skysight-inc/HackerNews huggingface dataset:
Even in an American business context, "Libre" sounds stupid. Having it in the name hurts their popularity more than they know.
I have seen this story posted and discussed in several locations. It boggles my mind that everyone is talking about DNS filtering and/or browser security models, when it's painfully obvious that the actual problem is the fact that the targeted services (redis, memcached, elasticsearch, etc.) apparently do nothing whatsoever to authenticate incoming connections (at least in their default configuration).

Yes: remote DNS servers have no business serving up loopback addresses. Yes: browsers shouldn't let remote scripts access resources on the local network.

But WTF are you guys doing running services bound to network ports (even if only accessible from the local machine) that apparently have no authentication whatsoever? Have none of you ever used a multi-user machine?

When I was in university we had just three SunOS boxen shared amongst all undergrads in my faculty, and all three were directly accessible from the whole of the internet - there was no firewall of any kind. Even back in those rather more innocent days you learned real quick not to put up services which didn't authenticate every incoming connection.

A good firewall is not a substitute for having individual machines be secure.

A machine having only one (intended) user is not an excuse to run services that are not secure against local users.
It Googles it
Atlas Data Structure
Are you referring to the upgrade method described here [1]?

[1] https://www.openbsd.org/faq/faq4.html#bsd.rd
expandable memory
Looks like Qubes OS is the only ultimate solution.
SEEKING WORK - Warsaw, Poland - Remote OK - Travel possible.

We're a small software house with several completed SaaS projects behind our belts (see sugester.com, invoiceocean.com).

Some of our favorite technologies include Ruby on Rails, Elixir, Erlang, Phoenix Framework, React Native, Javascript, HTML5, Java and GitHub.

We are also fluent in various AWS offerings, including EC2 (Elastic Compute Cloud), RDS (Relational Database Service), S3 (Simple Storage Service), SQS (Simple Queue Service), SES (Simple Email Service), Route 53 (Amazon's DNS service) and Elastic Search.

More information available at radgost.com or szymon@radgost.com.
I agree with this, you need traffic to measure it, 3000 unique visits a month is right there at the cusp of what is needed to see results. It took an average of 1000 uniques per split to see meaningful results. Also unlike scientific journals a negative result IS a result. If your conversions didn't change, that means you change didn't affect your audience's decision to buy (not great but also could have been MUCH worse ;) ).
Also, we all need to be using polish notation https://en.wikipedia.org/wiki/Polish_notation
for better good
Introduction to Mean Shift Algorithm
Actually I meant something like how Intellij has DB integration, so you could put in your host & port and connect to the DB to help you write queries etc.
Yes, it's what happens when too many people read zerohedge because they think it makes them smart.
PAR: Hedge Fund ‘Crypto-Bridge’ Platform to Apply for BitLicense
Well, Chile's ban is different than US's ban. The US bans it because it's a potential public health risk[1], because someone may choke on the toy inside, while Chile bans it because they apparently banned all kinds of advertisements and products aimed at kids that have gifts that come with the product (I don't know the rationale; there is an article linked on Wikipedia but it's in Spanish and didn't translate well. My guess is that they want to reduce childhood nutrition issues by not letting manufacturers give presents with candy.).

As an aside, if you have never had a Kinder Surprise before, there is an image on the Wikipedia page, and the egg is decent sized -- I could probably fit it in my mouth whole, but it wouldn't be comfortable. The toy inside is also inside of a capsule that I would find really hard to believe could even be swallowed because it's at least as big as a US quarter but about 1 inch tall if my memory serves me correctly, but I guess 3 kids deaths in the UK prove me wrong.

1: "The embedded non-nutritive objects in these confectionery products may pose a public health risk as the consumer may unknowingly choke on the object.", see http://www.accessdata.fda.gov/cms_ia/importalert_107.html.
There are always the gimmicky scenes that are so clearly added in for the IMax and 3D "experience." My conclusion is that 3D must only be effective for chaotic and nonsensical chase sequences.
Now that LetsEncrypt exists there's no excuse for anyone to use StartCom. They've had a whiff of dodginess for ages, and their customer service is among the rudest I've known. This should be the final straw. Their root needs removing from browsers. Give their existing customers a year's warning.
> You never control a domain

Then don't use DNS if you can't trust it? You have to trust at some point. Or create your own infrastructure and convince others to trust you, if you want more than a private network.

