skysight-inc/HackerNews huggingface dataset:
> A bit off topic, but does anybody know why development looks stopped since 2013?

It did not stop, it just did not get a release. I'm (very slowly unfortunately) in the process of fixing this by restructuring the github org to get trusted contributors to fix this and to make it easier to have multiple smaller releases instead of a huge one. There is always risk in pushing out releases with a lot of changes which is what would happen which is why I want to have people in place that can push releases without my help to fix things if they are regressing.

I would have done it over Christmas already but life keeps happening and this is something I rather not do without having an action plan :)

Very soon now though.
I do not seem to have the option to gmailify my address. Is the feature restricted to specific providers? If yes, are there any plans to support Office365 addresses?
The SSA changes are not in Go 1.6. They're expected to be in Go 1.7.
That's a very good definition of "designed" that I hadn't seen before.
Hacker Dojo used to have Dunkin Donuts coffee, along with a precise posted procedure for brewing it, which seemed to work quite well. ("How to brew coffee like a BOSS!")

For me, for DIY: Aeropress and recently roasted beans. Grind yourself.
Original post author here. On the single server level I've mostly used Flask behind uWSGI for load balancing, My experience with this has been overall positive (but uwsgi can be a bit of a pain to script deployments for, maybe it's better now though, not sure).

Then there's the further load balancing you can do behind something like an ELB instance in AWS to control load across multiple servers.
To be fair, they cache the hell out of their content.
Is there any actual, credible evidence of this taking place? Photos? Apple employees on the record? Anything?
Take with an enormous grain of salt. The article is based on a comment to an article at physicsworld.com. From there, it riffs off onto the author's own theory of physics, where quarks don't exist, and stars greater than three solar masses won't collapse into black holes because of their "unlimited production of genic energy".

But sites that have articles like "Prophecy of Bulgarian Mystic Peter Deunov Predicts Coming Superwave 39 Years Before the Superwave Theory Was First Proposed" are not necessarily the greatest source of analysis of hard physics...
Peak Fighter Jet: The Future of Air Combat Is Black Birds, Not Blackbirds
> i dont know any way you could run PHP single threaded on a server

Using `php -S 0.0.0.0:80 index.php` would do it!
How would you test this hypothesis? With a non-physical mental stimuation? Multi-colored paper confetti in the cage, or laser-light shows, to give the rats something to play with?
What exactly is an "economic threat?"
Flask is just an HTTP layer, not an execution engine, so it doesn't really have a single- or multi-threaded nature. It's thread-safe, though.

That said, the default development server built-in (which uses werkzeug's underneath) is multi-threaded - just pass threaded=True to app.run(...) - and in production, you can deploy a Flask app using an evented framework like Tornado or Gevent: http://flask.pocoo.org/docs/0.10/deploying/wsgi-standalone/#...
I agree. At least they made a way to separate GitHub stuff:

>If you're worried about the added clutter in the root directory of your project, we also added support for a .github/ folder. You can put CONTRIBUTING.md , ISSUE_TEMPLATE.md , and PULL_REQUEST_TEMPLATE.md files in .github/ and everything will work as expected
Well, yeah -- statutes and interpretations. Which I think is basically how most people would interpret (and assess the quantity of a given degree of) "regulation."
Rulio – A Rules Engine
I wish my local government would do this. Businesses and industrial sites should be taxed at significantly higher rates if they are vacant to encourage businesses or repurposing. This would encourage owners to lease sites or sell them up for redevelopment instead of just holding onto them and allowing them to flourish as ruins in the middle of otherwise vibrant areas.
"'To that end, today we will begin phasing out the following Digital Magazines: Yahoo Food, Yahoo Health, Yahoo Parenting, Yahoo Makers, Yahoo Travel, Yahoo Autos and Yahoo Real Estate,' Nelson wrote in a Tumblr post."
I use an ultra secure method for my passwords, it is 100% unhackable.

