skysight-inc/HackerNews huggingface dataset:
'Funny for Thee, but Not for Me', ISIS, Activists, and Unintended Consequences
Bitcoin: Ringing the Bell for a New Asset Class
> I see a few people^W^Weveryone here talking about security. If you didn't read the whole blog post, you might not have noticed the new Linode manager that we're working on being mentioned. Check it out, it's open source: https://github.com/Linode/manager

Open sourcing the UI while keeping the actual portion that manipulates the data + handles authentication ( the API ) doesn't have substantial security benefits since its largely available to the end user already.

While I am sure you are correct that the rewrite in Python is easier to reason about and more secure, I feel the way you've presented it might imply it is secure because the source is available which is not the case.
My guess is it's a simple time-decay-weighted karma-based formula. That is, karma * e ^ -age. "Best" vs "top" may be the difference in net karma vs gross positive karma.
After that, we keep seeing posts about how coders are earning too much money.
Correct me if I'm wrong, but rainbow table is for popular password and character combinations yes? If my password is s0m3th1nggsup33rhard, you cant make out the string from the rainbow table.
Although I prefer and use Linode over DO, I don't think DO has much of an option than just match or better Linode's price. Its a race to the bottom.
I was always a lousy developer, but I finally could make apps for the first time when I tried putting together tools like Zapier, Blockspring and Bubble. I ended making a (shaky) clone of Airbnb, and recorded the whole 10-hour process. Time-lapse video here: https://www.youtube.com/watch?v=tCgD6-FOjtA

On this platform (code-free as well), I am teaching basic design and programming concepts for the audience that usually stumbles after 4-8 lessons on CodeAcademy. It's my hope that after building some cool things without code, they understand enough about programming to feel confident to dive back in. Curious to hear what you think!
The ideal of being honest and law-abiding fits with your story. There is pressure for them to be perceived this way, whether or not it is true.
Geographic Cure
Depending on the state, plants need to be tracked from seed to sale. That is just one aspect of it that I'm familiar with. I'm sure the compliance burdens beyond that are significant.
The Nom Profit-Maximizing Operating System [pdf]
The phrase I use is "Security through obscurity provides temporary security which degrades over time"
Hedge-Fund Consultant Bantered for Insider Information
I like to call JavaScript "the PHP of the 2010's"
The Art of the Abandoned
For me it boils down to variant types (also known as Algebraic Data Types but I prefer the ML nomenclature) and the corresponding pattern matching that comes with it. This is IMO the major feature that makes FP languages so damn safe.

Everyone talks about higher order functions and generic types but lots of languages have that.... the really good ones have ADTs.

Oh what I would give to have ADTs in Java. I would stop using Exceptions for errors (not all exceptions are bad just most of them). I would stop using the annoying visitor pattern... That reminds me that I need to rexamine Derive4J
Yeah, surely this isn't a move to get some EU funding... And to provide a base for the massive lobbyist team in Brussels.
Incidentally! I thought about this the other day. Given that it's been about 15 years, is there anyone in the HN community / internet that's spoken about the design decisions with IE 6? Specifically, was it incompatible by design or simply by incompetent management?
Here's a brief comparison between OTP (Authenticator) and U2F: https://www.yubico.com/2016/02/otp-vs-u2f-strong-to-stronger...

One big advantage of U2P is protection against phishing and mitm attacks, which OTP is vulnerable to. There is more information here: https://developers.yubico.com/U2F/Protocol_details/Overview....
From Barrons - ARK Invest published a research report earlier this month, in conjunction with Coinbase, calling bitcoin an “new asset class” altogether.
They probably mean that it's like the stories about 100x battery capacity improvements that end up as a 20% capacity boost in actual products that appear on store shelves. Prototypes are always more impressive than marketable products.

In his case, maybe there are acceleration/deceleration issues, maybe the engine would be cost prohibitive for manufacture, or maybe he'll have to modify the vehicle itself to achieve the 100mpg number. The point is that there's likely to be some constraint that makes it impractical.