> Anyone who can feed you spoofed DNS responses

The tendency goes towards running your own local DNS resolver. It was not possible in the 90s, but since then both the network and computer got a lot faster and smarter.

DNSSEC has also evolved quite a bit and is the best we will get for long time. I really encourage to have a look again before dismissing it outright.

http://blog.easydns.org/2015/08/06/for-dnssec/
Does anyone think the drug companies control the gov, and not the other way around? According to the Forbes article 660 calls from 2010 to 2015 vs. 6,843 calls in the first seven months of this year for children eating laundry pods?

http://www.forbes.com/sites/davidkroll/2016/08/31/dea-argues...
? Libre is a french word in the first place. How is that hard to pronounce ?
Visa Asks Banks to Participate in Blockchain Pilot for Transfers
They used to be modular until companies started to follow Apple down the current path. I had a Dell Inspiron with removable battery, removable DVD drive, and PCMCIA slot for modular functionality.

Now we have come somewhat full circle with Apple's Macbook which has meagre hardware functionality and relies on USB-C to provide the missing functionality in a modular fashion. However it means a nest of cables so it's probably not what anyone wants when they want a modular laptop.
Hey Siri, send John $10
Probably worth finding a more reputable supplier. Mine come packaged inside a specially designed large EPS container that put enough distance between the magnets and the outer carton to not cause problems in shipping or storage.
Wikipedia is usually pretty good at giving an overview of the situation.

> In September 2010, the majority of outside OpenOffice.org developers left the project, due to concerns over Sun and then Oracle's management of the project

> […]

> In April 2011, Oracle stopped development of OpenOffice.org

— https://en.wikipedia.org/wiki/OpenOffice.org#History

But the OpenOffice brand was already built, so obviously a lot of people still think it is the most active project.

Presumably, Oracle did not know what to do with this asset they bought, but they thought they might be able to squeeze value out of it. They believed the only way to do so was to have total control over it, which removed all value from it (except for the brand). Then they put it in an Apache-shaped trash, along with the brand.
We used InfusionSoft and a inhouse email marketing tool when that one became too cumbersome. This can all be done now with ConvertKit and Intercom.io, but those tools were either in their infancy or not available at the time.
>That's a lot of work and as a developer I couldn't care less, since it's just a side project. Just ask people about your core message and if it doesn't resonate, change things.

I agree split testing is a lot of work, but you can use something like a bandit algorithm to automate the testing to reduce the amount of work needed.

>I'd instantly unsubsribe. Leave me the alone please with your followup mails. I can instantly tell if your personal touch email is sent 60 min later that it's a bot. Product hunt follow up mails on my submissions are bots. I find it lame.

you might, but I do not mind the emails as long as they have not hit the 1 per day threshold. I usually get annoyed at that point and look for the unsubscribe. Sending out a set of emails as he describes works very well in most cases.
Hi Jason, is this position open to remote overseas candidates?

Please let me know. Thx
Location: EU, Croatia

Remote: Yes

Willing to relocate: Maybe

Technologies: Ansible, AWS, Git, JS, Linux, Node, Nginx, PHP, Python, RabbitMQ, Ruby, SQL, PostgreSQL, MySQL, Vagrant, ...

Résumé/CV: please email

Email: gpedic [at] gmail.com

I'm considering relocating to Amsterdam and will be there for a week this month to experience the city (~ Sept. 2-9), I would be open to interviewing or just grabbing a cup of coffee while I'm there, just shoot me an email.

