quite misleading, it is erased, not hidden.
The entire Facebook Ads Manager app (on both platforms) is written in React Native; there's no custom native code in either app.
Yes, this is so important to communicate. I think "waiting for inspiration" is a bad approach and bad advice for anyone who want to do something professionally. Unless you are inspired 20-40 hours per week, only hobbyists have the luxury of waiting for inspiration.

Also, how will you ever improve in something if you only do it while inspired? And how will your inspired work be any good if you have no practice and experience to build upon?
The PyPi download statistics are constantly being quoted as though the are some exact representation of the state of Python 3 takeup.

I'm calling this as bullshit.

How much of these downloads are computers auto updating their configurations?

How, exactly, do these stats reflect the number of people developing current projects with Python 3?

The number of legacy projects written in Python 2 will be vastly higher than the number of Python3 projects currently in development. Maybe that's what is being updated.

When a statistician does an analysis of what these numbers really mean I will believe them but until then the numbers mean precisely nothing. Or more accurately, they seem to mean exactly what the Python 2 diehards want them to believe.

My assertion is that Python 3 is very actively and healthy and the PyPi stats are just lies, damn lies and statistics.
if you buy some products delivery is free; this week it
was 8 bottles of coke or so

I'd be interested to learn more about that - could you provide some links?
can we please stop writing articles in twitter?

https://twitter.com/hynek/status/699928792752594944
I think this is a nice healthy view to have about Python 2 to 3. Can't wait until python 4!
UK government will not provide free phone access to set up benefits claims
... except for things like batteries, cables, and chargers, which have had 1 star reviews for literally years, and Apple has done nothing to change their design. Hrm.
I'm not saying starbucks drinks aren't sometimes overloaded with sugar, but aren't large drinks at starbucks considerably larger than a can of coke?
MongoDB plays very well with the rest of the javascript based stack, which mean development and testing is simpler. For many use cases the development time is the real cost, and the database itself is simple enough that what it is running on does not really matter much.

Most people are not building Big Data systems.
I code in both 2 & 3, and had been nervous about that. New stuff with low dependencies in 3, and older stuff with Python C API dependencies in 2 (eg spreadserve.com). I was worried that the move to 3 would force migration of my 2 based code, so I'm reassured rather than alarmed by this article. The cognitive load switching between two Python dialects isn't as bad as, for instance, switching between C++ with and without STL & Boost.
That's true, many non-technical friends I have around my age are not at all careful. But at least I've never encountered someone who thinks in terms of "the Internet needs a password" and confuses different accounts with each other. But frankly, it doesn't matter: I only mentioned age to reinforce to the reader that it is a real problem that deserves recognition and that we should try harder to do away with passwords and to strive for convenient security.
It nearly happened with Hushmail, who say they would have been forced to serve a malformed Java app in order to comply with the warrant. The fact they didn't is only because they had access to the email without needing to do that.

http://www.wired.com/2007/11/encrypted-e-mai
There are some fascinating things you could do with one of those. You could, for example, make a "stick boiler"—like a "stick blender"—that you stick inside a cup of liquid to heat it up, without any part of the stick itself getting hot. (Presumably there'd be a waffle-grid cross-guard to block reflected RF.)

But, in the wrong hands, that's a directed-energy weapon, isn't it? (Hell, stick one of these in the right kind of tube and you've now got a coherent RF beam—a maser pointer. You could probably burn your name into a wooden building from across a football field with one.)
But if the extra income is taxable, then this is an equivalent way of delivering the net amount.
Not only prototyping. If the final product will have a moderate amount of users generating a moderate amount of data, there is really no drawbacks with mongoDB. The real cost is development time.
I don't think I can teach them how to use LastPass if many of them already can't differentiate between accounts and just think of everything as "the Internet".
> Are they?

Yes, they are.

> We have no way to know as no modern language has the reach and widespread usage of something like C.

None needs to have that widespread usage for us to see this. Many bugs in C code causing big security issues are impossible to make in more modern programming languages. Sure, you can make other security issues, of course you can. But the net result is less security issues.

> the main issue is not the language but the programmers using it.

