skysight-inc/HackerNews huggingface dataset:
With regards to IP listing - you could make all of your remote guys logging in through openVPN - you can issue each one of them a certifficate and assign static IP to that certifficate and then do whitelisting basing on those static IP addresses. That adds additional layer of security so your powerfull app is not exposed to wider audience (even with whitelisting enabled, these days IP can easily change its owner). Also app is exposed only for duration of OpenVPN link being active - so when your support guy is on holiday and his certifficate to OpenVPN is kept on encrypted container he would not even initiate OpenVPN connection.

I do OpenVPN since beginning of the project and it's fafirly light when it comes to maintenance. Granted - people using it will get a bit of OpenVPN basics, also it may be challanging to have it working from Windows/OSX/Linux (I have users working from all three) - but doable and certainly it's worth time spent on deployment.

All of my team is working remotely (in different country) and there are a few risks here. First of all - all work-related materials should be kept on encrypted container with fairly strong password - in such case if their laptop was stolen this would not result in your intellectual property leak. OpenVPN adds another layer of security when it comes to access your internal resources (i.e. you can easily revoke certain certifficates once your employee is no longer with you and by doing that you would cut all online resources with one move).

I have not been pushing through strict telecommute policies. All I was asking in our agreements was that all company-related data is kept on separate encrypted container (including any keys used to authenticate to our services) with fairly strong password and that no work-related information can be released in any form without my written permission.
> Kubernetes, Mesos, etc. appear to be great orchestration tools for an organization with a few [or many] engineers dedicated to operations. Their not so great for a small team [or individuals] who are just trying to deploy some software.

In my opinion, the opposite is true about Kubernetes (though it may be true about the Mesos stack). It's a great way to reduce the need for dedicated ops engineers.

Once you have a Kubernetes cluster running, it's essentially a "platform as a service" for developers. They can deploy new pods and configure resources all with a single client. You generally no longer need to think about the servers themselves. You only need to think in terms of containers. No package management, no configuration management (in the Salt/Puppet/Ansible/Chef sense), no Unix shell access needed.

It's hugely liberating to treat your cluster as a bunch of containers on top of a virtualized scheduling substrate.

Kubernetes itself is very lightweight, and requires minimal administration. (If you're on GKE, K8s is managed for you.)

Swarm Engine is very much knocking off Kubernetes' features. Swarm offers the convenience of building some orchestration primitives into Docker itself, whereas Kubernetes is layered on top of Docker. Other than that, they're trying to solve the same thing. I'd say Kubernetes' design is superior, however.
How to Choose the Right Font (According to Science)
Hardening FreeBSD (2005)
"Without the Glorious State, you wouldn't have had any consumers to make you wealthy!"

Here's a business producing commerce-enabling technology in an extremely valuable manner, hence the profit. Consumers exchanged their earned, post-tax savings for those things and paid additional tax along the way. To act like governments were short-changed is preposterous. It's "you didn't build that" taken to the extreme, and borderline extortion.
String Theory is probably nonsense, so it's in good company.
PT100 thermistors are the usual reference standard once you move away from the triple point of water.

It's been a few months since I last thought hard about ours (which we use in a different configuration), but 100 mK ought to be straightforward with a Protovoltaics RTD shield and a three or four-wire PT100 or PT1000.

Protovoltaics has a well-documented API and is quite responsive to detailed engineering questions.

Alternatively, one can calibrate a sensor against a trusted standard. Once that's complete, they tend to be fairly stable. LM35s and AD590s will have low-enough noise/good-enough stability for your spec once calibrated.

Before you embark on such a journey, be certain you actually want 100 mK absolute. It's possible to go through life happily without absolute calibrations in most cases.
Interesting. I've never heard of businesses considering VAT in purchase decisions but I guess your explanation makes sense. Thanks for elaborating.
Why not just use Clojure?

You've got datomic on the server and datascript on the client, transit on the wire, reader conditionals to share code and much more. Plus everything can be modified as its running.

When it comes to web frameworks I don't really care about performance as much as I care about managing complexity. Which is why I'm looking at om.next over all the other frameworks.

And managing complexity is not something you can benchmark in toy projects - every single framework is virtually the same at such a small scale.
After hardly driving for a good portion of a decade, then regularly driving again, the highway seemed pretty weird. As in, how are these people spending so much mental energy? Then after a week or two staying exactly where I wanted to be in the lane, and basics like knowing where empty spots in traffic were around me in case I needed to move to avoid something became second nature again, not requiring much conscious effort.

Driving still seems like a waste of time, so self-driving cars make a lot of sense, but I agree that there really must be risk of people's skills during the routine practice of things eroding, such that they might be increasingly worthless or dangerous in emergency situations.
Washio on-demand laundry service shuts down operations
I agree. We replaced that rather sketchy title with something accurate and flat. If anyone has a better idea, we can change it again.