5+ years of experience, my last job was remote (full-time) at a NY based startup as a back-end dev, so having a remote possibility would be nice.
I know of one case where Red Hat countersued a patent troll over a GPL violation. It was a pretty good illustration of the "nuclear deterrent" effect that such litigation can have. I'm not aware of any cases where Red Hat has brought any original suits of this nature, but then again I probably wouldn't be even if they did exist.
260 calls in one year for kratom while 48k people call poison contol every year for overdoses of over the counter vitamins. i want to see the dea explian this decision to a judge. the aburdly low number of medical issues caused by the substance that they site is a great argument against scheduling it at all.
And I've taken some escalators which might as well be broken when they "become stairs", I wouldn't walk up and down the StPetersburg metro escalators (most of the stations are >50m below ground).
> Products that are useful long term are usually made to last, like tools.

Except they rarely are nowadays either. Lightbulbs would be a common example, but so would be cheap construction tools, kitchen tools, knives, etc. all designed to last for few uses and then break, so that people buy a replacement. The argument of "waste of money and resources" only holds for a single company, but not for the economy as a whole - it doesn't factor in the costs (and energy waste) of replacement and of dealing with the garbage, nor does it factor in the ecological damage created by unnecessary manufacturing.

It all boils down to the standard short-term, greedy optimization (in algorithmic sense) of the market economy, giving you perfectly legitimately sounding reasons to keep being stuck in a crappy local minimum.
I don't use it to get around anything, we have in-house iphone and ipad apps that Apple would never allow in the store because they are used to collect leads at our various physical properties. We are well within our terms of our Enterprise account.
If you're a startup wasting your time working on some way to detect multiple accounts for people who really hate on boarding emails AND have multiples accounts, you're doomed. Just put a checkbox on the sign up form somewhere allowing the user to opt out of the on board flow and be done with it (if you even care that much - in general you should have much higher priorities or you've run out of things to work on).
Your PACKERS AND MOVERS ARE COOL. JUST Not WITH EVERYTHING
I'm a grown man and I still often ask if I can sit by the window (if I can't make sure I'll be assigned a window seat for a reasonable price)!
5 Lessons from Building Nike (The Phil Knight Story)
> Not only that, it's also not really a secret that SpaceX attracts people who want to enter the space industry. You get experience there, you move on.

Which is exactly the kind of people that SpaceX does not want and who should not apply there. The turnover is high for a reason indeed.
The good news with Stripe is it handles all of the fraud and tax compliance. All you need to do is on the off chance your client does more than 200 transactions AND $20k in billing to send them a form 1099-k
Once it's rushed into Schedule I, good luck getting it.
I agree, DigiCert has been very easy to work with. That said, it's really time for them to drop the price on their standard certificates.
Dell’s $60B merger with EMC is all about challenging Amazon’s cloud computing
They didn't just talk about it. They called for partners to build the modules and had multiple partners already. If this was a lie from the start, it would've been easier to not go through the trouble.
Someone asked 2 days ago how customers could be careful about their CA being revoked:

https://news.ycombinator.com/item?id=12391308

> How? I've got no way to judge the security / responsibility of any CA. (...) You can't blame the CA customers for this.

To which I answered:

> One sign is that if Symantec has issued rogue certificates, and Google publishes the problem, then it's time to leave.

I'd say it's valid for StartSSL now as well...
I can't make any claims to contrary about other providers, but I know at the very least that at one point not in too distant past the primary systems used for Rackspace Cloud hypervisors were Dell R720 rackmount servers. Maybe not the most amazing hardware, but considering how common they are you can hardly refuse to say they're "server-grade". The newer OpenCompute stuff is also clearly well-made hardware.
:O.

So US doesn't have paid overtime on a regular salary work?
Nice little trick, but what use case does fwd cover than can't be done with Netcat?

E.g. http://www.devkb.org/linux/115-TCP-tunnel-port-forwarding-us...
I've tried him on it a few times (I maintain his machine for him). It's always been too buggy, by which I mean, obvious visible UI bugs immediately after installation. Unity may be horrible, but it has much more robust QA testing.

Entertainingly, when I let him play with a bunch of different Linux desktop environments, the one he liked best was actually Haiku, which I threw in as a joke.
That would be easy to pronounce in German, but from the spelling it would never occur to a German that this is the correct pronunciation.

