skysight-inc/HackerNews huggingface dataset:
There is a pretty clear common theme displayed on the Twitter accounts of people that are in this community and know each other personally. These are also not outsiders but trusted members of the community. So far the response is either silence or acknowledgement of the accusations. This is not a trail but it looks like the attempt to remove a toxic person from this community to prevent harm to others. This does not mean that he is guilty of the accusations but a lot of persons related to CCC congress, hackers, Tor members univocally agree that it's a good idea to have him step down and exclude him. There seems to be enough personal backstories that everyone seem to agree it's the right thing to do.

At least that's my impression from the outside. This is not some kind of government orchestrated smear campaign, rather an effort to prevent harm.
It's not just techies or criminals that want this level of security: companies also want to keep things secure, trust me. In the oil rig industry we used TrueCrypt to secure (1) employee/vendor lists, and (2) location scouting information. Given how difficult it is to obtain tis information, competitors would pay big dollars for this information, regardless of how obtained
Without specifics, there's not enough information in the allegations to attempt to speak up in defense - if you didn't personally witness one of these alleged assaults, you would be loath to say they didn't happen on a different occasion. Perhaps Appelbaum is careful in choosing victims, perhaps the assaults never happened. You just don't know, so you say nothing.

Putting specific details to the allegations on the other hand would make that quite possible - a lack of defense in that case would be an indication that the accusations were true. But without specifics that's not the case.
Automatic updates are a no go and now they brought it to Windows 7! I feel like they're hacking my computers and now I'm constantly checking that 10 isn't being installed behind my back! It's stressful!
depend() {
need net
before inetd
before xinetd
}

https://wiki.gentoo.org/wiki/Handbook:X86/Working/Initscript...
This reminds me of that BOFH story, where they wired up DOOM to kill a user's computer when they died, and disabled the save button on Excel until they beat them at DM. With only a pistol.

Sadly, I don't have the link, and the BOFH archives have been scrubbed from the internet. But it's not nearly as cool as some of the other links people have posted, so whatever.
My response was to optforfon's comment... I don't see how your response fits in in that context. optforfon's claim seems to be that Agile fixes the planning problem - which it doesn't, it simply limits planning to that which is plannable and (much more) easily foreseeable - small tasks right in front of us.
That's sadly a fair comment.
Backporting security updates is a huge cost, as involves enormous amounts of tests on old platforms as well. Having one windows to support is a huge win for Microsoft, and the whining of the people seems to be a cost they are willing to take. (it has other benefits for them, and for the users as well apart from security)

Also note: when people say they moved to Ubuntu, they do the same whining about systemd and every innovation they perceive as "breaking change". Ordinary people are the greatest burden of progress, because usually they cannot (or do not wish to put effort into) understand the greater picture and the benefits to them.

Sidenote: GWX is broken. I had to do my update with manually downloaded installer media as windows update on win7 and GWX didn't work.
Sometimes you have to work on spec.
I am not trying to be sarcastic but the first thing that came up to my mind is that, "Mobile privacy" rather sounds like an oxymoron.
Right, and I'm saying that Facebook should tell them "too bad" the way Google does
> Also, you should download the source code, compile it (using a Linux machine) and always look over the source code for rogue functions, you CANNOT afford a vulnerability inside the password manager.

I'm not sure that this actually possible in any reasonable sense. Its not that hard to throw in an obfuscated back door into source code, especially in a complex system (ignoring the build chain and the whole trusting trust thing.)

Even if there are a small number of people who have the time and expertise to audit such systems, it just doesn't scale.
Just had a look at KeePassX, as it looks as though it has a sleeker UX, when compared with KeePass2.

It may be considered a faux pas, but I have come to like the http plugin, for KeePass2, which allows Firefox to reach into my database when I come to sign into an online account.
OK, I'm looking in from the outside, and I know all too well how these sorts of situations arise. However, it sounds to me a lot like the managers have largely lost control of the situation, and they are limping along doing the best they can with a system that has evolved from something system into a monster.

