skysight-inc/HackerNews huggingface dataset:
The "Hacker News Books" title raised too much my expectations, I was expecting books which talked about entrepreneurship, technical topics and good practices, not "Selfish Reasons to Have More Kids"...
Though I often do it anyway, I actually find that the priming thing is troublesome for me, I often end up unlocking my phone by accident and spending much more time trying to fix that. Better to just put it up to the reader with your finger over the sensor, it automatically brings the payment screen up and then insta-authorises with the fingerprint. (the payment screen activates if it detects an NFC terminal)
It appears this was in Malaysia.
Technology Review's Innovators under 35
So naturally somebody has to link the Visions of the Future posters as well: http://www.jpl.nasa.gov/visions-of-the-future/

I have a sweet huge Grand Tour on my wall. Thanks NASA.
Just did, thx.
And make sure you understand it and it's implications. (aka, expiring options etc)
Never work without a written contract. Doesn't matter if it's tech or flipping burgers. Do not assume you will get paid without a contract, ever. Definitely don't assume a group of people will you a large chunk of their company if they don't legally have to.
Baidu Stops All Bitcoin-Related Advertising
and you're victim blaming. He already learned this lesson. He doesn't need it pointed out that it's his own fault.

By the tone you take with your statement, you're saying it's okay to exploit people this way. It's not. Period.
Rudy Van Gelder RIP
Hey, for what it's worth, I totally agree with you.

Yeah the guy was naive, but also, he's not asking for anything! All these people saying "suck it up and move on"... that's exactly what he did! They seem to be upset that he didn't just go out quietly.
And striving for excellence might produce something that lives on way beyond it's time.

Just to name an example, I would name the designs[0] of (or inspired by) Dieter Rams[1].

[0]: http://www.cultofmac.com/188753/the-braun-products-that-insp...
[1]: https://en.wikipedia.org/wiki/Dieter_Rams
I got the awesome Europa poster hanging in my room. Absolutely love these!
It sounds like he could reasonably dispute any company assets, at least up until the formation date. Ownership of the code would seem to be either shared or fully belong to the tech guy. How about he have a lawyer write up a formal claim against the company and then do nothing else until they raise money. Then sue.
I would say that for future hackers putting a calculator/tablet/whatever in one's hands and then trying to limit it's use just adds to the fun.
Affiliate links are fine. A newsletter signup modal that pops up when I've scrolled most the way down the page, and when dismissed scrolls me back to the top, is not. What even is that supposed to be about, to be building a page for Hacker News readers and that seems like a sensible thing to do?
The SuperMalloc paper has some really interesting ideas about how to manage metadata. When you do a free(), you need to know the size of the underlying allocation. You also probably need to get access to some metadata relating to that allocation. Ideally, you want to even be a bit robust against someone freeing something that isn't a pointer to the beginning of a heap object.

Jemalloc uses a radix tree to map from addresses to the headers of the 1-2MB "chunks" it uses as the top level of allocation. SuperMalloc allocates into 2MB chunks, but such that each chunk has objects of the same size. It then uses an array with one double word per 1MB chunk in the address space, which holds the size of the objects in each chunk. That also allows you to quickly find the metadata, which is stored at the beginning of each chunk.

The array can get big--512MB for an array covering a 48-bit address space with 2MB chunks, but it's space and the virtual memory system won't map that to real memory until each page is accessed.
And the ban reminds me of the recent case, where DO invalidated the credits of many people within of 2 weeks with a simple TOS change.

I had to pay 5€ to even be able to add the 100$ credit from the GitHub students pack to my account (for "verification purposes"), and then they – illegally – delete it just like that? (I never got to use any of it)

DO is one of the shadiest hosters I know.
You ever see the first few versions of Facebook and Twitter? http://makers.crew.co/wp-content/uploads/2016/03/OG-Twitter....

The point is, if you have a good idea, regardless of how complete it is, get it out there and see if it warrants going further.
> I need to chose a containerization tech

You are more likely to run into issues with containerization itself ( cgroup, namespaces ect) than abstractions on top of it.

