skysight-inc/HackerNews huggingface dataset:
"Mahayana" is a Sanskrit word composed of "maha" for "great" and "yana" for "vehicle." It's used to describe a diverse tradition of Buddhism that somehow (the history is not exactly clear) diverged from that monastic consensus which became the Theravada ("way of the elders") tradition...

Mahayana sees itself as going beyond what they might call "individual" or "personal" liberation, in that it sets up a grand goal of liberating all beings. Practitioners hold this ambition in mind, and see the "Hinayana" (small vehicle; a pejorative term used in Mahayana rhetoric to denounce other interpretations of Buddhism) ambition as limited or as merely a first step towards the ultimate goal of universal liberation.

How this relates to the Haskell prelude, I'm not so sure... but yeah, I suppose a "Mahayana prelude" is more grandly ambitious and therefore also more expansive and difficult to realize...

(By the way, in religious studies, Rupert Gethin's book The Foundations of Buddhism has an introductory chapter about Mahayana, and an in depth review is Paul Williams's Mahayana Buddhism: the Doctrinal Foundations.)
The linked comment has NOTHING to do with what the FSF has said about software security.
Phanbook review
We would switch away from Rsyslog in a heartbeat if someone could come up with a better syslog-compatible forwarder.

We have it set up to write logs locally (with a limited rotation) as well as forward them via TLS to a central Rsyslog server that collects the log in a single tree with a much longer retention time. (We don't use any of the non-file outputs, but we do sync to S3 for archival.)

It has major issues. For one, its spooling implementation is flaky. /dev/log is a limited, synchronous-blocking FIFO buffer, which means that everything that logs (including OpenSSH!) will choke if the buffer is full. For some reason, just a tiny bit of packet loss will throw Rsyslog.

It also frequently is unable to recover from a network blip, and a restart is the only solution. But its spool file is badly implemented, so on restart it will typically ignore the old spool files and start anew — meaning you lose data. Someone wrote a Perl script to fix a broken spool directory, but I never got it to work.

Ironically, Rsyslog is also terrible at logging what it's unhappy about at any given time, so whenever something bad happens, you probably won't get anything in the system log.

Rsyslog's configuration is a curious beast, and by curious I mean infuriating. Rsyslog originally had an antiquated, ad-hoc and messy line-oriented configuration file format (with directives like "$RepeatedMsgReduction off"), and author decided to transition to a more modern, block/brace-based syntax. Unfortunately, he decided to do this gradually, and both syntaxes can co-exist in the same file. For a while, many of the options were only available in the old syntax, so you had to mix the two.

Which leads me to the next problem: The documentation is absolutely atrocious. The Rsyslog site is a fragmented mess of mostly outdated information. It's gotten better with v8, but it's still the worst OSS project documentation I've encountered. There's no reference section that lists the possible config options. Frequently there is no documentation for a particular setting. Rsyslog is quite finicky about some combinations of options (like TLS driver configs) and you have to proceed by trial and error. Frustratingly, it will silently ignore some config errors (such as trying to set up multiple TCP listeners, which is still not supported).

The new config format is better, but it still has the feel of something that has been implemented before it was fully designed.

Again, we don't use any of the fancy output modules. Maybe they are solid, but based on my experiences with the simple file-based stuff, I wouldn't bet on it.

As an aside, it's worth pointing out that Rsyslog is still using the Syslog protocol, which has all sorts of issues (not consistently implemented by clients or servers; does not support multi-line messages). Rsyslog has another protocol, RELP, that I believe you can use for forwarding, but I don't think it's been implemented outside of Rsyslog.

As far as I can tell, there aren't any good alternatives. syslog-ng's forwarding support is commercial and quite expensive. Logstash might work, but I don't want to run a memory-hungry Java app on each box.
"simply" is the key word here.
Sure, there's CASCADE, but as you pointed out it has several drawbacks.

That's why ideally natural keys should be immutable. That has many advantages over surrogate keys.

There's a follow up post (posts) to this presentation: http://www.databasesoup.com/2015/03/primary-keyvil-reprised.... where many problems caused by the abuse of surrogate keys are illustrated.