The phrase "Silicon Valley" is becoming less and less meaningful as it gets slapped on more and more things. Presumably that only happens because it generates clicks, so at this point it's probably just generic linkbait and we should take it off everything.
I don't mind the forks, as they are all happening out in the open.

What i do mind is how existing, well established distros are being hijacked by stary-eyed techies rather than spinning off their own proof of concept that others can adopt if they want to or not.

Especially when said hijacking happens not overtly but subversively by tightly integrating previously separate projects to create a TINA situation.
My point is that many cases what you believe in doesn't matter. If you're from a muslim country with muslim parents them you are a muslim in the eyes of far too many people no matter how atheist or buddist or whatever your actual personal belief system might be.
It's large in absolute numbers but nothing compared to the mobile market.
There have been zero shootings in the area where I live. More police patrols will not increase the number of shootings.

It makes sense for police to be where serious crime occurs.
Supposedly name constraints are not universally supported though.

See:

http://security.stackexchange.com/questions/31376/certificat...

http://blog.codekills.net/2012/04/08/adventures-in-x509-the-...
I see you're a fan of Ethereum!

Oh wait, actually even the people who wrote a system for unchangeable, code-backed legal documents don't believe in the letter of the law.
>> "I see providers offering free data for things like Spotify"

Any source for this? I've only ever seen providers offer free Spotify membership, not free data.

Edit: Thanks for the responses. I had no idea this was happening.
Off topic: I know there's a lot of HN love for CloudFlare, and I might eve get down voted just for asking ... but how do HN readers gain comfort in using them given that they are essentially a MitM (man-in-the-middle) and can do all kinds of unscrupulous things if they want?

Edit, typo
I very rarely see technology choice decisions based on performance. It probably should happen more often then it does. If anything most choices are based on popularity.

Benchmarks are not the best way to advertise languages but regardless Elm has do well on so many fronts to make it competitive otherwise it will die to the popular frameworks/languages (usually the lowest common denominator).

> Please, don't use this to decide which front-end framework to use. Nor switch from one you are using, "just because it's faster!". Save yourself and your co-workers the headache.

I would hope and fairly optimistic that people make decisions on a variety of compelling reasons (particularly tech people). Some of those reasons often can be performance. What you mean is don't make this the sole reason and even this "tip" isn't really helpful advice.
I think there's also momentum to add runc as an alternative runtime engine, which makes sense.

Also, Mesos have started shipping their own container runtime.

This feels like an inflection point in the history of containers.
Ask HN: Advice on failing company
I'm an early engineer at a company that is on it's way down. I'm still getting paid, haven't lost any benefits, perks, or salary, am comfortable, and likely would be one of the last to be let go due to seniority, knowledge, and contribution ability. The company is in an interesting position where the tech is solid, there's good market traction, but it's unlikely a cash infusion will happen or the company will continue to exist on it's own.

I feel like I've hit a wall at this company in my personal growth and trying to figure out what to do. At this point I've vested over 3/4 of my options, it's unlikely I'll be getting a raise/promotion, and wondering if it's worth sticking it out to the end or moving on? I would assume it's likely the company will be purchased by someone else in the industry and either the products will get folded in or the company will continue operating under the ownership of the new company. I know that if a purchase happens my cut from the options probably wouldn't be that much but is there the possibility for handcuffs that would be worth it based on my position on the engineering team or other reasons to stick it out? I would estimate the timing to be 4-6 months max.
That's not why we use React
https://news.ycombinator.com/item?id=12388601

https://news.ycombinator.com/item?id=12389296
Google discontinues the Chromebook Pixel 2 without replacing it
You can add code to fail validation if this specific intermediate certificate is in the trust chain, but there's no way to ban intermediate certificates with the X.509 trust model without removing the root from the CA store.

Firefox/Chrome already do some extra validation to ban SHA1 certs issued past a specific date, they'd just need to blacklist the fingerprint of the intermediate CA.
Is there a Chrome or Firefox plugin that can detect non-"Full (strict)" and alert me?
It pays to keep this in the context of the events in our recent history which some argue have lead to a certain stripe of ideological stagnation in America, not just in the way we perceive modernity but in also their debilitating influence on how we perceive actual technological progress itself.

Peter Thiel has been steadfastly vocal on this :

I think one of the … you know, the counter-cultural in the '60s
was the hippies. You know, we landed on the moon in July of 1969.
Woodstock started three weeks later, and with the benefit of
hindsight, that’s when progress ended, and the hippies took over
the country.