Unless you are doing some sort of orchestration on top of containers, you can't go wrong with any of the container abstractions.
Angie's List agrees to pay $1.4M settlement
Good point, my statement is specific to the US.
Sounds like these founders were playing GrabAss ...
I think a lot of the small startups, if you start talking legal, signing things, creating contracts etc will get scared or annoyed that your taking control.

Maybe that's a sign not to join though.
I tried to copy the permalink, but I got this: http://ec2-52-205-143-146.compute-1.amazonaws.com/particalit...
> If you're learning a new technology and want to get it into production - won't you learn everything around it, even probably things like how to contribute to it, process around bugs, PRs and what not?

There's only so much you can learn -- so far out you can go. This guy built their platform and an app pretty much himself. Give him some credit. I can count on one-hand the number of web developers out there I know that know all of the surrounding technologies related to what they work on.

Talk to most "full stack" developers about Unix sockets and routing protocols and watch their eyes roll back into their heads.
Thankfully there isn't really JSON driven development as a methodology. Its just a bit of a crappy pattern (for many tasks) that far too many people use. Hopefully no one is advocating it as the way to develop software.
Sorry for the author. I think we've all been burnt like that to various degrees, and hopefully, we all learn the lesson: if it's not written down and signed, it doesn't exist.
None of those have floating point units.
> We should build a new container after each apt-get for security patches, right?

Yes. That's the idea. Here's when and why you re-deploy:

* A new, updated version of software/a package is out.
* You've made changes to your app. Even something as simple as a typo.
* Your container has been up too long (e.g. 24 hours).

Replacing existing containers multiple times a day in a production environment is the norm. "The only constant is change" and the more often things change the more often you'll be swapping out your containers for new ones.

The whole point of containers is that they can be brought up and down in an instant without impact (if you architect things correctly). So even a VM that runs "apt-get update ; apt-get -y upgrade" every night may not be as up-to-date or secure as the same software running inside a container.
The Illusion of Germany’s Jobs Miracle
This open source 25-core processor can be stringed into a 200,000-core computer
He says, "Hoarding zero-day vulnerabilities is a bad idea. It means that we're all less secure."

I take this to mean we are less secure than we would be if we could fix the issues (obviously).

I don't think this means the same thing as saying it "makes us less secure".
Not sure if it's an anomaly or a repeating issue, but I notice that in week 30, Exploring Expect is listed twice, at positions 11 and 12.
Yeah, I especially love the way dismissing it scrolled the page back to the top. That's new.
I couldn't find more advance examples than this Hello World one, did anyone find any?
Also, this is HIS side of the story. At that, it doesn't come off favorably.
I find myself using lsof for it's ability to show me what TCP sockets are in use more than what actual files are open.

lsof | grep TCP
SSF – Secure Socket Funneling
Wondershare DVD Slideshow Builder Deluxe Key 6.5.1 Crack Free
Bull. Just because you CAN exploit someone doesn't mean you have to. At least it backfired on them by losing their tech.
The popup asking me to subscribe is an annoying trend I'm seeing on a lot of sites. It's the first time I've been to the site, why on earth would I sign up for anything without even knowing if the site is any good or of any interest to me?
Aren't they literally "making us less secure" by keeping records of vulnerabilities on computer systems but not disclosing them?

This means they can't be fixed by the software company but as this data dump shows, shady characters might be able to discover these vulnerabilities by (illictly) accessing computer systems used by the NSA.

Edit: Yes the shady characters might be able to independently discover the vulnerabilities if they are not "NOBUS" but this is another avenue.
"Hey Siri" ... "Enable my emergency beacon"

Of course, phones and watches don't have that feature yet but an open (low-power) broadcast standard could help save lives.