But the main point is simple: surrogate keys (abuse) is an easy way to data corruption. Not in the sense of durability as in ACID, but in the sense of humans (manually or by bugs in the software) duplicating information that is not enforced to be unique thanks to using non-sense surrogate keys as the uniqueness criteria.
If they don't want the traffic they are more than welcome to put it behind a paywall.
> And like it or not, ads have to run Javascript or Flash.

They certainly don't need to run whatever arbitrary scripts the advertiser wants. The advertising network can provide whatever functionality the advertiser needs, there's no reason to leave this obvious hole open. The idea that I can pay someone some cash to put whatever arbitrary JS I want directly into Forbes's website is utterly ludicrous.
Yes, that is the post where I tried to tell the whole story. This thread is my faulty first submission :/
BuzzFeed's hypocrisy regarding copyright infringement
So the terms are coming from the Buddhist tradition, where there is a category of Buddhist denominations usually (a) valuing the Lotus Sutra (as sort of a central uniting point and/or shibboleth); (b) believing in celestial buddhas and bodhisattvas who you venerate and whose assistance you request in life; (c) valuing the idea of us all being "on the path to nirvana" (the "bodhisattva" ideal) even if we are not monks; and (d) representing the diversity of Buddhist denominations as largely being "lesser vehicles" (hinayana) to nirvana, and their own category as being a "greater vehicle" (mahayana) to get there. "Maha-" is a prefix meaning "big," but often also connoting "great, impressive, respectable, noble".

In practical terms a "big-vehicle Prelude" is saying "I want to do something much smarter than the original Prelude and I am willing to replace most of the underlying abstractions in the Prelude to do it," which can sometimes mess with code that has to deal with old-prelude and new-prelude subsystems of code. A "small-vehicle Prelude" is much more "I have a couple extra modules here and there that I want to import, and maybe I want to fix a couple of these operators to a slightly more general definition with a typeclass, but largely I want everything to be the same, hence intercompatible with minimum fuss."
Ah ... Prime. The only place you can get "free two-day shipping" that takes 6 days.
The commentary here is missing the point. The article is about managed services, not EC2, and yes, it is killing devops. My team just built a very successful ecommerce company doing respectable traffic volume with zero ops or devops.

We built it on Google App Engine. If you don't like GAE there are other PaaS providers that offer something similar. Developer life on a PaaS consists of building features day in and day out. It's not mucking with Docker, Chef, Ansible, Salt, Puppet, BOSH, apt, yum, or any other low-level systems management tools. This stuff doesn't even waste space in my brain[1]. Instead of learning this stuff, my team has been been learning about the business needs of our customers and building them out in code.

I plan never to hire a devops team. Running servers is like writing assembly language; appropriate only for companies with very specialized needs.

[1] Not quite true - I used to work on the BOSH team. It's a great tool for deploying CloudFoundry. But you shouldn't use BOSH, you should use CF, hosted by someone else.
Guess it depends what tests you run. And it's not really about the specific result. Once they have the result, they talk over it with you, using that as a template to identify and understand behaviors/motivations in your coworkers. It's a dialogue, not just a test score.
Netflix prices are about to rise for millions of subscribers
Huawei P9 Lens vs. LG G5 vs. Sony Xperia Z5 Premium vs. Samsung Galaxy S7 Edge
Everyone else here seems to hear the words "big bank", and think Sberbank must be sort of like Wells Fargo. But the thing is, Sberbank just isn't any old "bank":

Funds moving through Sberbank are regularly used to support clandestine Russian intelligence operations, while the bank uses its offices abroad as cover for the Russian Foreign Intelligence Service or SVR. A NATO counterintelligence official explained that Sberbank, which has outposts in almost two dozen foreign countries, “functions as a sort of arm of the SVR outside Russia, especially because many of its senior employees are ‘former’ Russian intelligence officers.” Inside the country, Sberbank has an equally cosy relationship with the Federal Security Service or FSB, Russia’s powerful domestic intelligence agency.