Today the counterculture is to believe in science and technology.
You know, our society, the dominant culture doesn’t like science.
It doesn’t like technology. You just look at the science-fiction
movies that come out of Hollywood — Terminator, Matrix, Avatar,
Elysium. I watched the Gravity movie the other day. It’s like you
would never want to go into outer space. You would just want to be
back on some muddy island. And so I think we’re in a world where
actually believing that a better future is possible that you can
have agency and work towards a better future, that is actually
radically counter-cultural.[1]

[1]

Peter Thiel and Glenn Beck discuss what the counterculture looks like.

http://www.glennbeck.com/2014/10/21/could-this-be-the-new-co...

(or if your political persuasion forbids you against patronizing Beck)

https://www.youtube.com/watch?v=IER50pX-FuM
Isn't that what case studies are?
Show HN: PGBackup.com, Postgres backup as a service
If so, that's insane. Why would EU citizens side with Apple against the EC if the only benefit is that Apple has to pay less taxes?

Against the FBI it worked because it actually had direct implications for their customers. But in this case there's no implications for their customers other than a vague threat that Apple will punish them (by punishing the EU market) if they have to pay more taxes -- that's not a rallying call, that's blackmail.
YESSSSS!
> At the centre of the Apple controversy are two of the company’s subsidiaries, Apple Operations Europe and Apple Sales International.

Find me those numbers, not those of the US parent company Apple, and you have an argument.
Show HN: CMS Airship – Secure-By-Default Online Publishing Platform
The problem is, there's not as many feeds around these days.
I can very much recommend that approach. Working in a very small team we're using docker solely for reproducible development environments with very small footprint. Our projects are usually smaller low range backoffice sites.

We're still hesitant to deploy docker in production though, but its on our list. For now we rebuild the production environment from the recipes in the Dockerfile and docker-compose.yml.

Before that we were using VMs with vagrant. I never really liked how ressource intensive and slow they where. And without VM I also don't see the need for Vagrant anymore if I can use docker directly.

So after 2 years of using docker I'm really very happy with our development setup.
The early 19th century is an interesting period technologically.

For context, 1814 was thirty two years after the first manned balloon flight. That's as long as from today to the release of the Macintosh. The steam engine had been around for about a century and commercial steamships were already in operation.
Maybe they could actually open the window and take a look at the real world? Or must we have Spy vs. Spy as our shared destiny?
In my actual work, optimizing in memory searches is not worthwhile

Funnily enough, I had to do this last week. We started from the question "why does it take 160ms to scan 60,000 objects in memory?" and reached the disappointing conclusion that, on this particular platform (iMX6/800MHz/DDR3) a cache miss costs you an astonishing 233ns. I got as far as double-checking all the RAM initialisation parameters before giving up.

There is now an index on the in-memory search.
Settings -> Advanced -> Certificates -> View Certificates -> Authorities
This is really amazing how fast they learn! It seems to make a lot more progress than, for example, that genetic car evolver that at generation 200 is still trying to decide whether to put the wheels on the bottom.
This looks awesome. I've got a ghetto full text search indexer I've written that uses OCR as a fallback if it can't extract text from a pdf but as you say many times the quality is so bad it's a lost cause. I wonder if I can leverage this to improve the indexing.
I'm not sure about that.

Elon is definitely highly intelligent but also exhibits the same 'tics' I see in other geeks and other members of our tribe. I see the same thing with Thiel.

They follow a very specific chain of reasoning, take them off the script and I expect they shall abruptly stop making sense unless you read the material around their ideas.

I think when you know a lot about anything it becomes difficult to communicate what precisely that is.

I mean Elon is miles better at it than most of us but I think he still also struggles to put himself across.

The other side of that is classic 'people' people can express themselves adroitly except there is not that much inside their heads worth explaining. People people tend to follow very lazy chains of reasoning, they hop, they skip, from premise to conclusion and then unto something barely related as if they were making sense, which of course they are not. If you don't follow some kind of thread it is not surprising that that emotions and intuitions would be your guiding lights, which for most people, they are. To me this is the critical distinction between geeks and non-geeks.

It is like an eternal Cassandra-like conundrum. You can know things correctly, or you can communicate them correctly, but not simultaneously (unless you employ some trick or fake it).
It is, but even the raft of features found in some GNU command line utilities are probably beyond the classic UNIX philosophy of small and simple tools.
Pretty much this.

- Write the networking code to retrieve data from servers. I'd start with GET requests to keep it simple. This part is not that bad and its actually pretty fun. Doing it in Python is very simple and straightforward.

- Write browser GUI because its a native application. This depends on what language you use for the task. If Python, you can get away with tkinter (flame suit on) for a very simple prototype. I believe tkinter is single threaded and that may turn out to be an issue (don't remember).

- Write a simple rendering engine to display the text. No need to do this inside of the GUI code because the output can be read through the console. You are pretty much reading the raw html and extracting the bits you want.

- Plug in the rendering engine into a GUI widget. Since this is a (assumed) read-only browser, you can get away with a simple textbox of sorts. Anything else will require a custom widget.