That happens. The challenge is how to make it better.

Thinking of it like software, there are no unit tests, and touching anything runs the risk of breaking everything. The usual way to proceed is to find a small section that you can write tests for, and then gradually transform into something you understand. The equivalent here might be to find a small collection of items that are largely independent of the rest of the product line, and see if you can bring that under control.

However, I don't know your context, and I do appreciate that wholesale changes might well be risky. The question is, can you even make a start on a small section? If not, all is lost and the system will limp along as is. But if progress is desirable, maybe there is a way to start.

Given that your senior colleague has actually spoken with you about this, maybe you can open that conversation, proposing it as a gradual way to make the system more efficient, profitable, and to reduce the existing risks.

Again, on the political side, make sure they don't feel threatened, bring them on board as a partner, make it clear that you want to learn from them, and couch it all in terms of reducing risk to the company in return for a small outlay in time and effort. See it as an opportunity for you to learn, them to gain credit, and the company to become stronger.

These are my thoughts - you must adapt them to your context.
RSA Keys Can Be Harvested with Microphones
All I can think of is that song... Ich lieb' dich nicht, du liebst mich nicht. Da da da.
FYI such a tax exists in France already:

https://en.wikipedia.org/wiki/Solidarity_tax_on_wealth

A purported merit is that it should desensitize to sit on real-estate assets. It also comes with the twist that you can get a rebate by investing in privately owned SMBs. Methinks that if you deploy that large scale you'd end up fueling tech-bubbles.
Don't Build Another Dashboard from Scratch
ESKİŞEHİR ÇİLİNGİR ANAHTARCI
Restarting is different from reloading. Take a look at `clojure.tools.namespace.repl/refresh` - which in recent versions of CIDER is triggered with `cider-refresh`. It does what you're asking - blows away all the loaded namespaces and re-compiles them from source, synching up the running code environment with what's in your source files.
>> "don't use persistent data structures, use Java's"
Love to see a reference for this.
I'm one (of several - I'm sure) that updated to Win10 and 2 hours later reverted to Win7. 'Cut your losses' is normally a good advice.
If you've taken the time to figure out Graham's number, take a few minutes to familiarise yourself with the Ackerman function, so that you can grasp the full weight of this xkcd: https://xkcd.com/207/
I don't believe that the question was meant to be a joke or a trolling attempt.

The guy's competence isn't the issue. It's the requirements of what the fix can and cannot do.

_Everything_ is a mess due to the massive technical debt of never improving key parts of the runtime.

I mean what's the point of a runtime where adding threads makes things magnitudes slower than running in a single-thread?

"But that's just the state right now, they will fix this!"

No, they won't. Just as a perspective: People usually fight over a single percent of improvement or less when working on runtime concurrency. Nobody just goes in and fixes _magnitudes_ of performance issues without rethinking what has been done and picking a completely different approach.
This is not about making things "faster". This is literally going from doing necessary work to discovering a way of not having to do the work at all anymore.
That's just not going to happen. Neither locks nor reference counting have anywhere near this optimization potential given the current language semantics.

I think the whole (C)Python community missed the train more than a decade ago.
Things that necessarily had to happen just didn't happen.
Many communities and groups of developers "professionalize" over time. This doesn't seem to have happened in Python.

Just an example: C extensions. It has been clear for at least a decade that the existing C interface won't work for threading, "real" garbage collection, etc.

What would have been smart: Providing a better interface 10 years ago, effectively giving C ext devs 10 years of time to migrate their code. This way efforts to remove the GIL today would have to satisfy one fewer constraint that's currently crippling all of the efforts.

Same with a lot of other things ... getting rid of the GIL would have required changes to various parts of the stack over the years (GC, language -> Python 3?, APIs ...), turning the actual removal of the GIL just into a final act of a multi-step process.

