skysight-inc/HackerNews huggingface dataset:
>But I can't help but immediately think that this was the candidate who disregarded the sound advice of the IT and security professionals in the State Department and had an entirely different bunch of people set up a faulty alternative email service for her own convenience.

As opposed to Donald Trump, who is known for his IT security savvy and who would obviously never bend or break the rules for his personal benefit...
Some advice I would give to open-source maintainers, based on my own experience and also advice I've received from veterans:

- take breaks. go AWOL for 2 weeks. it clears the mind

- ask the user to provide a test case to reproduce. if they cannot, close the issue after a month or so

- mark issues as "needs test case" or "has test case"

- use email instead of GitHub notifications. mark as read, labels, folders, etc. are all invaluable

- if some user is abusive, cut them out immediately (e.g. ban them from the GitHub org)

- do a little bit every day so you don't become overwhelmed

- set up automated tests that run for every PR. projects without tests are impossible to maintain.

Good luck!
To answer your first question: be a part of it, either as a consumer or a producer.

My professional life now revolves around mining. I'm confident to know who to invest in and who not to.

My personal life centers around various hobbies - I'm confident I could choose a few companies in those spaces to invest in. Unfortunately, most of those are well performing private companies.
I'd agree if the client in some way exists independently of the server. For example, if you have a smartphone app, then client-side hashing could be useful.

But for a web page, what's the point? The server is in full control of the JavaScript they send you. If the server is compromised, it can easily bypass the client-side hashing by sending your browser different code.
How to Develop a Side Income Online
Ask HN: Having 1-on-1 discussions in public channels on Slack?
My partner and I run a SAAS with a small team of 5-10 people. Over 99% of our communication takes the form of direct messages. Public channels are almost never used.

Has anyone ever tried encouraging people to have 1-on-1 discussions in public channels, so that everyone can be aware of what is going on in the entire company?

We wouldn't necessarily want people to involve themselves with every single discussion, as slack and chat in general is a huge time waste, but I think the idea could improve group cohesion and also prevent my partner and I from independently providing conflicting instructions to our team.

Anyone have any thoughts or experiences?
UK College of Policing publishes Undercover policing guide
OpenWhisk runs as a long-lived service which runs your code in Docker containers. In a way, it's a hammer.

IOpipe can deploy code anywhere, which includes both Docker and OpenWhisk. It's the nail. You could deploy an app with IOpipe to OpenWhisk then run a map-reduce job on the same OpenWhisk cluster, on Docker Swarm, AWS Lambda, or... anywhere

It would be easy to stand up a service based on IOpipe that works like OpenWhisk, but that's just one use-case.
Make a habit of reading the code you're calling, easier if you're building on an os where you have access to the source. This will give you exposure to other coding styles, likely other languages, and deeper knowledge of your platform. You can do this occasionally -- if the documentation is unclear for something, check the source instead of the internet, for example.
That was my first thought as well. Why did they need to start migrating customers to another AZ? I hope their customer's started asking that as well. The title should be "Poor Design Choices Brings Down Layer"
Never sign something that claims IP created outside of work.
Keep asking yourself constantly: does this code make sense?

I think that's actually a very high bar and most code I've seen doesn't "make sense" in that if some non-developing stakeholder looks at it they won't go "oh, ok, I see what this is about" but instead "ok this is a bunch of technobabble that I couldn't possibly understand."

And read or at least skim the "Domain Driven Design" book by Eric Evans. His concept of a "ubiquitous language" is necessary for code that makes sense.
yeah, me too.
It's government trying to pick winners, which rarely works out that well. I think government should stick to basics like infrastructure, education and making sure everyone has decent health care; that kind of thing that companies are less suited for.
I love the idea of making it easy for highly skilled foreigners to job shop because it's in my interest that they are paid competitively. It also imports people who create value and bring in additional tax revenue.