All bugs are caused by programmers making mistakes, but that doesn't mean the language isn't an issue. A language which requires more effort to write correct and secure programs is an inferior language. A language with a long list of situations where the compiler will silently invoke unpredictable behaviour, a list any programmer will sometimes fail to fully account for, is an inferior language.
Here is how much comments is actually needed:
https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdi...
I get my python 2 and 3 dependencies from distribution packages (Arch, Debian), and so do all people using my software. PyPi impact: Zero.
My Autistic Brother's Quest for Love
Crazy Chinese Company to Buy Ingram Micro for $6B ALL Cash
A flâneur is someone who walks around leisurely, having time to notice stuff and interact with people. Every self respecting snob should have the word in his vocabulary :)
Since about half a year video ident is gaining traktion, which is basically the same but via video chat. Still not free but probably cheaper, less effort on your side and usable while travelling (as long as you don't loose your passport).

I think Revolut and some other services even use the NFC chip in passports (yes, it can be read by regular smartphones) to identify you almost automatically.
Once they made it, locked for that device, the FBI knows Apple can make it again, locked for another device. The tool is for any user's data, via a court order on Apple.
I really like the Fido U2F concept, because it ticks all the right boxes; simple to use, reusable for multiple services without being traceable, multiple hardware vendors, open standard, soon implement in Chrome, Firefox, and Edge (although I am not sure about the status in Edge right now), and cheap.

But this solves logging in with a browser. I have been wondering about things like IMAP for e-mail access. To secure my mail a second factor sounds great, but right now all solutions mean I get 2FA when I log in with a browser, but as soon as I use an e-mail client I am back to username and password (application-specific or otherwise).

Ideally, Fido U2F would be an option to use with IMAP and SMTP as well, so that Thunderbird, Outlook, or Apple Mail can prompt me to touch the U2F key when I get my mail. I have not been able to find much information on this approach yet though. Is it possible? Desirable?

Any insights?
So mean.io with React instead of Angular.
Best VPN for Torrenting and P2P File Sharing [Updated 2016]
Because people hate the constraints put in place by SQL. It doesn't really matter that they'll spend dozens of hours re-implementing stuff they would've gotten for free with SQL in a RDBMS (not to mention the benefit of serious stability), what matters is that the initial effort to make a change is much lower, and thus developers feel like they're saving a lot of time/hassle. They don't seem to connect the cost on the backend with its cause, or they just don't mind it.
Wow. To add on top of the stigma of being gay in a homophobic culture, now they're going to be targeted as potential traitors/informants too.
That's just... wow.
He's a blogger, why does his response matter? It's the response of the tech companies that matters.
> This is just huge hypocrisy and full of lies. First of all, Apple CAN attempt to brute force the password. Compiling whatever new firmware is needed and signing it with their keys will not introduce any new backdoor like they claimed and lied to the public - the backdoor is already there, and it is their private keys. Just like that "backdoor" somehow end up at some bad guy's hand, so could their private keys.

Thank you! This is the most important technical point about this whole thing. All the talking about the SE (fascinating as it may be) is irrelevant. All strong crypto that is based on a private key being kept in a secure vault at some corporation does have a backdoor. The keeper of the key can be compelled to use it to sign something.

This is exactly why this would be such a dangerous precedent. Government giving software specifications that are signed with a vendors public key. In this case, it's a one off but it's a step into the direction of "upload a screen-shot of the phone's display every minute to ftp.nsa.gov with your next iOS update". And no SecureEnclave will protect against that. It will just be a OS update signed by Apple.
Google owns blogpost. Google has several blogs there. Surely it'd be a vote of confidence for him to use it?
Such backup codes are probably the safest way to go about this. A sheet of codes that you print or write out on a piece of paper and store with your valuables.
Git Cheat Sheet in Arabic
Not an Apple fan so genuinely curious how this unique ID is secured.
Well the point is to have alternatives.

The platform itself is a full Linux so of the three it's closes to being a "replacement" for the Nokia N900. Since no-one's developing the N900, it's actually the best chance of a Linux phone at this point.
Play sounds effects (Zelda etc.) on common Git commands
GacUI: A GPU Accelerated Cross-Platform C++ UI Library with WYSIWYG Dev Tools
Southeastern and Thameslink 'worst' in rail satisfaction survey
Latitude isn't entry-level, it's just the business line. Yes, they have the high end Precision workstation line, but Latitude models typically are built as good as or better than XPS models.
As a curious noob, could u explain what is the source of the XSS vulnerability in this case? Is it simply that the site isn't being served over tls/ssl?
I tried switching to 3 a few years ago and was burned by some libraries that didn't work or worked with bugs.

Last year though I tried again and there were absolutely no problems. It's more natural, all non-dead libraries seem to support it, and in any case I was already using "from future import" for a while.

