skysight-inc/HackerNews huggingface dataset:
To reply to your points:

> 1.1.2 Minimize Software to Minimize Vulnerability

The NSA have different priorities to you. If you want to install all software possible, like in a software shop, fair enough.

There's nothing wrong with yum, so ignoring that point.

> 2.1.1.1 Disk Partitioning

It's better to keep /boot separate so that when you upgrade, say, your ext3 root filesystem to ext4, your bootloader will keep on working if the upgrade were to b0rk.

> 2.1.1.2 Boot Loader Configuration

Say the machine is in a cage in a rack. There is a BIOS password to prevent you changing the boot order and other settings. In this case a password for the boot loader could make sense.

> 2.3.5 Protect Physical Console Access

The machine is in a cage in a rack. A locked cage.

> 2.5.4.1 How TCP Wrapper Protects Services

TCP wrappers can give application level warnings that iptables can't.

> 3.5.1 Disable OpenSSH Server if Possible

If possible. You could admin using a kvm if you wanted, but yeah disabling OpenSSH is kinda silly, restricting to a management subnet is better.
Does he mean a country with a working economy? Or a country that steals less money in taxes? So hard to tell these days.
There always is.
I don't see how this makes sense. As demonstrated the drivers have a lot of controls that are traditionally pre-set BY the engineers. The engineer is moving into the car, if anything.
There are over 250 million programmers in this internet connected world. Its not the idea its the fast execution that is unique. He or she copied the idea..so effing what? Make it unique by your execution!
Recruiting Product Managers - Personal Traits and Attitudes
Yup, the Delta32 version of CCR5 is pretty nice. Its more of a "strongly resistant" than an "immune" though, and may mean being more susceptible to West Nile Virus. In the modern world thats a pretty good deal, but was probably less so when humans were doing most of their evolving.

See wikipedia:
http://en.wikipedia.org/wiki/CCR5_delta_32#CCR5-.CE.9432

There's another gene with a variant that confers similar resistance to noroviruses, also called stomach flu.
Based on there IPO prospectus from sec.gov:

Year; Revenue; Costs; Income
2008; 78,773; 84,282; (4,522)
2009; 120,127; 123,482; (3,973)
2010; 243,099; 223,523; 15,385

expense growth is 46%, 82% yoy.
revenue growth is 52%, 103% yoy.

So, you have a company that is growing revenue faster than expenses, has 100% year over year revenue growth, and has just hit the inflection point to be profitable... and you want to place a market average P/E on it?
Part of the NSA's mandate is protecting US interests and communications as well. My personal favourite example of this is the changes they recommended to DES while it was being established that strengthened DES against differential attacks, a class of attacks that was not publicly known of until years later http://en.wikipedia.org/wiki/National_Security_Agency#Data_E...
I offer latest, up-to-date, stable, 3rd party packages.

With SMS or System Center you have to create the packages yourself and/or have a system in place to fetch the latest packages.
In grad school I worked on IceCube which is a neutrino telescope at the South Pole. The
detector is an array of photomultiplier tubes embedded in the ice underneath the Pole. At the time I was mostly working on electronic devices for calibration and measuring ash layers in the ice.

When we got accepted to YC I thought I was going to finish my PhD and work on the startup at the same time (ha!) so I kept working on the experiment. I went down to Pole for a month before YC to deploy the devices I was working on. While I was there I also worked on Octopart around the clock. Sam was actually in Argentina at the time so we would both log into our server in Berkeley to ychat when the satellite link was up. Somehow the timing worked out really well and I flew back from the Pole just in time for the first YC dinner.
I am surprised that there are not more F1 fans here on HN. It is the best sport to follow if you are a techie or geek - there is so much advanced technology involved in the cars and racing that make what happens off the track and in development just as exciting as the actual races.