I'm hesitant about the idea of merely tying green cards to STEM degrees because it does seem like the sort of incentive to yield unintended consequences. What sort of protections will there be to make sure universities don't water down their STEM programs?

However, calling this a gigantic bailout to universities is an obtuse way to characterize it. A bailout is when you provide financial assistance to a failed institution. That's not what's happening here. This is a program that would attach new value to a STEM degree from a US university. Universities would certainly experience a windfall as they will be able to charge a premium for STEM programs, but don't confuse windfalls with bailouts.
Building a Better News Feed for You
If this plan goes thru, maybe a university should undertake some sort of advanced accreditation process to be able to award green cards. I would hazard a guess that some universities (state unis?) aren't necessarily attracting the best and brightest. Anecdotal, but I took a few masters CS courses at an average state uni, and the foreign students had a similar academic rigor and aptitude as the general uni population for the most part, displayed through mean test and assignment scores.

I could be totally wrong but it might be dangerous to assume we are attracting only the best and brightest, no? Seems like we are attracting anyone on the spectrum who can dole out some money to a university and get a stem degree.
Hm, dunno. I'd say writing is about having something to say. Especially something other people want or (more importantly) need to read. I don't think that Charles Bukowski was particularly disciplined or educated for example.
Recessions come and go.

Destruction is a positive force.

"Let banks fail, says Nobel economist Joseph Stiglitz". 2009
I don't think the point was the free Wifi. I believe the point is that a government capable of such a stupid law is capable of more stupid laws that tech companies don't care for.
Google: Symantec antivirus flaws are 'as bad as it gets'
Works for me on Chrome Desktop El Capitan
> users are treated as both beta-testers and maintainters, and are expected to find and fix bugs themselves.

FWIW, this is probably both an historical attitude and a population difference. If you and a colleague at a university just made csh to get your jobs done, then you will help each other out by doing the development. Because ya'll are also the entire userbase, then you are also the beta-testers. Back then, if you used a computer, it was because you were either developing software or entering data for a developer. Not very many non-developer users touched computers until the 80s; most people developed some kind of software, even if it was trivial BASIC programs on a Commodore.

In the OSS world, you have always been expected to contribute fixes to bugs that affected you, because the tools and source code were in your hands. For most non-developers, there exists only a lack of skill to stop them from fixing bugs or at least filing usable bug reports.

Nowadays, there are much more users who cannot or do not submit bug reports, let alone develop software. Nevertheless, the attitude since the days of csh has not changed much, because not a generation has passed since OSS went somewhat mainstream (e.g. in the data center).

Whether OSS will leave behind the historical attitude that users should be able to understand the software they use (this seems a responsible attitude to me) remains to be seen. Regardless, the developer-base will likely continue to proportionally shrink and users will proportionally become less able to understand their computers.
I hadn't seen the Sketchpad, thanks for the link.

One of the things that consistently impresses me about 1960s computing demos is the clarity of meaning and lack of jargon.
Maintain it over time and changes. Writing "working" code isn't that hard, but we've all had the pains of bad code:

* Hard to extend/modify

* Confusing to understand

* Full of exceptions and not-quite-repetitions

That last point is what accumulates due to the first two. The best way to learn how not to do the first two is to actually maintain your own code over changes. That teaches you how to make code that you can return to with less confusion and how to code for changes. ( A lot of code patterns are extensible, but grow cumbersome if break a fundamental assumption )

Ultimately, once you learn to avoid universally "bad" practices, you are left with a lot of conditionally good/bad ones. The same practice that makes a solid, extensible structure for one use case is what gives you a monolithic inflexible mess in another EVEN WITH THE SAME CODE QUALITY.

So I'd say focus on that: too often we feel like it if works and is "pretty" it's good, but that's not always the case. Some seeds bear fruit, others eventually give you weeds.
If you work at a big company even if you have an internal reference they still make you do interviews and stuff.
Just wanted to add on that the down-votes probably come from people that take your comment as perpetuation of the argument that macs don't need AV, vs taking it at face value that its been your experience (and mine) with the OS.

