skysight-inc/HackerNews huggingface dataset:
I did indeed not add quotes, I only skimmed through a couple of pages to see if the results are relevant but you can not go beyond 1000 results so I certainly missed the irrelevant results.

But that doesn't really change the picture, for me "interplanetary file system" has 5,910 results, "andrew file system" 46,300. The abbreviations IPFS and AFS have 289,000 and 27,700,000 results but both have several meanings and are therefore not representative. If you look at Google Trends, IPFS began rising as a search term in 2011 [1] well before the inception of Interplanetary File System but I failed to quickly figure out what it refers to.

[1] https://www.google.com/trends/explore#q=ipfs
Take your head out of the sand. Everything is far easier to program with an actual programming language (even a somewhat mediocre one, like ethereum's solidity). It's always amusing to see the vast number of hoops that one must jump through to shoehorn functionality into bitcoin script (a non Turing complete assembly).
There's so much good content here, but it's also very surprising how much of it is truly a "roll-your-own and hope you get it right" approach.

If you have to write explicit code in each of your postbacks to check a CSRF token, it's going to happen that not all your posts will end up being protected. If you have to hand-build SQL queries, it's going to happen that you'll have injection vulnerabilities. If you are manually generating and signing cookies, and having to write explicit code to sign them and check signatures... These are all features that should be done in a core library which makes sure these things happen all the time, not just when you remember to, what, copy/paste the code into each of your functions to do it?

There's the overall structure of the code, which seems like it would quickly devolve into chaos. Looking at Section 4.4 there's a 'login' function which handles rendering the GET as well as processing the POST just by if/else on r.Method. You wouldn't want to actually structure a code-base like this, right? Later on, they do show a 'Beego' based router, which seems a bit more sane, but I'm really not a fan of 'showing the wrong way first' as a learning tool.

The particular techniques being used seem very home-grown and not particularly best practice. To prevent double-submit they add a hidden field with token=MD5(time.Now) and also save it to "a session cookie on the server side"? Not quite sure what that means, but I think it's trying to say save the token on the back-end linked to the session, and then verify a POST, from that page, on that session, has that token. And then presumably clean up the storage... The majority of which is not actually coded in the example, making it just a high level roadmap of what you could do, not a practical working starting point. But anyway, if your goal is to prevent multiple POSTs per GET, and you already have a transactional session state for the user, then you do it with a server-side counter, not a hidden field, and certainly not a "obfuscated" MD5(time.Now). Even if you have no session state, then the simple answer is to create session state, not to create another token which does exactly the same thing as session state, but in a completely insecure manor.

So overall I have a ton of respect for the work that was put into this document, it tries to cover a lot of material and is very easy to read. But I think the details also matter and 1) I can't believe this is idiomatic Go for how to actually route and manage requests, and 2) the entire proposed tool-set for actual secure processing of Sessions, SQL, CSRF, XSS, etc. seems to be totally home-grown and not at all production ready.
Looks interesting, but I'm not sure what the shell script takes as input.
Mike Hearn works for a bank. Gregory Maxwell works for a group of cypherpunks. I'll take my chances with Bitcoin.

Thanks for bitcoinj though.
I bought an ESP8266 dev board (<$10 CAD shipped!) for side projects, and I think it's great for hobbyists.

But I'm curious if Espressif actually have any design wins? I mean I don't mind using the community Arduino port (which is awesome), and buying from...unknown suppliers :) but is thing commercially viable or just a hobbyist gadget?
Life can be really hard sometimes, a fact that was lost on me when I was younger. I surrounded myself with friends who had big goals and dreams, starting companies, becoming VC's and the like. They claimed they didn't have time to be depressed, and that they were "killing it" no matter how things appeared to the outside world. I thought I was wrong to feel down and hopeless, like I was the only one feeling actual negative feelings on a daily basis.