Proprietary Analog Password Encryption Routines.
the bible: http://blog.miguelgrinberg.com/post/the-flask-mega-tutorial-...
And generic functions allow you to fill in those missing pieces from a package too.
> ...when they were sewing one eye shut in newborn monkeys to study the development of the brain’s visual system. It certainly did mess up their brains...

That's barbaric.
Full of 'could's and other weasle words. No firm stand, no denouncement.

Weak sauce.
By iterating over all passwords? That seems like the definition of a good password storage if that's the only way! I mean, you can make the same complaint against anything; it's meaningless by definition.

Sure, public-private pairs are more difficult (to impossible) to brute force once they're so long, but srp, bcrypt, pbkdf2 &c are pretty good when you want/need a password. Srp being superior in that your secret never leaves your computer.
I think it is his best. If you want the hack, listen to it on tape first before reading it. You'll realize he's quite nuanced in his arguments, and really operating intellectually amongst the greats -- not simple econo-self-help sort of stuff, but really deep thoughts abut heuristics, tradition, human society, evolution, etc.
You can click the button in the top right to close it.

Right now that data comes from FullContact. If it's wrong, you can write them to dispute/update it. https://support.fullcontact.com/knowledgebase/articles/47266...
Agree agree agree. He's bidding for the sort of intellectual immortality with Antigragile. The Fat Tony dialogues are really a pleasure, and a throwback to Plato's Dialogues. Really enjoyable, meaty stuff.
This is so true. No matter what city I go to (Manila? Bangkok? Delhi? Kunming? Changsha?), it never feels as bad as home.
By the time anything is thought of a "content vertical" it's pretty much past its time, on autopilot editorially-wise, and generally worth disregarding anyway.
Guess I should pull down all my Flickr images and back them up.
As mentioned elsewhere in the thread, this isn't a "you must", this is a "you might as well".

Timing attacks depend on an attacker having control over the hash being compared (e.g. they have a HMAC in a cookie they're sending you, and they can adjust it character by character) - with randomised secret salts and server-side hashing, this isn't the case.

The SCrypt example is the one I'm more concerned with. The defaults there are 1MB of RAM and 64-bit salts, both of which could do with increasing. I have an open issue on this: https://github.com/pbhogan/scrypt/issues/25

As it is, the example would probably be better as this:

password = SCrypt::Password.create(usersPassword, salt_size: 32, max_mem: 16*1024*1024)

You'll be pleased to know SCrypt::Password#== is at least constant-time.
Yes. Yet it's a bit weird in case .github folder is used. Will they support a .bitbucket, .gitlab, etc. They could have used a more generic name like .contributing, but this increases the risk of name collision.
I think it's also that SF has fairly high income inequality, which means that their statistics for rental burden a prone to being misleading.
Amazon expanding deliveries by its 'on-demand' drivers
I think what the "worst nightmare" comment really meant was observation/monitoring that they (the NSA) could not disable. Hackers can turn off logging or even exploit monitoring agents as an attack vector (the Target breach a couple years used BMC agents as an attack vector). However, if a copy of all the network traffic is being passively analyzed by a monitoring appliance, then there's no way that they can hide from that or turn it off.
I really liked Mithril, I would recommend checking it out. It definitely is kind of weird to write out your HTML with javascript, but it gets easier as you go along. The performance is ridiculous as well and it was a lot easier to troubleshoot as well. Also, the code kind of aligns with a JSON structure, so if you have a lot of control with the server response, it's really simple to grok how to structure your front end code.
> Many Chinese cities are what happens when you allow supply to meet demand.

Um, no. Chinese cities are a direct result of government policies to boost GDP through construction and are the supply of housing has little to do with market forces.
Thanks. I didn't mean to suggest it was a documented definition, so much as "the characteristic that makes it 'feel' like a human-designed thing" and makes us want to refer to it that way, even when knowing it wasn't.
It doesn't have to mean any of that. As long as the 10 mistakes limit is enforced in software or in a separate chip that can be replaced without replacing the actual encryption key, it can be bypassed. Then it is a simple matter of simply brute-forcing the pin code. Since these are usually 4 digits, there's only 10000 possibilities, which is laughable to a brute force attacked.
Can I gmailify my other gmail accounts into my main one and get two way sync?
> Momentum has slowed

Has it really? I get update notifications literally every day, sometimes multiple times a day, so it seems like development is still very, very active.