On the flip side, I have 4 infected mac's being flagged by webroot right now because the users downloaded and ran things like fake flash installers. So "every day" users do dumb things on macs and windows. For those user, the AV performance hit is worth it (to me) :)
Indeed. Who would use that site any more after this “feature” has been publicized?
SWIFT Hackers Nick $10m from Ukraine Bank
Hedge funds are downstream of money with performance-driven interest.

Markets (the major players that skew the averages) are downstream of banks who use money the Fed's pay the interest on.

His gamble is that the elite would rather give the market unlimited welfare a la Japan to keep the signals of valid global demand alive.

The Fed will not allow a correction... mostly for political reasons.
Try changing the identity you are to Google, start using the Tor Browser.
> The goal of News Feed is to show people the stories that are most relevant to them.

Starting the blog post with such a platant lie was already enough for me.

In no way will they change anything in the news feed that is not somehow related to how they present ads.

At the current state FB ads lose their effect as they are burrowed in way to much other ad-like bullshit. If it gets more personal again, i assume these ads get more effective again as well. Good for me i guess.
Hashing it on the client side doesn't really have any positive effect on security as the client must then know what salt is used for the hash. This is less secure than just hashing on the server as the salt and number of hash iterations is then unknown by the client (or potential attackers).
No, because as a nation we are actively investing in each funded Ph.D. we train.

If we have too many PhD's then we should decrease the number of PhD's the federal government funds. But as my original parent observed, paying hundreds of thousands to train someone just to kick them out of the country is silly.

(Also, I think downward pressure on PhD salaries has very little to do with over-supply, but that's for another article.)
> I'd estimate a century ago "everyone" in my family and maybe in the country worked for a stock market financed industrial company, or indirectly in that all their revenue came from stock market financed industrial companies.

That is not true at all of my family - they were all farmers until my parent's generation. To pull out some real statistics: in 1870, over 50% of Americans were farmers. A century ago it looks like about 30%.

https://www.agclassroom.org/gan/timeline/farmers_land.htm
Has she said anything about continuing the expansion of 18F or other government digital services?
perhaps a triage where other users can vouch for or 'bump' new issues?
Because the country just got over serfdom, corruption was rampant, and its imperial ambitions were too big for its boots?
Can’t live without:
1Password - First install on any system I use. I only know 2 passwords by heart: my login password and my 1Password vault pw. Also supports TOTP 2 factor authentication.

Dropbox - It’s a folder, it syncs, and does this very well. Syncs my 1Password vault as well.

GrandPerspective - Visualise where your disk space is going. Every time I fire this up I find stuff I’ve forgotten about that takes up a lot of space, or something that is using disk space it shouldn’t. (Once a WiFi log hadn’t rolled over and was using 8GB of space.) - http://grandperspectiv.sourceforge.net/

Synology - It took some investment, but now I finally have a place where all my data is, safer than on one or two external drives. But that’s not all, Synology also is a fantastic home/office server with an “app store” where I can run applications, run a VPN endpoint, run Docker containers, ...

Crashplan - Not the fantastic lightweight native Mac & Linux tool I’d want, but rather a somewhat heavy Java tool. But the business model for me is great. Free replication between endpoints, ie. all my family and my NAS and unlimited replication to their datacenters for my own devices for $5/month (Crashplan Family) - http://www.crashplan.com

Plex - For me it’s always been super reliable. Server runs flawlessly on my Synology. - http://www.plex.tv

Pinboard.in - Proudly non-free, stable and boring. The author’s presentations and twitter feeds are insightful and hilarious, I’m glad to support his work.

Superduper - I use it less often than before, since I now have a proper NAS and backup solution (see above), but Superduper has helped me so much in the past it deserves a mention. Always provides a safety net when I do a migration between hdd and sdd, between systems, ... I even bought two licenses as I lost my previous one, spending another $28 on it was a no brainer. http://www.shirt-pocket.com/SuperDuper/SuperDuperDescription...