What actually happened: Nothing. And now they just try to break the large lock into millions of smaller locks ... in 2016. WAT? This just tells me that key people in the Python community never really gave a damn about the issue and therefore this guy will waste his time.

I have never expected Python's demise, but it now seems that largely its culture and not its lacking technology brought it down for good. From my perspective, they should have never released Python 3 with a GIL. That's what broke Python's neck, finally.
Escan Çilingir Oto Anahtarı Ve Uzaktan Kumanda Kopyalama Merkezi
Show HN: Pinglist – My SaaS Project
Hello,

I would like to show you a SaaS project I have created. It has taken me about 7-8 months of work to arrive to the point I am ready to show it to people and get some feedback so please be respectful.

It is an uptime and performance monitoring platform which currently has a web app and an iOS app. Right now it supports email, push notification and Slack alerts as well as team management. I am planning to add more features and support more platforms in the future.

I have developed it as a microservices architecture using Go. Services are deployed as Docker containers on CoreOS boxes and I use etcd for remote config management.

It's running on AWS and I have spent a lot of time making the deployment process very solid, using Terraform and Ansible.

Web services are written in Golang, I use Postgres database to store the data, the web app is written in Django and the mobile app uses Objective C.

I used Oauth2 for API authorization and also open sourced my Go implementation of the spec: https://github.com/RichardKnop/go-oauth2-server

I am looking forward to feedback. Also ask me any questions about the tech if you want :)
Of course doing constant code reviews for every single piece of software you use is preposterous. I have trouble keeping up with my employees' code reviews.
React D3 Library: The Easiest Way to Use D3.js in React
‘Dilbert’ Creator on How Trump Is Like the Founding Fathers and Jesus
I was recently invited to a demo of a complex 3D rig. A couple of days earlier someone must have given in to the Windows 10 update nag. Suffice to say, once the system was on location it never got out of a reboot loop.

Fortunately a replacement was on hand but imagining a botched live performance in front of a large audience is cringe inducing.

When you see Grandpa running a 'Windows 10 update blocker' and 'Start Menu reverting utility' something must have gone very wrong during UX development, or the company simply doesn't care about its users.

On the flip-side, I've never seen recent converts being so happy with their Linux installs, nor have I had so many requests for that "Linux thing".

There are use cases where Windows simply doesn't belong, such as digital signage and ATMs. It's a pity many developers keep choosing what they are comfortable with instead of the right tool for the job.
Not always..

Once I decided not to upgrade. But it used to pop up every now and then and I used to cancel the notification. Once by mistake, I pressed ok and there was no way to cancel the update. Then it bloated my phone(Samsung S4) like anything and phone keeps complaining out of disk space and I have to keep deleting my photos(and also uninstall apps) for getting more and more space for the stupid android it's own junk
The Graph 500 List
If you're seriously concerned that someone will break into your house and remove the screws on your laptop to mess with it, you have problems way beyond what strong passwords and ad blockers can solve.
Patches are welcome
Why do you say "and yet" - since such generic "advice" is useless so is the conclusion "and yet they get it wrong!" (I told you something useless - why doesn't it help?)
> Pretty sure everything is a value in ML and Haskell,

That's a good point. I guess it's the combination of value semantics and manual memory management. I'll try to keep that in mind in the future.

> When you care about ownership, “who frees this object” isn't an implementation detail or an abstraction leak. It's a part of the interface.

Exactly. But even more than that, references that don't extend the lifetimes of objects (like native pointers and references) are simple to create and are in many ways the default type of reference in C++.

At any rate, 'this message queue only works with types that are easy to copy' is not generally a prominent part of the documentation in C++, if it's present at all.
Sadly, there is no sync and syncing offline changes is non-trivial in KeePass.

(At the very least, a .kdbx on Syncthing/Droxbox-like storage WILL eventually lead to data loss.)
I understand it, but would have preferred some transparency.