Finding people who are lost in the woods would be much easier.

http://www.nbcnews.com/news/world/hiker-pavlina-pizova-survi...

http://www.wlox.com/story/32833377/woman-found-after-being-l...
Been there, done that :(

See also the 'reboot' (or is it the 'poweroff' ?) command, which is much more direct than the Linux equivalent...
I want you to think very seriously over this question of poison gas. I would not use it unless it could be shown either that (a) it was life or death for us, or (b) that it would shorten the war by a year.

It is absurd to consider morality on this topic when everybody used it in the last war without a word of complaint from the moralists or the Church. On the other hand, in the last war bombing of open cities was regarded as forbidden. Now everybody does it as a matter of course. It is simply a question of fashion changing as she does between long and short skirts for women.

- Churchill 1944
> The reality is that these systems would have been just as insecure had the NSA never scrutinized them

In theory, sure. In practice, this is false. When the NSA finds a vulnerability it can exploit there is information created. As Snowden and the recent hack confirm: data is prone to leaking. Once data leaks, the systems that NSA attacks are fundamentally and operationally less secure than they would be had the NSA not attacked them. This is the very reason it is important that zero-days are reported and fixed.
strung
strung?
The U.S should be subsidizing vegetables and fruits instead of animal agriculture.
> Those who are victim blaming and shaming the author by pointing out the lack of apparent contract or that he should have known better are really just justifying the abhorrent behavior of the founders who have totally exploited someone else for their own material gain.

That's a false dichotomy. It's entirely possible to condemn the exploiter while also pointing out where the exploitee made bad decisions.

Analogy: Advice like "Don't insult random strangers" does not justify or excuse physical violence by people who have been insulted.
I'm not saying it wasn't naive. Naivete is really only evaluated in hindsight. Before then it's either known or unknown risk and only the person in the situation is in a position to evaluate that. He may not have perceived he was being exploited, he may have been led up the garden path etc. etc. etc.

Not everyone is business savvy, not everyone knows to do due diligence, or even what due diligence is. That doesn't mean you should exploit them, nor that they deserve to get exploited any more than the girl out at night wearing her clubbing attire deserves to get raped.

The author won't make this mistake twice. But he equally could've come out far ahead here if the co-founders hadn't been total douchebags and had acted honorably towards him - but they didn't. Douchebags.
Can you kill it? Pruning Ubuntu Server startup processes
DuckDuckHack
bookmarklet
Fairly standard occurrence in the startup world tbh. Desperate startups wanting to get press attention will exaggerate or make up stories.

Media doesn't care, because they get a nice story to print.
A written agreement can help ensure that the dispute never even gets before a judge.
Even worse, both the popup, and the dismissal of it, enter the back stack. So to get back to HN I had to click 'back' twice [edit: thrice of course].

I think it's an honest mistake. The fact that you dismissed the popup seems to be stored in a cookie, so it bothers you only once ever (twice if you use the back button).

Sidenote: since I'm in the EU I think you need to need to ask me for permission, but let's not open that can of worms.
Don't worry, Grandchild-c. grandmother first had four kids THEN went into space. All is good.
I've seen cases on college campuses of obvious criminal activity, although usually minor, that is excused because they happen during a protest.
Neat! I've been putting off learning how to use those `-M` flags to automatically generate dependencies, but it looks like it's not that hard :)

What I also like to do is hide the actual compilation command with recipes like this, inspired by the Linux kernel

%.o : %.c
@echo " CC $<"
@$(CC) -o $@ -c $(CFLAGS) $<

I think it looks a lot tidier, it turns a ton of dense uninteresting command lines into a few dozen short lines.
I've reported multiple vulnerabilities to DigitalOcean before and they've fixed them rapidly, credited me for the effort, and gave me free time on their services.

The difference is I didn't exploit 20 thousand domains to make flashy headlines and prove a point about something that isn't even a serious bug.
Now in a month, do blog post on how much the affiliate links made for you, like patio11 user to do with bcc. I'm sure lots of folks would like to know.