Coda - Still my html/css/php/… editor of choice. - http://www.panic.com/coda/

Waze on my phone: best navigation I’ve ever used

youtube-dl

wget & curl - they have slightly other use cases, and I love them both. I use both of them at least weekly, mostly daily

VMware Fusion & vSphere/ESXi: still rock solid after all those years. (Disclaimer: I work there)

Other software I particularly love: Sketch (mentioned elsewhere in the thread) and Affinity Designer. I like Illustrator, but as a non-professional it’s way too expensive for me.
With that approach you would also need to be mindful of pass-the-hash vulnerabilities.
Samsung Smart Glow tech leaks
Felon here. I haven't had trouble finding work.

I have highly desirable skills though so I recognize it's much harder for others.
That's how elevators work in the company I am at. You don't have an up or down button. Just a keypad with all the floors (and some additional buttons for people with disabilities).

The way it works:

- when you select a floor number, a LCD screen tells you which elevator of the pool you'll be using

- in the elevator, no buttons except alarm, keep doors open, close doors

- in the elevator, there's a display that tells you on which floors the elevator will stop (because you can't have the whole "floor button is lit up")

The good things about this system:

- you don't get to be in an elevator which is going to stop on all floors because the system is intelligent enough to allocate elevators appropriately

- better use of the resources (eg you don't have everyone getting in the first available elevator, going up and then a second one comes and is empty)

- no more pranking anyone by pushing all the buttons (because you can only do that while waiting for one and the system will dispatch the demanded floors to the pool)

The bad:

- you can't change your mind once you called it. If you selected a floor, even if you don't get in the elevator, it'll stop there

- you can't change your mind once you're in. Best case is you can stop at an intermediate floor if someone is going there or called the elevator.

- it's frustrating when the system allocates an elevator for you and it comes after one that isn't going anywhere.
For JavaScript in particular.

1) TDD. Since JS offers so few static guarantees, unit testing your components and utilities as you build is important; arguably more so even than in other languages. Besides test-as-you-go, this includes building things to be testable in the first place. "How would I test this?" should be an up-front question that heavily informs the approach you end up taking. Even if you write no tests, this approach will improve your code.

2) Linting. This goes beyond just enforcing code style preferences. It turns out there are lots of potential bugs you can prevent from a simple static analysis—despite JS's lack of static guarantees—and catching them early will avoid errors and make you more productive.
I'm not a particularly big fan of Hilary, but as far as I'm aware, this used to be pretty common among members of congress and senators, so you might have to broaden your criteria a bit.
Kickstarter for Dwarf Fortress graphics initially, then Patreon again with an expanded community due to the Kickstarter. Seems like that would work reasonably well, without changing the basic game.
How Much Does Network Monitoring Software Cost?
> I have the possibility to quit my job, but I'd rather find another solution.

Jason Selk has written about a similar situation in his book, Executive Toughness. Essentially, if the CEO can control her emotions, she can control her performance-- and by extension, the effectiveness of the team.

It might be enough to pass along a copy of the book with an encouraging note > http://www.goodreads.com/book/show/13054842-executive-toughn...

Ultimately, you may have little influence on the dysfunctional relationship dynamics between the CEO & The Board.
You'll still move your product if it's cheaper to produce it in once place and ship it. Why build 7 small factories that are semi automated when you can build one large semi automated factory and ship everything for rock bottom prices thanks to the externality-blind price of oil.
It doesn't have to be analogous to piracy, for example: if I use your phone to discuss a bank robbery with my partners in crime, even without your knowledge, you could be charged with conspiracy.