At this point you have a very minimal browser. Adding CSS, javascript, etc requires that you include a pipeline to route data through the proper channels before it reaches the GUI. This is where the bulk of the work goes. Bring beer. :)
Instrument an existing browser and synthetize a new layout engine with machine learning and superoptimisation.
I think people greatly mix up how advanced "objects" are, and how advanced people are. The true test is if you take away objects from a person, and then test their reason. Key word being reason, as the tests which are called iq tests do not test reason. What they do test, is how well a person is able to perform in a relatively small aspect, of a subset of American culture. Again what I just described are two separate things.
Ring Sigs are coming to bitcoin too.
Oh, right. That's definitely a problem. I thought you meant it as "social pressure prevents you from converting/leaving your religion".
http://queue.acm.org/detail.cfm?id=2841313
>It also helps that our customers don't sell software, as such they view of what technology stack is supposed to look like is quite different from what the typical Starbucks developer thinks about software.

Selling software to people who use software vs those who develop software is a vastly different experience. As are the questions and rigor they'll put a consultancy agency though. As well as what they expect out of a product.

>We see these fads come and go, wait for the dust to settle and use what is actually mature to be deployed in real production environment.

Yup nothing like Oracle SQL + Java App driven by Tomcat or Spring. Hell you can even get an Oracle Rep to appear in your sales pitch. The suits really like that.
That wouldn't have helped you in this case -- WoSign doesn't even show up in the OS X or Windows root keystores. Its certificates are (apparently) signed by StartCom.

I just blacklisted StartCom's root certs. IMO for signing off on WoSign they're just as guilty, if not worse, than WoSign itself. Since they're the ones with the root cert in the OS, the buck stops there.
3 dollars? It really annoys you and you can't be bothered to spend 3 dollars?
The actual cost of launching a Startup in Lagos
"Technology should work even when it fails" was the tenant that seemed the most relevant to that book. Usually when technology fails there’s a good chance the user will suffer in a way, such as feeling embarrassment or having to repeat a task again. Caring more about how technology fails gracefully would help figure out how to mitigate negative feelings the user might experience if such edge cases happen.
The weird case of the X-ray that came out blank
There is one benefit of choosing based on popularity - it becomes easier to hire for, and more likely to find engineers enthusiastic about the work. In addition, it increases the number of eyes on it, which can surface difficult bugs/edge cases to get addressed.
Artificial intelligence expedites breast cancer risk prediction
How to deploy OCaml on Heroku
It shouldn't be too much for a single person to take on if they're truly dedicated to the task. A small team is still probably more ideal, but the browser isn't overly complex, it simply has a lot of capability that it can pull off with its feature set. All of a browsers moving parts are designed to be quite generic, which allows quite complex interactions to arise out of a small handful of simpler components.

Things used to be a lot harder 5 years ago, but the renewed focus on standards means that many smaller browsers can focus on just that, and ignore a lot of the weird quirks found in major browsers safely. (The death of Internet Explorer is finally bringing about the necessary changes in websites that have clung to its quirks mode so blindly for so many years.)

I think starting with a manually written parser is a necessary first step if you're writing a web browser. It's tempting to want to pull in Webkit or V8 or Gecko or Chakra, but if you're writing a web browser, you need to understand what these tools are actually doing for you before you use them. Writing your own versions, even if that's time consuming, will teach you why these other frameworks have become so popular, and educate you about their shortcomings so you can hopefully code around those too. If you do it write, and your codebase is appropriately modular, it should be straightforward to modify the project down the road to use a different parser, or even an entirely different DOM tree implementation.
Well, I'm certainly not about to argue that it is other than easy to judge people, or that it does not often feel good to do so.
Unfortunately influencer marketing and ROI are rarely terms used together at present. That being said, it's a format that's a perfect fit for brand awareness as much as it is direct action, so there is value in looking at vanity metrics for reach - shame that path leads to people (potentially) gaming the system.
This is an industry I'm familiar with and I'd love to hear some debate on this. In my opinion the industry resembles celebrity endorsements and product placement much more than digital advertising.

Do celebrities need to disclose they are being compensated to mention a brand on the red carpet?

Do movies need to start including #ad in scenes that have paid product placements?

The idea of endorsements and product placement go back for decades, and this is no different. What distinguishes this from the examples above, and if "ad" needs to be disclosed with influencer posts, why does it not need to be disclosed with celebrity endorsements and product placement?

While there are certainly exceptions (cough Kardashians) a heavy majority of influencers won't post about brands or products they don't genuinely like and believe their audience would be interested in. They won't muddy their name with a bad brand. So why do they need to be paid to post? Because they aren't going to spend the time to create and share content for free.
Crawl, Walk, Run with Big Data
The Notes app executable is 2.4MB uncompressed and Notes handles a whole bunch of stuff this thing doesn't. Sublime is 12.5MB.