In fact track the monthly revenue for a year and do monthly updates.
It would be thrilling if the current state of our space exploration was on a level suggested by these posters. Are we sending people to farm Martian soil or explore the Martian terrain anytime soon? Obviously not. So, honest question: what is the point of these posters?
Running a traditional relational DB inside a container is pretty stupid. It can take a while for those suckers to stop & start and they often don't work properly if placed behind a load balancer with random distribution of connections. Also, if a connection gets cut off in the middle of a transactions things can go very, very wrong.

On the other hand, if you architect your database usage in such a way as to ensure that cutoff transactions get detected and retried without relying on persistent connections it can be a good idea to use containers for hosting your database(s). Of course, your use case needs to fit this kind of model for it to work. If your use case requires mostly serial transactions and can't work with "eventual consistency" then containers are probably a no-go.
You can rank by upvotes and use karma as the tiebreaker.
He did not exploit it, he just provided proof. He did not make any money from the traffic and visitors just saw a white page.
I've seen similar scenarios play out for a few of my friends early in their careers. Those experiences made me wonder why there isn't a class in college (or even High School) where students are taught the basics of business deals. I think many people are given a false sense of security due to employment law which does give some fairly strong guarantees about things like being paid for work. In a B2B deal none of this exists -- there is no "payment police" and no default law giving you rights you might reasonably expect. Employment law covers most of the friends/family a young person comes into contact with leading to an implicit assumption that the same kind of rules apply to business. Someone, at some point in their education, should stand up and yell that it ain't so.

I was lucky to have several mentors who had started their own businesses and I also got to learn from my friends' mistakes.
Probably not what you're looking for, and only in a kind of similar vein, but the first thing that came to mind was the 1962 Mars Attacks trading cards. They provided a twisted version of what Mars might be like if it were inhabited by aliens who wanted to invade and feature soldiers fighting martians and (if I remember correctly) eventually people going to Mars to fight them.
That font size!

The characters are like half an inch high each on my iPad Pro. Auto-detecting mobile Safari and forcing a mobile view without any way to switch to something more reasonable perhaps wasn't the best design choice.

The posters are cool tho.
There are three sides to the "making us less secure" argument.

1. If they would work with companies to get the vulnerabilities fixed, we would be more secure. The lack of action in this area doesn't make us less secure. It merely delays increasing security. Not the same thing so this argument is not logically sound. (It's like the RIAA saying that downloaded albums is directly lost revenue while there's no guarantee that the pirate would buy instead of download.)

2. Having a large cache of exploits that they cannot successfully secure creates a target for bad actors. If this cache is compromised then we all are actually less secure.

3. Other efforts by the NSA such as compromising RNGs and security protocols do actually make us all less secure.
> EDIT: Wow, several downvotes already. Sorry for pointing out the negatives, but downvoting does not solve those problems.

It's the tone, not the content, that is earning the downvotes. I suspect if you left out the second paragraph (and the edit), you'd seem less prickly.
1) adopt a standard for specifying MIME type.

2) realize people are not using the standard correctly, disregard the specified type and auto-detect the type.

3) realize this creates a security problem, adopt a new standard that adds a stronger MIME type specification.

4) go to 2)
Which is what he has done.
It’s severely loaded in German, and how’d you teach students about "leader/follower" without translating that part?

There’s something like other languages, which you translate to for documentation or teaching purposes, which means the German material will either have only this one in english (which leads to everyone immediately realizing why), or just using Führer.

That’s not in any way solving the issue.

For every word, there is a context in which it is offensive. Just stop caring about that, instead of trying to do the impossible for no benefit.
It's not a false dichotomy at all.

When people's default position is "you should have known better and done better" towards the "exploitee" as you put it without any blame portioned to the exploiter, you're victim blaming, in the exact same way as the girl who got raped "had it coming to her because she should've known better than to walk around downtown dressed that way."
Apparently it "works."

Which is really disappointing.
https://en.wikipedia.org/wiki/JSON#YAML_sample
If they know of a vulnerability, not announcing it is simply hoping (or worse presuming) that others haven't found it. Not all vulns are found by people who make a nice blog post, claim their $2k, and move on - some will be keeping very quiet and actively exploiting for poltical or financial reasons.