Depending on local laws of course.
How in the world is duplication not something they check for?
“You've got mail” – Meet the man behind the voice of the early Internet
Yes, let's make non tech savvy people liable for keeping track of zero day exploits. While it might make some people more aware, I think in large part it would just push people off of the internet.
This. Just familiarizing yourself with developers of popular/widely-used codebases helps immensely. Make sure to stray outside of your peer group for this, too.
Yea, totally ate my share too. For me, I also had an interesting lesson where I returned to a company like 10 years after having been there prior. I picked up some code to fix a defect and was frustrated by it, only to realize I was the "moron" that wrote it prior.
CREW: A weeding manual for modern libraries (2012) [pdf]
If by "you" you mean me, this has become rather personal.

I didn't claim to be "leftist". I'm not "glorifying" anything. I'm not sure what you think I'm "refuting".

If by "refute phenomenon (sic) that have been taking place for thousands of years" you mean "racism" I'm not refuting the fact that it exists, what a strange claim that would be. I don't really follow what you're saying here at all.

I certainly didn't claim that Brexit voting patterns describe (do you mean explain?) the rise of pan-European nationalism. So again I don't follow what you're saying here.

In fact, I believe quite the reverse direction of influence: that the rise in pan-European nationalism influenced a vocal minority of the vote who now feel legitamised.

I suspect that the rise in pan-European nationalism is due to people being worried about recession, austerity, crumbling national institutions, etc etc. and immigration has become a surrogate for that: There's only so much cash in the coffers; there aren't enough {houses,schools,hospitals,whatever}; immigrants consume a non-zero fraction of these resources; therefore reducing the number of immigrants will improve the capacity of these services.

The problem being, of course, that you could pick any scapegoat and substitute it into that equation equally well. Consequently, when people do pick immigration as their scapegoat of choice, I consider that xenophobic.
Facebook's political influence under a microscope
About 162 million people.
Don't be afraid to throw away code. I just decommissioned a home grown middleware routing system today. I cut my Java teeth on it 5 years ago and it was time to go. Replaced it with an apache camel program that is so much better. I did the happy dance when we turned my code off for good.
In the end we're all human. You can try to ignore it, but just scanning the text is probably enough to raise the blood pressure of most people, even if you immediately block the offender. You still read it and it was still stressful.
Traffic is normal, the issue is thinking of yourself as a Ferrari. You are a normal car in LA traffic, just like everyone else. Everyone has to move slower because of the organization, everyone gets blocked sometimes. If you actually can't do anything for a week then talk to your boss, but with the attitude of "this is a fact of life and I'm looking for something else to work on in the meantime", not "these assholes are holding me back".
Yes, but why do it on the server and not on the client?
AutoBlind: blinds that program themselves
Changing the interpreter's behavior is equivalent to creating a new language. The problem with Ruby (and especially rails) programs is that every program is written in a different language, and what that language is is largely defined by external imports.

I have no idea how people have the mental capacity to deal with this.
Altassian JIRA (cloud or self-hosted) is free for Open Source projects. You can add as many required fields as you want and make creating issues as complicated as necessary :)
Why is it that we didn't improve HTTP Digest Auth but let everyone implement their own mechanism, where the number of those using a challenge response protocol is not worth a mention? Do we have to wait until 2018 before https://tools.ietf.org/id/draft-yusef-httpauth-srp-scheme-00... can be a thing? Not saying SRP is the best option, but compared to what's implemented on websites right now, it is much better.

EDIT: I probably am missing details, but surely some secure challenge response protocol must be available for broad implementation in browsers without concern for patents, right?
No (useful) code lives in a vacuum. What you write WILL need to be maintained if it is of any value to someone other than yourself.

Write code so that others can read, understand and maintain.

Don't be a code 'Magician'. Few people other than yourself will appreciate your 'Magic'.

Its ok to be a 'Code Ninja' (whatever that means). In fact I think its demanded that you call yourself that so that you can bypass the recruiting/HR firewalls. Also make sure you note down that you have 10 more years of experience than the age of the technology itself. After all thats what the job posting said is the minimum experience needed.