> Is 'Inbox' the next-gen Gmail interface

I feel like Inbox and Gmail are separate long-term interfaces working on the same data set that serve completely different sets of users.
The data seems to show the opposite to me - despite scores being all over the place, the mean is very reliable. When a 2 or lower is considered a fail, those who consistently rate ~2.5 fail about half of their interviews while those who consistently rate ~3.0 fail only 10%. Of course, the probability that a candidate failed an interview approaches 1 as they are subject to more and more interviews. That the test has both false negatives and false positives does not invalidate the test. In fact, that the test is accurate despite the false positives and the false negatives ought to do the opposite. If a single bad interview invalidates a candidate for company A, that doesn't mean that the candidate won't go on to pass all of their interviews with company B.
I love that feature. I use the web way more than apps, so having web pages in the app switcher is awesome for me. I wish I could have several YouTube app tabs in the app switcher too.
Honeywell Developing Virtual Reality Vehicle Windshield for DARPA
There was a guy on Reddit living in a van who answered this. He said the vast majority of women he met responded extremely negatively to his living situation.
>Behaviour which can be reasonably considered harassment will not be tolerated.

There's a lot of room for rules lawyering in that one.
It's a subsection of the larger site, dedicated to a specific type of content. Vertical refers to them being fully-featured sites or application by themselves. For example, a real estate vertical might have search options dedicated to housing (number of bedrooms, square footage, etc), whereas the general site would only have generic search operators, not tailored to a specific use case.

Hope that helps!!
I've looked at all of them. Revel, Beego, Utron, Martini, GoCraft, Echo, Macaron and probably some others I have missed.

I prefer GIN. :)
Warning to anyone trying to self-host:

Despite N1 calling their cloud engine "open source", the authentication part isn’t – and isn’t included.

If you set up the open source variant yourself, you’ll end up without any authentication.
The name Mayer is not present in that article. That's definitely PR for the investors. Maybe to prepare a transition?
There is no parking specific for the "Apple Executive Briefing Center". Also, thousands of employees, and lots of people from off the street, would have seen the cars and someone would have uploaded something to Instagram/Twitter.

This reads like something made up by someone who has never actually been to Infinite Loop.
When I worked in Sweden I was surprised to discover that there is something called "low power distance" management. It was incredibly refreshing. Bosses were more like coworkers who made decisions when they had to - and not arbitrarily authoritarian in the way that I'd experienced routinely in a career in Silicon Valley.

I would like to see required courses in such management techniques - along with actual laws requiring that US employees be treated in this more humane manner.
> month-to-month

This literally means the landlord doesn't need a reason. It just means you need to give them 30days notice.
> the bank uses my deposit to make money and do not adequately reward me.

So go use your money elsewhere. If you do business with a group like Vanguard and meet some modest minimums, you can buy and sell bond funds from a variety of asset classes for free, and you can see exactly how much of your returns they take - for instance, VGSH, which charges 0.10% on a 0.70% yield, or VCIT, which charges the same on a 2.28% yield. Of course, you lose your 100% guaranteed return and the use of that money with checks and ATMs and debit cards, but there you go, that's the stuff you didn't want to pay for.

> the 'multiplier' rewards/encourages bad behaviour in an [irrational] world.

You're blaming a measurement for bad behavior. That's all the multiplier is, just a measurement of lending activity. If you find fault with banks being predatory then any ability for any group to lend any money at all under any circumstances presents the same incentives. If you're upset with the existence of a multiplier you basically want to ban lending.

The real funny part, though, is that even when you seem to think that most of any bank's business is predatory and deserving of hate, you have the chutzpah to turn around complain that you're not getting a big enough cut. Do you have real principles or do you just hate banks? Decide, now.