Even with the most positive view, some small subset of those vulnerabilities will be known to others and some will be actively exploited. Hence making us less secure.
Bruce Schneier is well documented to equate failing to disclose vulnerabilities with making systems less secure, or as he put it in this interview, less safe:

https://www.technologyreview.com/s/519336/bruce-schneier-nsa...

To his credit, he was talking about weakening encryption standards, but then elaborated that simply looking for security vulnerabilities and not telling anyone what they found was also doing that. I find that latter position ridiculous. It would be like saying studying malaria and not reporting your findings makes people less healthy.
Tabby’s Star faded significantly over three years
Do all new Dell screens have that picture in picture mode for HDMI? damn i need to get new screens, thats awesome.
There are a couple of things here.
1) Right now everyone is afraid that Docker will emulate VMware, and crowd them out of the container space, much like VMware killed most of their competitors.
2) To this end, I have heard that Google and Redhat have massive marketing budgets, and that the marching orders have been over and over - don't say docker, say k8s.
3) The real battle is where the money is - large scale distributed systems. Companies want to freeze docker out, because Docker controls the lowest point of access - the container runtime itself.
4) hence google is trying to push "docker compatible" ideas that are just the OCI standard - nothing to do with Docker itself.

AWS doesn't want to support Swarm, because it gives people portability off of their cloud. Google doesn't want to support swarm, because K8s is a trojan for Google Cloud. No one else wants to support swarm because it competes with their products.

That said, what's happening right now, if we are not careful, will fragment the container ecosystem, and it make it impossible for single containers to target multiple runtimes.

Docker is the only one who can deliver a universal set of functionality that is leveraged by all. From a technology point of view, Docker is going in the right direction. We got burned with Redhat in Openshift 1 & 2 land, and that's left us with a point of view that the only thing we can depend on is a container runtime itself, and 12fa applications.

K8s does not really work that way. It's huge and it's heavy, and it expects every app to be written it's way.

The technical direction here for Docker is good. But the implementation and early release is ridiculous. I was impressed by the first RC release, and then terrified that they released a RC as production.
Personally, the most helpful link for me because that's what I inevitably check out first is the list ranked descending by "helpfulness" (votes) of the negative reviews. Usually they are more interesting to me than the positive ones including the top-voted ones.

For example, for one book in the list the review (with lots of ALL CAPS SENTENCES, but still interesting) in 5th place of the negative reviews by "truestara" seemed to be a good summary: https://www.amazon.com/Iodine-Crisis-What-About-Wreck/produc...
In Switzerland, the REGA (a rescue aircraft operator) does this for finding avalanche victims. A helicopter circles above the area, where the avalanche came to a stop. Amongst other techniques do they search for radio signals, such as those of special avalanche rescue devices and those of mobile phones.
Just use cmake or scons. In 2016, you should not hand write a single makefile !

A simple cmake/sconcs build file will be as simple as the one shown (or even simpler !) and it will definitively will be easier to integrate external dependencies if you have to.
I guess it's time for tptacek or some other high-karma user to write a book and start mentioning their book in the HN comments a lot. They would quickly rise to the top of your list and hopefully rake in some money ;)
If you dig these posters, you'll like these from Chop Shop: http://www.chopshopstore.com/collections/space-exploration-t...

They partnered with The Planetary Society a while ago to make retro-style posters for both historic and present day robotic spacecraft.
I see the answers below and I want to ask everyone. Is there any other lisp besides Clojure right now, that is actively developed but not early stage, and also not old? I want to use lisp and I don't care about the JVM. But whenever I search for lisps, I find some for C, Go, Rust that are too young, or Common Lisp which I read is too old and weird, and complicated. I really like Clojure and that's what I use for now, but a lisp without the JVM mighty be cool.
BeLinked: Dating app for LinkedIn Network
No, but they've always ripped off the site like that, either on purpose or not. It was worse when the company just came out.