A few years later, having lost two of those friends to depression and seeing others abuse various substances to blunt their feelings, I no longer feel crazy. I feel smart that I went and got help when it felt unbearable, rather than try to fight through it. I think American, and tech culture in particular, are still really hard places to discuss depression and the issues surrounding it. Thanks for the article, and all these insightful comments. These things need to be talked about.
About your colleague, what exactly made him/her switch?

To define a bit more what I mean by "low-level":

- I think that Go is "lower" level than Java because Go is compiled to a native executable (no virtual machine) and Go gives you control over memory layout (not everything is a reference like in Java).

- I think that C/C++/Rust are lower level than Go because you control memory allocation and deallocation (no garbage collector) and you can even customize the memory allocator if you need. It's also more efficient to interface with C libraries because the calling conventions are identical.
I'd argue that Arduino isn't even fundamentally a hardware thing. I can code an Arduino application (sketch) and upload it directly to an Atmel chip on a breadboard, with no other components present at run-time. Atmel didn't make the chip as an Arduino (they made it to control toaster ovens or whatever), so in that scenario there's no Arduino except for their boot loader and runtime library.
Been using this for a while now and very happy with it. I decided to stop using Github for personal projects due to political disagreements with the company and the fact that git should really not be centralised.

Gogs has probably 95% feature parity with Github and it is a lot faster (is Github still Ruby? That would explain it ...)

I run a personal Kubernetes cluster for services and getting Gogs up and running was super-simple: https://git.tazj.in/tazjin/infrastructure/src/master/gogs/go...
Very interesting. That's a hypothesis from just last year that doesn't yet have widespread scientific support though, so the jury's now out.
My Website Has Been Hacked Now What?
I don't even understand why this means to be said.
Anybody who has ever tried to take a photo must have seen what a difference it makes with the direct impression. You see your black friend with your own eyes, but then in the picture he's just a flying smile; is it really cheating to modify the values?

Its not even "unnaturally bland images". It's just unnatural images, because nobody sees like a camera lens.
How do you feel about it in the context of the article.
Alpha, Activism and Ether
I didn't get a total feeling of maturity from his writing. Did you read it? Mostly low-ball shots taken at startup practices that are pretty commonplace now, primarily for their proven effectiveness. Like the fact that he was disturbed to find that Zack, being so young, wasn't an assistant but a manager. It's like the idea of promoting individuals based on results and performance, rather than age and tenure, was foreign to the author. And ironically, he displayed a lot of ageist qualities himself there. I wouldn't exactly characterize that as maturity.
This is how carrots are harvested: https://imgur.com/gallery/AP4x35k

You know those cute pictures of people picking fruit on your orange juice bottle? Nope, this is how we get oranges: https://www.youtube.com/watch?v=Av17eM1Ruyo

Of course a lot of farming is simply done by mass labour, which works if a little inefficient. On the high tech side we have GPS-controlled tractors and farmers can order up hyperpsectral images of their fields to check crop performance. Modern agriculture is extremely heavily industrialised to satisfy the demands of the billions of hungry people around the world.
Surging+Bright+To+Highest+Excellent+Poached+Eggs+Post+Easter
I think you're stepping over the fact that during Bill Clinton's tenure as President, he was demonized and frankly slandered in a very hard-to-understand way. Last I checked, entire media empires were built on stories then that were simply made up out of whole cloth.

Since Hillary Clinton was long expected to be a candidate in this years election, it's not too much trouble to use that as an explanation.
Uber is trying to recruit engineers by sending a coding game
Don't you need credit cards to use apple pay?
Then that brings up even more questions like what laws is this lab subject to? The reason I bring this up is that many of the laws in the US related to medical data tend to try to protect it for the consumer.
Is there a non commercial cross-platfornlm way to aot compile Java?
You can, but IME, it's all terrible. I've tried so many android ssh-clients, and they are all either closed source, or don't work smoothly.
This is what's going to happen in three months with Ethereum: http://forums.prohashing.com/viewtopic.php?f=11&t=782

Ethereum's features with Turing-completeness and all the things it can do are great, but everyone is missing the point that not all of that is needed. What is needed is simple: people who act professionally, who get things done, and a network that is not artificially limited.