That said, I don't really intend to port old stuff from 2.7 if I can avoid it, so I expect that 2 and 3 will coexist for a while even within the same firm
Hospital paid 17K ransom to hackers of its computer network
Hmm I’m not sure how to take this comment. The main point of the article is basically that those numbers don’t tell the whole story (even explicitly in footnote 1).
That's an interesting point indeed. When you are fired from your job, you don't often have the time to connect to all our accounts based on your email address to change it.
Just checked their FAQ[1] but this does not seems to be covered.
Any clue someone?

[1] at the bottom of this page: https://medium.com/the-story/signing-in-to-medium-by-email-a...
The firmware for the Safe Enclave can be updated, but only with the Apple private key. Which is as secure as it's possible to get in a consumer product that gets improved upon after sale.
Akka 2.4.2 Released (includes Streams and HTTP)
Not sanitizing input, by either scrubbing out any <script> tags, or escaping those characterst to html entities.
Pyramid avoids globals wherever it can, so this leads to cleaner and better architecture. has an event system that you can plug in, and customizable auth system. You also have powerful pluggable configuration system where you can easly add new functionalities to your app as extensions, like provide pluggable service layer, or auto add new views from external package for your application that handle some specific functionality.

It was also among first python frameworks that supported py3.
Only in Dutch, but here is the page: http://www.ah.nl/gratis-bezorgen/wk7/coca-cola?ah_campaign=i... .

At the top it says 'free delivery when buying 2 4-packs of coca cola, for deliveries on Wednesday, Thursday and Saturday. Also valid at pickup points.'

The 'pickup points' are where you can go to collect groceries yourself; you order online, it's bagged for you, you drive into a location where they put the bags into your car, you pay and you drive off. Takes less than 5 mins, many people schedule it on their way home when there is nobody at home to accept deliveries.

I love the home delivery thing - it feels very decadent though.
Actually, this is a quite interesting distinction to consider. There is significantly more danger in hacks which can "scale" due to centralization and non-physical access compared to physical access.

In the case of cloud data, the government should be held to a higher standard of restriction, because all of the data is in one location, and requires only a single "factor", the identity of the target to collect data for. This applies to both "encrypted at rest" and "encrypted in flight" data.

But for data encrypted at rest on actual physical devices, there's an inherent '2-factor' security to the private invasion. The government must not only know the identity of the target to collect the information, they must possess the physical device as well. ("something you know" + "something you have")

This means, IMHO, there is far less danger, and far less scalability to "one off" hacks like the ones being requested to Apple. They don't scale to Snowden-level dragnets, they don't present low transaction cost barriers to acquisition.

The dangerous think for decentralized data is having an active attack on the device, or something which intercepts the data "in flight". These are scalable attacks you need to worry about. E.g. "push a key logger to every iphone software update"

Perhaps the law needs to make a distinction to warrants for 1-factor data vs 2-factor data, due to the inherent danger of 1-factor data, given that it scales easily to monitoring millions with little transaction cost.

So in this regard, I think there should be MORE push back for collection of cloud data, but individual one-offs for physical devices have a safer threat model.

I view this more like a Vault being found at the home of a murderer, and the cops asking the Vault maker to help unlock the Vault without revealing the proprietary locking mechanism, or without the cops needing to blow up the vault and potentially lose whats inside.
Google Shopping Express (the superior name) is the best delivery service I've used. One of the best Google products too. For car-less city dwellers like myself, it is a huge time and effort (and potentially money) saver to get bulky and heavy dry goods delivered to my apartment. There is definitely profit to be made here if they cut out the middlemen (stores) and operated their own warehouses. Right now they're probably trying to piggyback demand data, if they're smart. When you add in Google's ability to make quality software and algorithms it makes sense where their edge can come from.

But sadly, it will probably be just another "me too" side project that gets axed.
How do you handle sessions and user auth?
Is Big Data Still a Thing?
That's the standard interface for microwaves for me.
Why not rethinkdb or couchdb then ? Mongo is not the only Javascript friendly document oriented database.
That’s exactly the place I found myself in and that made me sum it up.
I wonder how long until it's cracked. As the saying goes, "If there's a will, there's a way."
Seriously Matt knocked this out of the park.
One of the best posts I've read about the big data industry, very insightful.
Yeah, remember when users stopped using Facebook, Google et al in droves after the whole PRISM debacle, they still haven't financially recovered from that one, have they?
Sounds like a Linux port is on the drawing board:

http://forum.outerra.com/index.php?topic=2635.0
This isn't something that a user should have to know. We're going down the wrong track by implying that they should. Instacart shouldn't be expected to share their compensation model for their employees or contractors publicly or with their customers, and users shouldn't be expected to know or care about it in order to make fair decisions. This is a business relationship of customer to service provider. Paying the price you're charged with an optional tip for good service is entirely appropriate.
Well, If you liked pylons - pyramid with classes and matchparam based views will feel also very similar to you.
they could have served Apple a National Security Letter and had it done on the sly

NSL's don't work like that.