As an extreme example: https://en.wikipedia.org/wiki/Pac-car_II

There's a reason that we aren't driving hydrogen fuel cell cars with 12,600 MPGe fuel economy.
You're wrong. It's not just a dictionary. While tables are generated with a cap on length and characters used that's not the same as being for popular passwords.
Once a malicious 3rd party gets the keys to this kingdom it is game over.
Have you been to Geneva? Most of the time I go from the train station to the gate in 20 minutes, including security.
+1 for Moom. It does what it's designed to do beautifully.
Original author here. The docker network point is a good one, I'll give it a try with host network.

There is still value with comparing different clients with the same network constraints. Yeah it is a contrived setup(noted in the post), but at least is the same contrived setup for each test.
Not that familiar with it, but part of the issue is that financial institutions above a certain size won't do business with them because it's still illegal at the federal level and they're afraid of the ambiguity. I wouldn't be surprised if that affected what PoS software they could use.
Their ad strategy sure did suck. I know this because I really wanted to advertise on Tumblr since many of their users were already posting about my startup and driving tons of traffic (tens of thousands of page views, from posts with 100k+ notes) to my website.

I contacted their ad team and was told the minimum ad buy was $25k. I explained the situation and said that given the popularity of our product among the Tumblr community, I had no doubt we could find a revenue-positive way to advertise on Tumblr, but that we couldn't commit to $25k sight-unseen. I never heard back from them.

Considering how easy it is to advertise on Google or FB with just a couple bucks, I was shocked that Tumblr is so inflexible. I guess it's not surprising they couldn't get to $100M in ad revenue, since they'll only talk to companies that can afford $25k experiments.
Agreed.

While it's normal and expected that the 'Ops' or 'DevOps' or the artist previously known as 'Sys Admin' is expected to be available off-hours for stuff they didn't build (read: emergencies-that-are-not-within-their-purview-to-prevent)... on the flipside, the tendency of many companies to reduce the burden of responsibility of developers and product managers who are often directly responsible for instability in the environment, is prevalent in a way that makes my blood boil.

Going back to this article, it's almost a celebration that DevOps folks have to shoulder that burden.

While it's normal to be on-call, being woken up all the time is a sign of a badly run infrastructure OR release/change-management practices that are rushed and/or feeble.

Everywhere I've worked I've stood up against this tendency, analyzing each issue that causes a page and seeing how it could be prevented. A quarter of the time it's technical: creating redundancy, deep diving into an ongoing issue, doing load tests and capacity management, etc. The rest of the time it's political: oh, the new code caused the memory to be sucked dry from the system, this started precisely after the last release (proof, here's a graph from my Check_MK setup); oh, the devs ran a crap query again on the Hadoop cluster even though we warned them not to do X. etc.

I think if they want to prepare future DevOps students, rather than using PagerDuty as per the article, maybe they should give them shots of liquor and strong beer, their livers could use the preparation. It's an incredibly political role.
Exactly, they might take them all down, but more likely would ignore them when they are everywhere, since they would then signify nothing, and be costly to have removed.
That's not true. I regenerated several login certificates before I finally actually figured out how to install the certificate in my browser. You are not screwed if you lose your login certificate. As long as you have access to the email address, you're fine. Use the "Lost authentication certificate?" link on the login page.
Hierarchical State Machine
The IRS explicitly states that you need to declare bribes and income from illegal activities [1]

"Illegal activities. Income from illegal activities, such as money from dealing illegal drugs, must be included in your income on Form 1040, line 21, or on Schedule C or Schedule C-EZ (Form 1040) if from your self-employment activity."

[1] https://www.irs.gov/publications/p17/ch12.html
1) Why do you think Google needs EU funding for their research ? Last I checked they had one of the largest cash reserves outside the US - which means a lot of it is in the EU, if anything this is a way to smartly spend that cash rather than get taxed repatriating it.