Litecoin could have taken on this role even more easily than Ethereum, or Dogecoin, or any of the other coins - but they refused to increase their blocksizes when they had the chance. Ethereum is coming of age now partially due to its Homestead release, but also due to the critical bitcoin halving event in July that is going to throw cryptocurrency into chaos.

People are missing the point - Ethereum isn't popular because it is better than bitcoin. It's popular because it has good people in charge. In that way, Mike Hearn is right.
Good to hear someone has got to the bottom of this. Been unable to use Safari for a few days due to it. I haven't updated any apps for months (I don't trust auto update to not leave my apps in a half downloaded state so I just let them mount up until I eventually download hundreds of updates!) so iOS must periodically check this list automatically rather then just when an app is updated/installed.

The combination of a lack of an official response from Apple yet, the fact that this was apparently found by beta users (not that the issue is related to 9.3 directly, but it was reported as a beta issue by some), and the inability to change default browser leaving my phone in a pretty broken state has got me seriously considering a switch to Android though, where at least such a bug could probably be worked around through changing defaults or worst case flashing a new ROM.

The iOS 9.3 release suggests Apple's QA process is rather lacking and incidents like this won't help confidence in their devices - it's okay for users who know how to work around it and understand what is going on, but my parents would probably think the whole internet was broken!

Rant over, glad to see this on HN as it has been p*ing me off for a few days :)
Keep telling that to yourself.
> It would remove most criticism from the language while substantially improving the correctness of programs.

How the mighty have fallen. A language with more than decade over Go and billions in investment by top tech companies and literal monopoly over enterprise usage need to even think of user share of a marginal language.
Banking systems don't need impenetrable security for people to use them. People pay online and use online banking every day from easily compromisable laptops. They do so because banks and credit card companies have good fraud coverage (unless you're negligent).

I think the real reason for Apples worry is that they want people to trust the smartphones for way more then just payments, for instance Health information. And people might just end up much more reluctant to do so if they know the phones are easily hackable.
Georgia governor to veto 'religious liberty' bill
ahem SUSE and RedHat are examples of companies that sell free software.
How can you compare speeds when you can't run GitHub on your setup? Running a multimillion user service is vastly different from running your own personal server, right?
I would also love to know what are the apps that you are thinking about that could be improved so much by this technology that you quit your job. I have tried to think of all kinds of uses cases and just can't get excited over this technology.
Try running a non-Apple signed OS on an iPhone.
Get Targeted Website Traffic
Looks like it's ARM. I suppose that's okay for many, but if you need programs like R, you're out of luck. I'd immediately buy one if it had an Intel or AMD processor.
Animation in Mobile UX Design
Ask HN: How do you do UAT?
for me personally: I want an actual linux tablet. Not android
For me, it never was about what I thought, but what the community thought and wanted. My goal was just to create an discussion. I am sad that the introduction didn't make that more obvious so you would have felt more invited to join the discussion. My bad.

I think several people agree with you in our discussions, and the more I think about it myself, the more it make sense, short-term to extend npm and add immutable dependencies.

I, personally, like the idea of gx, but that is a more of a long-term achievement, developing an open-sourced, fully decentralized , platform independent package manager. :)

Here is the newly created issue if you want to shime in -> https://github.com/ipmjs/ipmjs/issues/13
> Apple owns your data

Citation? I'm aware of OS licensing and music/video downloads like itunes, but they claim "Your data"?
Virtual Reality Roller Coasters Are Here (and Everywhere)
Another good article expressing a similar opinion which some might not have seen http://blog.codinghorror.com/your-code-oop-or-poo/
Reduce Cognitive Overhead by Automating with GNU Make
Python Virtual Environments – a Primer
Look at the list of investors. Banks invested in Blockstream.
The name 'food computer' is probably better used for the computer / control portion of their system. Reading their description, 'food factory' or 'automated greenhouse' seem like better names.
Oculus Rift review
It kills me when people build GitHub alternatives that are hosted on GitHub.
You don't have to allow deletions or replicate them. I also see no reason one could not send out takedown notices to IPFS nodes, especially in the current situation with a pretty small system - I found a number of about 2000 nodes in January 2016.
I really hope that the mob is proud of its actions when the conference is canceled. "Hey, everybody is worse off now, but at least me made our point!"