Which make the question of why the Podestas would choose to take their business a very interesting question indeed.
Did you only read the headline of those articles?

>As TechCrunch recently reported, technology analysts at Compuware found that mobile apps are still the preferred means of connecting for most users over mobile websites, with 85 percent choosing the former over the latter.
Git + Gitlab CI + gerrit. Working awesome for us.
I tried to tell more details in https://news.ycombinator.com/item?id=11455670

Basically they imitated the full design and even the URL routes. The "logo" has parts of our logo.

There are no hotlinks used.

What they are doing serves the Chinese market, which we didn't do yet (so it is a positive thing), but we don't have the resources to really compete with them yet.
Unless you're able to explicitly state how this is done and/or how to trick it in think you're "high risk" - then seems like speculation; yes, I'm aware Google's said this, but never seen an proof of it. I've found bug in the past in the system that were easy to fix, told Google, but the bugs never were fixed.
Haskell desperately needs a thorough revamping of its Prelude, and it really has to become part of an updated language standard document. Too much of the burden of learning Haskell consists of figuring out how to dodge the pitfalls in the current Prelude. The arguments against revamping basically boil down to "but that would obsolete this old textbook!" and that just doesn't wash.

Getting this job done right is essential to Haskell becoming a "hundred-year language".
At the time we were using a GoDaddy shared solution and didn't have access to change a lot of the config.
We're behind cloudflare and hosted on AWS. They're not hotlinking anything, but they copied the whole site 1:1. Please see my "real" submission with links to the sites: https://news.ycombinator.com/item?id=11455670
How good is your French accent?
They do this for power and legitimacy. Ranking gives them power/imprimatur and presumably would want to use this to affect and effect the direction of encryption.
Super, that's cool to know. I can honestly say my backyard garden surprised me with how crazy mint, arugala, lettuce and tomatoes were able to grow. If the aquaponics system can also help conserve water - always a concern in this region in spite of last year's record soaking and lake filling - that's another great environmental and cost benefit to the user. Thanks for the info!
Captain401 (YC S15) is hiring React/Node.js engineers to build the modern 401(k)
How is this not a violation of the CFAA? Why isn't Forbes being held responsible and prosecuted? So if I go and access one file whose name is not public on Forbes' website, I'm looking at least at 5-10 years in jail but Forbes can infect millions and they get off scott free. The problem isn't ad blockers, the problem is the ad networks. They are criminal and should be held responsible. They should be shut down like any other spam network. They should be made to pay. And anyone who uses these criminal networks to infect computers is an accomplice and should be treated so.

At the very least, the people who are anti ad blockers will hopefully shut the fuck up now because they're wrong and it's not a matter of opinion.
How easy is it to acquire remote work? What are some sites I can go to to look for open positions?
If WhatsApp releases the code, how do you know that's the code they run their service on? Open source does _nothing_ with respect to the trust issue with third party services like WhatsApp or Facebook. It's completely orthogonal.

I was wrong about heartbleed, it was found through a source code analysis technique called fuzzing - decades after the vulnerability was introduced. That's decades during which source code analysis could have been used by bad actors to find the same vulnerability and exploit it.

Opening the code doesn't by itself eliminate the vulnerabilities. What it does do is fire the starting pistol on a race between black hats and white hats to find and either exploit or close the vulnerabilities. It's very much a two edged sword. So what we need is confidence that the white hats are winning that race.
It's a common strategy. It has nothing specifically to do with China. I don't think I've ever seen HN posts saying think of the children.

Here's a popular post about a guy doing it, I'm not sure where I first found this post, it might have been HN. Either way I'm pretty sure I've seen some of his stuff linked on HN. http://ascii.textfiles.com/archives/1011 He wrote several followup posts with metrics and stuff.

For example 3 people here say they use it as a strategy, and nothing about China: http://ask.metafilter.com/4302/Is-there-any-etiquette-to-hot...

This accepted answer with 17 upvotes recommends it: http://stackoverflow.com/questions/3990337/how-to-protect-ag...