> Fair and moral reward is the only option

In practice, whenever this statement gets turned into Politics it's basically a call for elected politicians (Bernie Sanders and friends) to decide who deserves to get money -- a paean to central planning, never mind the economic stupor and corruption it ultimately engenders. The sad thing is, it doesn't help. Even payday lenders, everyone's favorite punching-bag and icons of Predatory Lending, earn pathetic rates of return, typically in the neighborhood of 3%. And central planning gives you things that contribute substantially to crises, like when the government had FMAE and FMAC buy up millions of subprime loans without question as part of a program to extend more credit to minorities. But no one pays attention to history, so we're doomed to repeat it.
I read the WSJ, FT, NYT, RCP, and The Hill if I want exposure to the "media". And HN for light entertainment.

There is no way that I would look at inane posturing on Yahoo's blogs.
Yes, OSS users have a very wide gamut — for everyone who sends a pull request with good troubleshooting and a patch, there must be half a dozen people who click New Issue, submit minimal information and, if you're lucky, come back a couple of days later and acknowledge that the real problem was a hacked up local install, using a 5 year old version of a core dependency, etc.
Judging from the fact that Google automatically redirects gmail.com to inbox.google.com once you've visited inbox, I'd guess they view it as the next-gen Gmail interface.
As a hardcore gamer, gamedev and old games lover, I am finding sadder and sadder that certain games are getting increasingly forgotten by everyone, and noone even remember they are in dire need of tools to make them work.

It is the games from Windows 98 and XP era, many used some combination of GDI and DDraw that doesn't work at all on new Windows versions, DDraw emulation is mostly broken, and pity you if the game used DDrawEx (it was to mix DDraw with D3D).

For example I am currently trying to figure a way to play SimCity 4 properly, the game is too demanding to run in an emulator, so some kind of native implementation is needed, but it also uses DDrawEx, that is very poorly supported in all OSes except Windows 98, ME and XP (it doesn't work in XP contemporary NTs either).

I think this is the kind of games the OP is happy ReactOS maybe will implement... because for DOS games, DosBox is more than enough already in most cases (there are some exceptions, like Noctis that is incredibly CPU-intensive and runs at 3 FPS in DosBox).
Yeah, it wasn't exactly unknown before but it wasn't terribly common outside of certain security / compliance circles. I think I've seen more links today than in the previous year.
"Vertical" as in a marketing channel for ads (disguised as a vaguely interesting website or publication).

In longer form: basically a codeword for "A once vaguely or perhaps genuinely interesting website / channel / magazine / whatever but which is now (through various nefarious means) in the possession of Megacorp X, which, in turn, couldn't begin to give a toss about the actual content (let alone the so-called "community" of once passionate viewers / readers), other than through the perception that they serve some marketing demographic Y, real or imagined, to whom, they would like to fancy, they can sell zillions and zillions of ads to."
Anecdote to add, I've never across 20 years experience (and many jobs) not had a moonlighting clause in my employment agreement.

As someone who hires, I'd be worried about the IP implications of even suggesting I pay them for outside work prior to them leaving their prior commitments.
A number of them are pretty lucrative (and seemingly consistently lucrative). On autopilot editorially yes, but that can be even better. For example, Yahoo does pretty well in the stock/finance content vertical, with Yahoo Finance. They've lost some traffic share with the entry of Google Finance (which is not far from a clone of Yahoo Finance), but there's quite a bit of ad money floating around there, which is why it's not one of the ones being shut down.
I've seen this same thing frequently when evaluating security engineers. They often can talk the talk, but when given a simple task to perform more often than not will fail.

Coding exercises might not be a great measure, but as far as I have experienced, they are better than other items out there.
My dad loves solving the physics problems on yahoo answers.
But you sign them and take money from the people offering them?
He's pretty much said so:

We still live in a world where all people are not treated equally. Too many people do not feel free to practice their religion or express their opinion or love who they choose. A world in which that information can make a difference between life and death. If those of us in positions of responsibility fail to do everything in our power to protect the right of privacy, we risk something far more valuable than money. We risk our way of life.