If the conference isn't canceled, I really hope the organizers make a list of people and companies who tried to kill the conference and never sell them a ticket to a future conference again. (No bad blood, just helping them remember their big words.)
Using string-based templating in general is a really bad practice, as it leaves the door wide open for XSS, SQL injection, etc. Sanitizing inputs, while often cited as the proper thing to do, isn't addressing the root problem: that we're using templating systems that don't use proper data types and thus can't automatically DTRT when rendering.

See http://www.more-magic.net/posts/structurally-fixing-injectio... and https://www.gnu.org/software/guile/manual/html_node/Types-an... for further explanation.
I ordered mine last year. It was the first purchase I ever made on kickstarter. I went with the VGA adapter, but it seems everything is HDMI these days. Everything is still back ordered, but I am excited to see what this system can do.
Just curious, where (AWS, DO, GCE or other) do you run your Kubernetes cluster ?
The Economist is the only paper (and digital) magazine I bought during last 5 years I think. While most products can't survive the change, great products normally can.

It wouldn't surprise me if in 50 years there is still a paper copy of it.
Structurally fixing injection bugs (2012)
Uber is recruiting engineers through an in-app coding game
Adobe Lightroom, you mean. I have used Darktable and would recommend it, it is a great piece of software.
So many new users just to attack you Mike. And all the buttcoin trolls suddenly became small blockers. Evidence of Blockstream hiring shills continues to grow.
I mostly stick to HN. I use to look at drudgereport just to get an idea of the headlines, but now time is too short. I am trying to take a page from the 4 hour work week.
> Until you, say, want to print something,

CUPS and Amahi work great for me. I've had more pain setting up printers on Windows and OS X (the latter started sending print jobs on each probe).

> run one of the bajillion pieces of useful software that aren't available for Linux.

Examples? I can't think of any software that I need that isn't available for GNU/Linux.
End-user usability feel (perceived speed) is all that matters, no ?
Container automation will be very important in the online postcard museum industry. It is good that you are vigilant.
What are you talking about? I am using R on Slackware 14.1 on an ARM device. It works perfectly once you compile it.
Yes, my comment assumes that you need to recolor tiles a large shot, not of single different shots.
>> Their phones are, in many respects, more secure than the ATMs and credit card infrastructure we've used to accessing our bank accounts.

Well, except that the ATM doesn't permanently store your credentials,
potentially[1] making them available to anyone who takes possession of it.

Not to mention: it's possible, though not easy, to take possession of a whole
ATM. However, the people who have done so were after the bank's money, not your
money.

Whereas if someone steals your device they're potentially[1] getting hold of
your money.