"Users: this is what we are planning. We know it's uncomfortable, but it's best because of _ and _. Please make arrangements now if you want your computer to continue operating as-is (without security or updates), because as of _, the OS upgrade will be rolled out automatically".

The other thing to remember is that they made their own bed: they wanted to be able to sell users each individual "new" version of the OS, which created this mentality in the first place.

Like the (currently) top comment wisely says: if you focus relentlessly on the user, all of this is a much smaller problem, because your upgrades are amazing, and users want to upgrade voluntarily.
Distilling tips down for regular users who don't use SSH or are intimidated by compiling KeePassX for Linux themselves, my tips would be:

1. Use a user-friendly password manager like Dashlane or 1password with a long unique password and a second factor (that isn't SMS based). Password re-use is the #1 way accounts are being compromised at the moment and there are now good password managers that are easy to use with a low barrier to entry

2. Use an extensive ad blocker like uBlock Origin and use multiple profiles in your browser to separate your serious accounts like webmail and banking from general web browsing. The other common way of being exploited is drive-by malware and web-based exploits. A combination of blocking third-party content and separating your browsing profiles will prevent a lot of it. Don't feel guilty about blocking ads - most publishers are extremely negligent with what they allow on their sites via ad networks. Bonus: switch to Chromium[0] (firefox isn't sandboxed and exploits are too common) (but alert yourself to Chromium updates with an IFTTT of the release blog to <pick your notification method>) or alternatively remove Google, Flash, Java etc.

3. Get a VPN subscription and set it up on your laptop & mobile devices. Seriously, don't use open WiFi networks or shared networks without wrapping your connections in encryption. sslstrip is extremely effective and many apps either don't verify/authenticate SSL connections or don't pin certificates. IVPN, PIA, the Sophos VPN product - take a pick.

4. Most home routers are super shit and full of holes. Upgrade to a router that supports open firmware and pick one of openwrt, dd-wrt, monowall, pfsense etc. bonus: run an UTM like Untangled (commercial) or Sophos (free up to 50 CALs iirc)

5. Encrypt your stuff - VeraCrypt is a decent TrueCrypt fork but most operating systems now have support for volume encryption - your local disk, USB sticks[1], or a file-based volume. Backups should be to encrypted media

6. Be anonymous - create a disposable email with a fake name to signup to services with. even better sinkhole a random domain name you register. No service outside of banking, insurance, health, etc. really need to know your actual identity details.

[0] https://download-chromium.appspot.com/

[1] http://www.theinstructional.com/guides/encrypt-an-external-d...
Apple adds lots of new features every release.

https://www.apple.com/au/osx/whats-new/ (I just learnt that I could wiggle my finger really fast to find my lost mouse pointer)

I agree that it never really feels like it though. The last big features that really changed/improved things were 2 finger right click and scroll, Spotlight and Time Machine.
Microsoft loses credibility? What does that mean? People complain all day on the Internet while Microsoft's desktop monopoly of 90% falls 0.1%? Microsoft has nothing to lose and much to gain by getting more of their customers on the latest version of Windows.

In fact, developers, especially web developers, should be excited that Microsoft is upgrading everyone they can.
I wasn't aware of this, somehow totally flew beneath my radar.
> When you move the complexity to systemd, it's not magically goes away

You're ignoring that complexity was added to every single init script. Every init script had its own potential bugs, issues, race conditions, dependency logic, etc etc.

Now you're moving it to one single master system.

No, it's not "magically going away". The repetition is going away. The code duplication of an extremely complex system is going away.
relevant https://www.youtube.com/watch?v=lNYcviXK4rg
Finding the best beers in the world with Plotly and Pandas
Ingresso | London, UK | ONSITE

Ingresso is a London-based ticketing startup. We have done the work to connect to a large number of ticketing system APIs, allowing us to transact directly on the venue's system. We are profitable and processed over £18 million worth of tickets in the first 4 months of the year, 4x more than the same period last year.