Also see http://i.imgur.com/WDDH8wj.jpg http://krisalis.org/weblog/?p=1137
> I've managed groups of sysadmins over the years, and the truly talented will outright refuse non-remote work. Since they can demand it.

Sysadmin/Devops here. To confirm your point, I don't take any work that isn't fully remote, and I don't take any position for less than $100k/year USD (~15 years experience).
Not sure what you mean by forwarding support - my entire environment is configured with syslog-ng forwarding to various places based on various rules.

Heck of a lot faster than rsyslog. The one thing I've not been able to do is get rsyslog forwarding to syslog-ng. Something happens to the message format between systems that leads to hilariously incorrect filenames on the collector systems.
How many more compounds are out there with valuable research behind them that we haven't realized?
Terribly sorry for your loss. My younger brother passed away due to leukemia and I feel your frustration.

I do want to give some credit to Light the Night though. It is run by Leukemia & Lymphoma Society, not ACS. LLS has an 84% score on Charity Navigator, and while that score could be better, they do spend 73% of their expenses on the programs they exist to deliver, which is very good.
The Clintons use Windows, The Russians use Windows.

"Microsoft's Financial Reports Reveal Clinton's Kremlin Connection"
For a while, it's the same thing.
You save some of the profits from good years.
That and it's really funny. You're ripping me off? Surprise! Your site's made of porn now! It's enjoyable in a somewhat twisted way, a la schadenfreude.

I don't know if I would call legal channels "ineffective" and I'm not anarchist enough to say that you "must" be a vigilante when they don't work. But yeah, sometimes it's really enjoyable to get back at people.

There's nothing wrong with being morally wrong. (Just as long as you're not hurting anyone, in my opinion.)
I am reminded of a comment by someone famous:

"The first software companies had thousands of developers. The second wave of software companies had hundreds of developers. The next wave of software companies will have 1 developer."

Can't find the source, might not be the exact quote either, sorry.
This looks awesome, but is there a way to bypass this from the browser? Occasionally, I give in and disable ad block if I really want to see something.
Get “Non-Technical” People Writing Code Too
Sorry for the double submission, I now added the text to this post as well.

The thing is that they created the site from scratch but it is exactly like our site only directly aimed at Chinese users.

Our website is www.strivewire.com, and they use www.haogegebisai.com

They are not hotlinking anything, and we're shying away from an open confrontation. Just wanted to know if you know of some good strategies to approach this issue.
People will pick up and use almost 50% of random, discarded USB drives
I am not sure how your model differs from online Hotel companies in North America? By "Uberlike" do you mean surge pricing? More questions. Do you know if Airbnb have problems booking rooms in Africa? What is the vacancy rate of a "good" hotel? I suspect answering these questions give insights into viability (if I am a good hotel and have low vacancy, why should I deal with you?)

A comment about title: don't equate largest with best, or most profitable (also this hotel chain does not seem to exist yet).
Messages about Tiananmen and other "censored" topics will allegedly get the website automatically banned by the Great Firewall. I've heard that some sites suffering from Chinese spam just put that somewhere in their webpage and have the traffic magically simmer down.
Why I need to reconfigure parts of the stack in first place? I am devops, so these things are automated.

In general, plan your changes ahead of time, test and automate them at staging servers, prove correctness of changes, and then deploy to production. Never do anything by hands (or by configuration tools) at production servers.
Nope, because this site is more than just you and your views.
This is a silly arms race. I can't wait until sites start employing adblocker blocker blocker... blockers.
This is one of those topics where people feel so strongly (because of the annoyance), that I strongly believe that quite a few people are subject to cognitive dissonance regarding it. That is, of course, a self-serving opinion, so I try not to rely on it.