Fun sidenote: Since "Lieber" is German for "Dear" (as in "Dear Office, I am writing this letter to you ...") it would be quite confusing. (Also it would sound grammatically wrong, since "Lieber" is masculine, but Office is not.)

Alternatively "lieber" also means "preferably", so with that interpretation you would sound like saying "preferably Office". Oops.
>But recurring income without telling any side of the business may even be illegal.

I am still very confused by your meaning. If you could expand it further, that would help me possibly better get my point across. I think there may be a miscommunication.
> I don't believe in things that seem unlikely and have no proofs.

Neither do I.

So I guess my parting comment is that we all need to do a better job of discussing opposing belief systems with mutual respect. There are good arguments on both sides - and I would suggest that if that statement sounds ridiculous, you've not been sincerely listening to the other side, or you've only heard straw man arguments. It's not black and white - and being closed minded is not something unique to one side or the other.

Let's try to hear both sides out - and develop an understanding of each other's beliefs and non-beliefs rather than dropping into an "us" vs "them" stance. Truth does not need to be defended with anger or violence. There's no need to convince or convert - we just need to be true to our search. Truth is often hard to find, but it's not fragile.

I've resisted providing specific evidence for my beliefs because I can reasonably expect for it to not be well received in this forum. But if anyone is interested in a good example of a balanced and civil debate of Christianity vs. Atheism, based on evidence and reason, this is a pretty good one -- https://youtu.be/fEw8VzzXcjE

I am not posting that in an attempt to convert or convince - I'm certain it will do neither. I'm posting it in attempt to encourage civil discussion, and exchange of ideas and beliefs. Notice in the debate the mutual respect the speakers give to each other.

Close-mindedness and hatred exists in every belief system. Let's try to encourage one another on our respective paths. Let's encourage one another to relentlessly seek truth.
I'm suspecting both 86 and 56% numbers as well, but 23% reply and 2% unsubscribe is likely correct, which is way better than I would expect.
This is a really good project in need of funding for the author. If you are in a position to help, please donate: https://www.patreon.com/bcachefs.
What connotation does "Libre" have in American English?
(I'm French, to my ears it sounds perfectly reasonnable, if a bit "legalese")
I really despise this trend. People who make such webpages completely disregard the existence of users with bad eyesight and those who still use low contrast TFT displays mostly because they can't afford to buy a fancy new IPS panel or just don't know any better. We all should complain about it, otherwise soon it might get to the point where you only will be able to read some webpages on the newest 40 inch OLED displays.
In US most likely.

At the Düsseldorf Apple store, they manage to give such an wonderful service three times in a row that a friend of mine doesn't care about any Apple product anymore.
> TLA+ can open your mind to the idea that you may not need types for things you think you do -- even in a programming language

I'm very much hoping this will be the case!

> > Indeed, even the fundamental TLA+ notion of "priming" variables seems that it would immediately be an impediment to composability.

> Why? It's a perfectly pure operator and it distributes. Op(x, y)' = Op(x', y')

Why? Because:

> assuming Op doesn't have any other variables in it, i.e., it's a "level 0" operator.

That's not an assumption I want to have to make! Since I don't understand this specific example perhaps my challenge here is unwarranted, but in general if I have to "assume" anything then that's an impediment to composability.

> In a functional language you say, I have a function parameter `p` that could be anything of the appropriate type `a -> bool`. In TLA+ you don't need this because you can say that p is not a parameter of a certain type, but a concrete, specific program that nondeterministically returns either TRUE or FALSE

OK, I think I see. You prove something using the specific, concrete p which has fewer properties than any other p, so therefore anything that holds for it must hold for the other p too. I don't quite see how this is different from proving it for "arbitrary p" but perhaps it will be come clear as I learn more.

> I mean by the simple isomorphism between predicates and sets

And this is why I get worried about TLA+ using "simple mathematics". This "simple isomorphism" simply doesn't exist, as I'm sure you know. You have to restrict yourself to saying "simple isomorphism between predicates on a set and subsets of that set", at which point I start to worry that any higher-order possibilities go out of the window.