See pages such as http://qz.com/344661/apple-ceo-tim-cook-says-privacy-is-a-ma...
> scrypt(password,salt,work_factor) on the server is plenty hard to attack

For a large enough work_factor. In practice "large enough" is usually interpreted to mean "something that seems safe without being so large that I need to buy lots more servers"

The argument (which I'm interested in, but not yet sold on) is that moving the scrypt to the client allows you to pump up the work_factor even higher than you would have been willing to do on the server.
I am using Windows 8, chrome, Microsoft mouse with scrollwheel.

The scrolling is absolutely broken, it is jumping around all over the place, and made the page impossible to read.
It doesn't really sound like you've turned your back on the American dream, as low crime neighborhoods are highly correlated with home ownership.

Or, put more bluntly, your living scenario is highly correlated with low crime, home ownership, and the "standard american dream".
The project is neat, but they should not be proud of "9,000,000+ lines of code And growing!". Less is more. A security audit for example would be very slow already, given the number of lines.
I feel like Apple is intentionally over simplifying it for the purpose of this letter or maybe to push back on the FBI ask more easily.

Apple could propose to secure access to the FBI using the same level of security that it uses to protect the access to the phone content for the owner of the phone himself. Tim Cook only talks about one solution of a "tool" that it could install.

If the same level (and method) of security is used then saying that there is a risk of the backdoor being hacked would be equivalent to saying that there is a similar risk of the user access being hacked.
A count of the flags that you can pass to uWSGI shows 976 different options. It's highly configurable. WSGI itself is a synchronous protocol, but (as icebraining pointed out) uWSGI can be run in async mode [0] which ends up looking much like node.js.

In terms of the ideal number of processes/threads, I'm not so sure number if live visitors is correct. It's going to depend on your various resource constraints but if requests are quick to service there's no problem with having other requests waiting in a queue.

I once was called in to fight a fire where the team said, "we don't understand, we have horizontal scalability, but adding more machines seems to be making things run slower!" - Erm, yeah, because your single db server is on its knees :-)

[0] http://uwsgi-docs.readthedocs.org/en/latest/asyncio.html

Edit to add that I've just looked through the cheaper docs you mentioned and that behaviour all looks pretty sane. You can have a good default number of workers and expand as required. Also, uWSGI forks workers after the app is loaded in memory so you get fast copy-on-write behaviour during worker start.
Australia has cloned the great American dream as well. When I lived in Sydney, real estate was all anybody ever talked about. Are you renting? Oh, too bad. Got to get on the property ladder, y'know. Yeah, my commute's about an hour and a half, if there's no trouble on the M5. I toughed it out on an oppressive mortage for thirty years out in the sticks, why can't you? Kids these days want it all. etc, etc.

Coming to Tokyo was great. Sure, people still ask where you live, but the proximity to the train station is more important than how many bedrooms/entertainment centers are in your McMansion. The only time I've been asked if I own or rent is when relatives came to stay. I don't know if it's the after effect of the property bubble bursting, because the cheap construction materials means housing stock is not built to last, because good inner city locations are still too expensive to buy (despite said bubble bursting) so everyone rents, or just a culture that does not place much social cachet on property ownership. But it suits me.
Robots Are Coming, But Not For Your Job
The existing HackerNewsCollapse extension mentioned in the other comment already does this. I built a Chrome extension which extends this further by also trying to summarize the comment thread based on word frequency of entire subtree (with mixed results)

https://chrome.google.com/webstore/detail/hngist/jigimhmnilg...

It also tries to come up with a summary sentence, but I need to do better sentence splitting.

I don't think these extensions work on Google Chrome for mobile though..
As the article said, NFS has a nasty habit of rocketing your load count when the server fails, and NFS can be very unstable if everything aligns correctly (or badly.)

When the NFS server decides to take a rest I've seen 1000+ loads on production Linux (3.13+) systems

Or kernel panic

Or OOM

Or cats and dogs living together
Couldn't f check for g's errors?