That said, there are good, defensible reasons to run an ad blocker. Namely, that it's a security risk not to. That's not a moral argument though, and my only issue is with people that think they are justified to consume the content no matter the desires of the producer, that once it's published it's fair game. I have no problem with people that run an ad blocker but acknowledge that it does cause some harm. I count myself in that group.
ASU's SunCube FemtoSat will open space exploration to everyone
Good point, so you propose we don't lose focus. The only thing is that they are adding value for our Chinese users by being Chinese-language, thereby filling a gap we currently can't address.
Yea, the Tech Dirt article is suggests a bunch of nefarious stuff, but doesn't actually state anything unambiguously.
And I have to dress like a damn fool. (Business casual sucks.)

I realize that this wasn't the main point of your post, but I do have some thoughts on this. My first job after college was at a Fortune 500 company that required business casual. I dressed like an idiot. My shirts were too big (and all of the same single-color button-up variety). My pants didn't fit right (and weren't altered to match my actual height). There was no diversity in my outfits.

You don't have to make those same mistakes.

1. Get the stuff you buy altered to fit you.

2. Look to the web for basic fashion patterns and advice. This is easier than ever.

3. Give up and order from Trunk Club or an equivalent service. It's basic fashion for the fashion illiterate.
You're absolutely right about all that. I never said it was perfect here, and in fact things are definitely getting worse in many ways.

However, we're comparing present-day US to present-day Canada, and I'm not seeing any advantages to living in Canada, except for living around friendlier people. Economically, there don't appear to be any advantages at all to professional tech workers, only big disadvantages.

If you think Silicon Valley has a broken real estate system, have you checked out the real estate situation in Vancouver? Personally, I'd love to live in Vancouver, but there's no way I'm going to get a job there that pays enough for me to buy a house that costs several million dollars (CAD), given that even crack houses there cost $1M.

At least here in the US, there's still a lot of cities besides SV where there's a lot of tech jobs, the pay is really high for them, and the housing costs are bearable.
Amazon is big enough that they could be seen as abusing their power as the largest online retailer to suppress competitors in other markets. These are products that consumers would reasonably expect Amazon to carry, but they don't because it competes with Amazon's other businesses.
My Brain, Apple and the Transfer of Fragility
Same old same old? If you think nancyfx represents a leap forward I don't know what to say.
Because it may not be obvious, this article is from early January. A number of different sites reported on these incidents back when they happened. Here are a few examples:

http://www.engadget.com/2016/01/08/you-say-advertising-i-say...

http://www.extremetech.com/internet/220696-forbes-forces-rea...

http://www.networkworld.com/article/3021113/security/forbes-...
Funny, if you're a free user of Onedrive, Microsoft gives you 1 years free of Office 365. If you're a paying Office 365 user they give you the option of cancelling the account.

Yap, Microsoft rewarding their paying customers
Always great with more SD card image writers. :)

This one seems very easy to use 3 steps done
You need the full a://a.a/%0a to match the URL pattern, but that's the jist of it.
Do you understand why your CEO swings for the fences? It sounds like the mindset isn't what bothers you, it's why she swings for the fences.
Why people don't understand this I cannot understand. If you respond to a get request the html is mine to do with as I like(personal use), maybe not render it to a browser at all.
But it's temporary state that will affect behavior and make things permanently worse - not just for the developer, but for everybody. Getting it wrong can inflict mortal blows on the enterprise. Having the power players escalate based on status will make it oh so much worse.

People need to understand that there is no zero-cost instrumentation and getting measurement wrong is extremely expensive.

I have to work backwards from deployment to development or there are problems. Sometimes there are external lags of months between them. People find my line of questioning in this regard very annoying but I do this and others on the team/teams do not, and I have a much better accuracy rate. So they've learned to do this with me.

When you're deploying, you're designing a protocol and that's always a challenge. But if you don't do it, the error rate creeps up.

I publish a statement of work for each release point and encourage redlines to that. So far it's not drawn any fire. But inadvertently getting a feature in before it's handed off properly causes lots of problems.

The critical resource is always human attention.
FTC Annual Highlights: The consumer protection year in review
Iranian Mobile Internet Usage Rises 3.5 Times This Nowruz Comparing to Last Year
same where i work. we have team of about ~10 backend guys and we share the load of doing 'devops'.

i would prefer having a guy or two dedicated to it, but we make it work.