> But a set of behaviors is a program! Therefore a program property, or a "type", in TLA is the same thing as a program.

Sure, but a possibly nondeterministic one that you can't actually implement (at least not directly).

Anyway, thanks for the introduction. When I get some time I will look into it further.
Huh? Maybe if you're trying to push 4K through it, but it's plenty good enough up to 1920x1080.
They were calling for partners to build modules and announcing that they had multiple partners already. I think that's a valid enough reason to talk about it.

There are enough leaked press stories on secret projects they are working on but not announcing until they have gone the distance.
China has anti-trust regulators?!
One thing I would add to the list: Don't use it for data that you need to change. There are (at least at present) no built-in functions to modify values within JSON(B) objects, which makes it very tedious modify data once it has been stored.

It is much better for data that is stored once and then queried.
If it is being scheduled, it must work! Why would the DEA spend time and money to legislate kratom unless a party with a vested interest, like a large pharmaceutical company, could profit from its controlled sale?

Can anyone point out evidence of harm from the use of kratom?
Location: Ufa, Russia

Remote: Yes

Willing to relocate: Yes (in future, but not in this year)

Technologies: C, C++, Linux, Linux Kernel, Yocto linux, git, TCP/IP, bash and python scripting

Résumé/CV: https://drive.google.com/open?id=0Bzfy9e3hXqLwWFJUUlJucmJPbE...

Email: ikoveshnik@gmail.com

I have experience in:

- linux userspace applications development (C, C++, Boost). Implementation of networking protocols.

- linux and u-boot bring up for new devices

- maintaining linux distro based on yocto project

- Git

- OpenDataPlane-based applications development

- contributing to Open Source projects
Maybe now I can get access to my account. I forgot my password and tried to jump through their hoops to reaccess my account. They involved calling the support department during business hours. It was the holiday season, so I just gave up.
Ok, I understand where you're coming from, but I still don't understand why you would reflexively always side with corporations/shareholders vs the government. Clearly the government needs to raise some tax revenue, in order to fund programs like the US Military and Medicare. And given that the government needs to raise some amount of tax revenue, they will need to put in place tax laws, and there will always be some corporations that try to skirt those tax laws in order to maximize their own profits. In cases where the corporation has genuinely broken the laws, even if it's an "honest mistake", they will need to make amends.

If we applied your principle of universally siding with corporations/individuals paying less taxes than they are supposed to, then no one would pay taxes at all and the government would cease to exist.

If you think that the current tax rates are too high, then start/join a political lobby that seeks to reform the tax system. But given that we do have a current set of tax laws, it doesn't make any sense to universally support those who have been found to violate those laws.
It was immediately obvious at the time, I remember it as such. The devs jumped ship to LibreOffice. All Oracle was left with was a brand and a moribund codebase, and for some reason Apache accepted it. Why didn't Oracle give it to LibreOffice? Because they were sore at being bypassed, it looked like. The correct thing for Apache to do would have been to say, nope mate, we don't want to be part of your childish feud, keep it, trash it, or give it to the people who are actually doing the work.
Though far more probably file as junk thank take the time to unsubscribe. Unsubscription process is notoriously annoying.
Location: Argentina (UTC-3)

Remote: Yes, strongly preferred

Willing to relocate: Perhaps

Technologies: Javascript, React, Angular, CSS, Sass, PostCSS, UI Design, Node, Rails, AWS

Résumé/CV: by email, uncompleted portfolio at http://martinbavio.com

Email: mbavio at gmail.com

Looking for projects that matter. Thanks!
> If developers went to SFC instead of the lawyers of LF, maybe Linus should ask why that happened in the first place.

I think the answer to that is another question: why would LF bother, when they can reap all of the benefits while SFC bears the cost and takes the flak? They get to play godfather in this situation, pretending their hands are clean. The analogy only falls down because godfathers don't typically rat out their own triggermen.