2) The lobbyists can be based in Brussels, Zurich isn't that close to Brussels anyways!
Field trip to mars
IOW: at the federal level illegal by law, ignored for recreational amounts by executive order (and thus possibly changing when a new executive branch is elected).
The IRS doesn't refuse to interact with anyone. They want their money no matter how you made the income, and if you're in the country legally or not.

Remember, what they ultimately got Al Capone on wasn't racketeering, bootlegging or murder, it was tax evasion.
30% off of energy storage for the USA in Congress
Winning Portfolio in 2016 – Gold, Treasuries And… Bitcoin
Congrats Linode. I have been a customer for many years.

Why could there not be a $5 1 GB plan? I have quite a few instances for which I don't need even 1 GB, let alone 2.

Doubling the RAM is great but what about storage? Why is RAM and storage still coupled? It's a pay for what you don't use system, having to upgrade to a 24 GB, 8 core box just to get some decent drive space. Ridiculous.

I have been with Linode for many years now but it's lack for even some basic modularity will see me leave to AWS soon.
Biometrics are good replacements for usernames, but not for passwords. Biometrics can't be changed in the event of a breach, and can be taken from you surreptitiously or by force.
Vultr's creators (Choopa) have been in the hosting business for nearly 20 years, so not all that surprising actually.
Wait, this seems to ignore the fact that with good change controls and sound code, products do not just fail at 3am. If they call everyone at 3am without a failure the student could have prevented, that does not teach anything other than how to answer a phone. Instead, teach them to properly engineer and document their solution such that they aren't called at 3am.

This seems like a waste of a good night's sleep to me.
I used Cookie Block for a long time, though it seems I did some upgrade recently and lost it....

https://addons.mozilla.org/en-US/firefox/addon/cookie-block/
Nightly builds do include extra debugging instrumentation which makes them slower than released versions.
Will it also shut down add-in cards in a PCIe slot?
The absurd thing is that while marijuana being a schedule I drug which in the DEA's own words:

>> Schedule I drugs are the most dangerous drugs of all the drug schedules with potentially severe psychological or physical dependence.[0]

Cocaine and methamphetamine are both schedule II.

Now I understand the difference is that Schedule II means there are some medical uses but to lump marijuana in with "the most dangerous" but not meth? That just seems ridiculous.

[0]https://www.dea.gov/druginfo/ds.shtml
But PHP is likely to become the next COBOL. As the talent pool dries up, salaries will rise.
He was star of the highest rated (grossing?) show on television for quite a number of years up until very recently. Talent is quite subjective.
Actually, they have quite an American accent. Because they watch a lot of American shows in original language, as they explain.
Server Sided Marker Clustering with Leaflet and Node/Mongo
I prototyped this feature last year as an intern at Mozilla. I think the engineering done for containers can be exposed in a lot of cool ways to the user. I'd love for you to send in your ideas on the comment form [1]. One of the features we considered last summer was "site specific containers" [2], which would support your facebook example.

[1] https://docs.google.com/forms/d/1oQN14TUnqj-MDErp8MKxH_v7Ytt...
[2] https://wiki.mozilla.org/Security/Contextual_Identity_Projec...
My problem with it is the fact that it inserts itself in my otherwise standard-conformant C++ code; right in the middle of class declarations. If I decide I want to use another GUI framework I'd have to refactor that code. Most other build steps occur before or after compilation and are far less intrusive. In short, it's too tightly-coupled to application code.
They were last available on 2013 March 19: https://teespring.com/hntees#pid=6&cid=619&sid=front

...unless my Google skills are also showing their age and I haven't found a valid link for it.
Honest question - was the sensation 'definitely better' for both parties, or just one?
I don't think I'm implying that by making the manager open source we are making it more secure. The place where security gains come into play is things like the new design of a stateless API talking to a static frontend app, which I think is a much less fragile system in terms of security.

And yeah, the Python API is much easier to reason about security-wise in general.
Depends on the specific rainbow table.

The ones I linked to are brute force, every single SHA1 hash for all common ascii characters up to 8 digits long. You can also download smaller rainbow tables for common passwords, dictionaries, or similar.