Our ticketing platform consists of:

- an API (exclusively powering Amazon's ticketing business tickets.amazon.co.uk)

- a white label website (eg www.fromtheboxoffice.com and www.disneytickets.co.uk)

We aim to make these two products the best in market, and need your help to do it :) We use a combination of Python and C. We have recently written 2 new services in Go, and have just migrated half our infrastructure to Google Cloud.

We're looking for:

- Senior Backend Web Developer

- Full Stack or Backend Web Developer

- Junior Technical Analyst

http://www.ingresso.co.uk/careers/ (yes, we need a new website)

matt at ingresso.co.uk
Facebook Cover Photos Do's and Don'ts in 2016
How do I go about claiming my $50?
uMatrix combines the functionality of every recommended Firefox extension except HTTPS Everywhere.
My example why I can't upgrade and regularly have to fight the updates that try to force me again and again: two notebooks, one older, one relatively recent.

Windows 10 breaks things on both. On the older, even if the "Update to 10" says "everything's OK," after the update the machine is so unstable that it gets often stuck and crashes regularly. It has enough RAM, the cause is "officially unsupported" Intel WiFi card that I can't replace with the newer.

On the newer notebook, the touchpad remains effectively broken: its sensitivity is different, the scroll areas can't be activated. The screen is somehow also more prone to temporary "burn-in" effects. The notebook is specifically not listed by the manufacturer as "upgradable to Windows 10." Microsoft however forces upgrade again and again.

From my point of view, Windows 10 upgrade definitely has problems with notebooks.
Mental models for modern program tuning [pdf]
Advice on Being an Entrepreneur, Content Marketing, Personal Branding and More
No, your computer illiterate family members (as well as anyone who has any mental disabilities for that matter and can't understand what is going on) are going to get screwed. There's something about throwing them under the bus that doesn't sit right with me. It's almost like victim blaming your computer illiterate Windows using family members who get caught up in malicious malware downloads and stuff
Ask HN: When to Use Matplotlib, Seaborn or GGplot for Python Plotting?
There are a lot of libraries for Scipy plotting, and I'm getting a bit confused. I want to know, when should I use which one?

I have read a very good discussion (http://pbpython.com/visualization-tools-1.html), but I still want to know more.
Observations and thoughts on the Linked-in data breach
My point was that you can easily stumble into a tight contract (at least in certain respects) in C++. At any rate, it's something that Java-school teachers like Bob Martin don't tend to cover. And I'm not aware of very comprehensive books on C++ design principles.
Major problem is driver support just like you said. It renders many machines useless. No wifi.

And also massive UI change. Don't even start with the new start menu etc.
Low Poly 3D Models, VR and You: How to Ride the Wave in 2016
So there's a missing constraint that M >= S/1000 or similar,
where M=machines and S=supplies. And yes, that is an issue that needs to be considered. Over 10s or 100s of thousands of items that becomes difficult, but it's still the case that the system you describe now is not really under control.

But perhaps your senior colleague is right, and that's just the way it has to be. However, one person's time spent investigating this properly might be money well spent.
Peter Thiel's Legal Smackdown
Facebook deletes conservative posts
You might enjoy reading this: http://www.theguardian.com/environment/2016/feb/01/japanese-... :)
It isn't all software based. It's running on an FPGA. He made that perfectly clear at the beginning.
Try to Google for the anecdote about a bloody monitor in the bed.

I would, with complete confidence, hire Microsoft for SEO... :-)
I like this insight, but it doesn't overcome the argument for a first cause because you'd still need to explain where those fundamental truths came from.
And this is not what I'm saying: I say imagine somebody can force you to give him your private key for one asset. He will get a key for all of them, unless you've already maintained separate keys.

I was actually almost involved in one of such cases, I haven't invented it out of the thin air. If you can't imagine such a scenario happening to you, you're of course lucky and you'd like to use one private key for everything. But the scenario is real.
Are You Still in the Dark About the Quality of Your Data?