A national security letter (NSL) is an administrative subpoena issued by the United States federal government to gather information for national security purposes... By law, NSLs can request only non-content information, for example, transactional records and phone numbers dialed, but never the content of telephone calls or e-mails.[1]

Apple would challenge a NSL on three grounds:

1) The subject of this investigation in this is dead. The secrecy requirements are unrequired.

2) What the FBI wants here is not information, it is to force Apple to do work. That's why they've had to try the Writs act - it's a pretty unprecedented thing to try

3) The information requested is not "non-content"

I'd say Apple would have a good case on any of these grounds, and the FBI knows it.

[1] https://en.wikipedia.org/wiki/National_security_letter
Find Online Jobs to Make Money
They don't mention the one I use in that article, Ocado, which is an online-only grocery company.
Video Thumbnails Maker 8 Platinum Keygen, Crack Download
>having a landlord, living paycheck-to-paycheck, and living in an urban center

One of these things is not like the others.
Working at https://news.ycombinator.com/item?id=11122690
To me, I am more red-dot-phobia than red-dot-aholic.

A few years ago when I first used Facebook, I was red-dot-aholic. But after instant messages developed well, I could never get away from work. Red-dots are full on my screen and I know I cannot turn them off!

I became red-dot-phobia!
Did you make that account just to dismiss the entire interview on misinterpreting a minor point and then be inflammatory about it?

That makes the provocateur comment of yours a bit ironic doesn't it.
Live MySQL Schema Changes on Amazon RDS with Percona – A Walkthrough
At dubizzle, we recently reached a roadblock on a project where we had to change schema on around 130 tables in our production database with master/slave replication. The simplest possible solution that could have been was to recreate same tables with new schemas, copy the data and update our application to point to the new ones. This couldn’t have been made possible without a significant downtime for the whole website which wasn’t acceptable. So, we leveraged Percona Toolkit for MySQL to do the job and we would like to share our learnings in this post.

Blog post: http://mrafayaleem.com/2016/02/08/live-mysql-schema-changes-with-percona/
Ok, I've got a proper keyboard now.

My approach to the typing error reporting is quite compatible with the Prolog codegen. What I do: for each AST node which produce one or more type equations I record the location data (cache it and give it an index), and then issue a Prolog term like this: with_location(Id, Term), for each of the terms generated by this location.

with_location semantics is simple, but may depend on the presence of a backtracking. If it's a plain Hindley-Milner, there is no backtracking, and it simply do call/1(Term), continue if true, store Id and the failed term with all the current bindings and fail/0() if false.

If there is a backtracking, I store a stack of location ids and failure reasons instead, but this required patching the Prolog execution engine a little bit (luckily, I'm using my own Prolog for this).

Now, the next step is to decipher the failed term. Most of the equations are in a trivial form: equals(A, B), so I simply report that prolog_to_type(A) failed to unify with prolog_to_type(B). For the other (rare) kinds of equations I define custom pretty-printing rules.
A quick Google search brings up Canadian statistics [0]. In total, it's about equal (F: 50.15% M: 49.85%). Removing "criminal harrassment" and "uttering threats" (which are not really violent crimes) makes little difference (F: 48.62% M: 51.38%).

For rape ("sexual assault"), women "win" by far (F: 91.89% M: 8.11%), but it's much less frequent than "aggravated assault" and "robbery". Also, I'm assuming that "sexual assault" doesn't include prison rape (which makes sense, since that's not something you should fear in public), but it probably includes rape by friend/acquaintance (which isn't something that you should fear in public, and wouldn't rise if living in a RV compared to a house). Allegedly, rape by stranger (in public) is a rather rare form of rape (although it still makes sense to fear it and not put yourself in situations where it's likely to happen).

Men are the majority of victims of serious crime (after removing "simple assault") (F: 40.22% M: 59.78%).

[0] https://en.wikipedia.org/wiki/Sex_differences_in_crime#In_Ca...
I use MongoDB because I can instantly save down a JavaScript object and later retrieve it in the same state. I don't have to worry about anything else. No configuration, nothing. That's all I need but if there are better options I'm all ears.
Actually MongoDB is used quite a bit in big data systems.

It has very good integration with Hadoop, Spark etc.
You've never been subject to a misconduct have you