Ultimately SHA1 is extremely fast to commute in 2016. So even if a rainbow table doesn't suit your needs, you can easily generate a new one which does, but likely you'll break a good chunk of passwords just using the "out of the box" 1-9 A-Za-z0-9 and specials rainbow tables.
I am a little curious. ConferenceBadge seems to be an excellent idea but how did you guys manage to pull off that yearly revenue with that pricing? If I am not missing something, that would translate to like million badges a year.
It's not. He will stop responding to messages if it's clear to him that you can't make him any money. I contacted him once and he responded 3 months later and then stopped responding when it became clear I am not ready to move to Zurich just yet.
Nice! Google Chrome has profiles, which are kinda similar, but this looks better!
My hope would be that they somehow engineered a failure on all the systems that they would have to debug at 3am
“Spam King,” who defied nearly $1B in default judgments, sentenced to 2.5 years
Sorry if this is a stupid question, but why would you want to distribute computation to the client?
Originally they made their containers because the standard library implementation was broken or incomplete on many platforms they supported. These days that's not such an issue, but avoiding the standard types allows them to make stronger binary compatibility guarantees.

I think it's a rather nice supplement to the STL. Their containers are optimized quite differently. For instance, all the Qt containers are copy-on-write.

Also, note that QList is not a linked list. QLinkedList is the counterpart to std::list.
Wait what? I created an account just to contest this. I've never ever met a single person who openly admitted to committing a felony my modifying their firearm into an illegal machine gun.

I would most certainly not call that common and I think either you're around the very small minority or full of it. That modification (illegally done) carries a penalty of 10 years in prison and up to $250,000 in fines. I seriously doubt you know people openly willing to share information that could invoke those kind of consequences.
Beautiful DNA Music Visualizer for ANDROID
As someone who is an actual StartSSL customer and not just someone who got confused by the login process and gave up, I think StartSSL is great. I haven't found cheaper identity validation elsewhere, and you can pump out unlimited certificates once you're validated. Using client certificates to log into the site is annoying, but it's fine once you figure out how it works. The problem you describe with losing your cert is not a problem: you can regenerate the login certificate using the "Lost authentication certificate?" link. I have done so and confirm that it works and that you don't need the old certificate to generate a new one. It is tied to a persistent account (contrary to what you claim in your post), so you lose nothing, and had you used an actual computer you could have backed up the certificate.
lol, you didn't get the memo , did you ?

http://mashable.com/2016/06/15/how-yahoo-derailed-tumblr/
Seattle recently hired a bunch of private contractors, partially to serve as more warm bodies, and partially to put the TSA on notice that they can be replaced.

Anecdotally, I went through Seattle TSA at about 6am on the 3rd of this month, and wait times were under fifteen minutes.
You beat me to it! I made one.

http://imgur.com/HI8d0B1
Yes. Because Zuckerberg is such an innocent foal. If anyone comes close to being an evil force in the world today it is far more him than anyone else. You must first know what Facebook does beyond the baby blue themed website and Zuckerberg's desires to replace the internet with Facebook.
Reformat old diffs? If you're under the impression that Git stores diffs you're mistaken. It stores the full file contents and delta-compresses them later.

Diffs in Git are purely a presentation format for human consumption.
You know we've gone off the rails a bit when the authorities feel they have to automate 24x7 surveillance to watch for things that the neighbors otherwise don't give one rat shit about. (nobody is complaining about anything, but we're still looking for a way to take down "those people", for a given unpopular group of the day)

E.g. - the War on Drugs going from somehow (merely) "keeping the peace" to Zero Tolerance and zero sense.
Good to see I am not the only one that he hasn't responded to...
Can you tell us what the startups did - "legal space" is very large and it's nice to know of successful bootstrap ideas - I think it helps me look out the window for my own
> was it incompatible by design or simply by incompetent management?

"Have you stopped beating your wife?"