_____________________

[1] Read: it's only a matter of time.
Or it could be your DNS resolver. Try changing it to googles 8.8.8.8 and 8.8.4.4
I'm using Ubuntu and it makes a lot of sense to me. It's got the basics of debian which I really enjoy. The popularity of ubuntu means that there are a lot of guides on how to do stuff. As far as stability is concerned I haven't had any problems with it at all. If we look at the number of packages then Debian is the clear winner. The downside with debian is that they tend to be quite conservative when it comes to newer version. Which is another reason that I prefer Ubuntu over debian since you don't want to get stuck with old version while developing.
Submitted another story about this couple of days ago but it did not get much attention. Granted, this one calls out very specific technical reason. I have this problem after update to iOS 9.3 and FWIW I have Booking.com app installed. This problem was haunting users for quite a while, since beta for sure and may be even for some users on 9.2.1. The lack of response from Apple is disheartening. I am seriously considering switching to Android. Disabling JavaScript allows to navigate links in Safari, but opening links from other apps freezes them and many sites are broken without JS. My only recourse for now is to factory reset the phone, which is a huge PITA. And of course never ever install booking.com app
The Death and Life of Great Italian Cities: A Mobile Phone Data Perspective
sending classified state secrets through a third party spam filter? that almost makes the "server in a basement" a bit of a fib. her emails were flowing through some private companies network first.
Show HN: Bunnies and Wolves (multiplayer pacman in HTML5)
Why? Github is about distribution and collaboration with a community. This product seems to be about private self-owned hosting.
Sure, now. In 5 years who knows? I could definitely see AAPL partnering with visa/mastercard/amex or even directly with banks for direct account access on a program that doesn't require a physical card. Plastic cards will become the new cash (right now cash-only businesses are a little behind the times but they still exist) and phone payments will become the new plastic.
Explanation, perhaps - justification, no.

Interesting how people forget that our government is to serve its people, not its own career interests. Hillary Clinton chose to sacrifice the country's interests (major security lapse) in order to cover her ass and hide potentially unethical (perhaps even illegal) activity.

All business conducted on behalf of the country should be made public as soon as it is safe to do so (no more than 5 years for classified material).
The logic in this article seems confused to me.

The central business problem for retail banks is how to earn more from deposits than they pay in interest, and to do so at a scale of billions of dollars. Apple also needs to figure out how to make money from its pile of cash. Accepting deposits and becoming a bank would only make that problem worse - so how is "having lots of cash" evidence that Apple wants to be a bank?

An investment bank is a different animal and I would strongly disagree with the author that Apple is a "de facto investment bank". Investment banks advise clients on financial transactions and help clients hedge risk (something Apple doesn't do).

There are much more straightforward and compelling explanations for why Apple cares about security (as others in this thread have pointed out).

The only thing I would slightly agree with is that Apple maybe has an eye toward building its own payments network (a payments network is NOT a bank, by the way). But Apple isn't even CLOSE to competing with Visa and MasterCard in that regard - even if it did disintermediate the credit card companies it would have to have much much larger consumer adoption of Apple Pay plus a merchant network.

Honestly the tone and muddled structure of this article come off as a poorly substantiated conspiracy theory.
Ask HN: How did you settle on a Linux distro?
I've tried about 20 distros or DE's of various flavors (or sometimes just the same distro with a different DE) and have discovered that the vast majority of them are surprisingly good. This then leads to the "blinded by choice" conundrum that there's no clear "best" in my mind. I've tried Ubuntu, Debian, Fedora, and ArchLinux, and within each one various flavors of Gnome, KDE, XFCE, Cinnamon, Pantheon, etc. With exceptions, most of have been largely usable, with some perhaps having more "wow" factor than others (KDE Plasma 5 and Pantheon currently lead with the "wow" factor, while Cinnamon has the current lead with "least amount of time required to setup what I need to get going").

I'm just curious what you guys use and why you chose what you did.

Please include:
- distro
- desktop environment within the distro
- length of time on current setup

And consider including what drove you to this decision. Aesthetic? Ease of use? Configurability? Philosophical alignment with the distro? Fondness for a particular package manager?

Thanks in advance for all replies.

NOTE: Mostly aimed at Linux users, but anyone regularly using FreeBSD and a desktop environment is welcome to chime in as well.
"Object Oriented Programming" in Portuguese is "Programação Orientada a Objetos". So for me the two categories are one and the same :P
Google Search Technique Aided N.Y. Dam Hacker in Iran
Data collected by Apple produced by your activity for things like product metrics, improvements, Siri, traffic data / directions or whatever they decide fits their business model at a later date.
https://archive.is/ZNVGH
The Great Divide Over Market Efficiency
enigmail works for blackberry?

if you read the article, its pretty clear her entire team were blackberry users and refused to use anything else to communicate with each other.