Seriously, what a dumb question. The answer is "neither": at the time of its release, IE6 was great. It was way better than its only real competition, Netscape 6, which hadn't seen updates in years. Yes, it had bugs, but all software does. If Microsoft had just given it regular updates, it would've been fine. The issue with IE6 was not that it was bad ab initio, it was that Microsoft abandoned development when they felt they had no competition, so it slipped farther and farther behind web standards.
Linode has been a monumental disappointment. I signed up with them in 2005, when they were 2 years old and AWS didn't even exist. They were reliable and the support was phenomenal. The Linode Manager was powerful and yet simple to use. I used them for all my personal and professional hosting needs.

In 2013, the support started going downhill. Then there were a series of security breaches, with absolutely abysmal responses from Linode. I now expect to be off of Linode by the end of 2016 (mostly to AWS, with some DigitalOcean), even though in many aspects I still prefer Linode.
Where are you living now?
1) Needs? Of course they don't need it. A -lot- of organisations asking for EU funding don't need it.

2) Yeah, but Zurich is a much nicer place than Brussels :) . And most likely not as watched by investigative journalists.
A combination of federal illegality (which affects banking heavily) and special compliance requirements necessitates custom industry solutions AFAIK.
Salvador Dali's Script for the Marx Brothers
XSS on Google worth $5000
This! Symfony is so wrong, i actually can't believe it. First version was kind of rails, replacing all that ruby awesomeness with PHP madness. Newer Versions suddenly want to be like Java only 1000times slower.
Sweet. I implemented that feature vaguely fearing that nobody except me was going to use it, in my case to ease setting up "auditing" hooks on a centralized Git server. Awesome that you find in useful.
Having used a few mainly languages in my time, I far prefer working with Python or Perl over Java or Visual Basic. I encourage people to use the better ones, so that hopefully the crap ones do die out (as VB seems to have!)
Python's method(self) is very useful. It gives the ability to call methods in the same way you use functions, which is what they really are. It allows you do things like map(str.strip, list_of_strings).
I prefer PHP to Javascript... And PHP does sucks.
IRS refuses to interact with marijuana businesses

That's not even remotely true, as even 30 years ago the IRS happily took my money, and did so without telling anyone else where the money came from. I mean, maybe it's changed since, but when it comes to "IRS won't take my money", ima gonna have to pull the "citation needed" card.
It's (probably) cheaper to open an office in an area where people are willing to work in tech than to try to move the talent. Believe it or not, not everyone wants to move to the US and leave friends and family behind.
So the students engineered themselves to fail or the instructors gave them a terrible system that is bound to fail? Shit going sideways is a fact of life, but you can at least let people have the chance to prevent the problems before they exist.

While there is always someone else's mess you have to support, that does not seem like a great teaching moment to me.
Sourcegraph for GitHub Chrome Extension
The planes aren't bad, but likely set a precedent for drone surveillance.
As I pointed out, what is "terrorism"?

If you start by saying that "ISIS = terrorism" then there's no predictive knowledge in knowing someone's ethnicity, because your definition is inherently geographically biased, and ethnicity is correlated to geography.

As you say, it's a tautology, but you think that's meaningful, when it's actually a decision made by fiat. And wouldn't nationality be more predictive than ethnicity?

Are those who attack abortion centers and abortion doctors terrorists? If so, is "Christianity" another factor? If not, why not?

Is the Charleston church shooting an example of terrorism? If so, is "being white" another factor?

When the US-backed Contras used murder, rape, and torture against the civilian population, was that terrorism? And if so, what were the key predictive factors we could use to help identify terrorists and terrorist supporters?

Who gets to choose what is terrorism, who gets to choose the factors that go into the predictive model, and does that choice have a built-in bias which makes the model useless for screening purposes?

And again, why is it the least powerful who are often designated the most suspicious?
Why not

import for modules

require() for cjs

load() for modules (or any other function name)

?
I'm going to call BS on your background, especially after calling an AR-15 an "assault weapon."
Just because of how clearly you have explained it, I would surely want to buy your book when it releases. As of now, I know nothing about Docker except one or two buzz lines. And by reading your book when it releases, I am sure I can get a full picture. BTW, who will be target audience for your book?