These guys are on the cutting edge in a number of fields: materials science, aerodynamics, computer aided design (there is a car this year that was designed and tested all in software with no wind-tunnel), energy recovery systems, fuel performance, tyre compounds, telemetry, computing power and machine learning with strategy, etc. etc. etc.
but what does it do? racket is a scheme, so should already work with sicp. what does this add?
Ok. I hoped it would be as easy as showing the investor a "good" product :)
The Evolution of Fund Terms
Things Every American Should Know About The Collapse Of The Economy
...Frightening to hear that v4 is a big step forward. Step forward into what - the late 80s?
Can we get a manuscript? I'm from Europe, and I find this painful to listen to.
Could probably do it now, but no one would watch.
The problem with this is your one idea could be your "wave" to success. Not to say there wont be any other great ideas but if you can create it first, regardless of competition its something for your resume that people respect. This wave could help fund an even better idea. I know HN is built on sharing ideas and I think thats great but unfortunately HN is not the world we live in. The world we live in is filled with thiefs and liars. Im in the same boat and I keep my startup right now pretty tight. I tell lots of people but only people I trust. Hope this helps
I was going to type a fairly lengthy comment, but I think I'll just do a one sentence sum-up (and hope I don't get downvoted for it!): This is yet another strong piece of evidence that we're in a bubble.
Million Dollar Question:

How could you additionally parse the information to extract structured data? For example; names of candidates, addresses, previous employers, job titles held.
http://www.onionsportsnetwork.com/video/nascar-coach-reveals...
The least they could do is buy each user a nice steak.
Can't wait to see them try this with Emacs and Vi users.
Refactoring ActiveRecord Models [Video and Slides]
that is true if you want to directly purchase shares, but there were market makers and other outlets offering CFD's and derivatives at just above the list price.

judging by the volume (9M traded so far, which is more than what was listed) there seems to be a lot of that going on
Tempurpedic all the way. We've had one for 8 years, and it's the only mattress my wife, who has a chronic back condition, sleeps well on.

Your choice of pillow is important as well, and Tempurpedic's pillow is also top notch. Also, a lot cheaper than the mattress, if you want to start there.
Four motivations that affect almost any game player
Four quadrants of player motivation. You can use this to think about what motivates people to play games, engage in social networks, or interact within many types of businesses.
The thing about CoffeeScript is that, even though it's a lot more readable than JavaScript, the mapping between the two languages is close enough that reading compiled CoffeeScript as easy as reading well-written JavaScript and it's pretty easy to see the CoffeeScript that generated it most of the time.

(This is still admittedly very suboptimal. It's just not as horrifying as you might be thinking.)
Robotex creating gun-toting robots to replace human soldiers
i am partial to ALMS currently. less restrictions, more creativity for car design and strategy, widely varying cars on the track at the same time (traffic creates passing opportunities/blocking), and the planning and strategy involved in winning (or just finishing) 12- and 24-hour endurance races.
Little Robot With Big Guns Could Replace Human Soldiers
Not always. There are some companies that don't have enough liquidity to effectively make that trade or have no investors willing to lend the shares. Not to mention shorting (or options) aren't even allowed yet on this particular stock.
This is just a list of all the _public_ google profiles, to make them easier to index.
In a related story facebook gained 35,513,445 new users today as a result of a massive email campaign.
Except that they don't. NASCAR has had road courses for as long as I can remember.
All Games Are About Death
Infographic is pretty but misleading propaganda that promotes its left column. It does indicate "advertisers" win at the bottom, but fails to mention stalkers, totalitarian governments, corporate power in general, and Zuckerberg and his investors in particular benefit from the total internet surveillance tracking which Zuckerberg cynically calls "integrity".

Having a corporation track all your visits, readings and posts on the internet such as Facebook is trying to establish, and to be able to accurately link it to your identity, is about power control and money, and not to your benefit. It is such an unpleasant possibility that expert PR firms plant absurd infographics and stories every day to promote this agenda and pay armies to downvote or otherwise disenfranchise all who question the plan. The propaganda is working as we see here in this discussion all the people now have bought in and are promoting corporate surveillance and control of lives as if it is a good thing in any way whatsoever.
OK. How this prevents from man-in-the-middle attack on public keys sent over untrusted network? Can you point me to the description of the protocol aimed against man-in-the-middle attack during long term public keys' distribution?
Let's say we have a server with a public key S and a client with a public key C. How can they prevent man-in-the-middle attack when exchanging their public keys over untrusted network?

I couldn't find any relevant details regarding this question on the official DNSCurve site http://dnscurve.org/ .
PHPUnit Best Practices (Writing, Organizing, Running and More) Presentation
They could have done better for OpenSSH securing: they forgot forcing key-based authentication only and changing default port number.
"Allowing file-sharing sites would make the U.S. like Somalia"
Based on the title I expected some html5 magic for converting binary files into html in the browser.
Imagine a Facebook IPO that reached $100 per user...
Two quotes:

"Let's start by defining 'investing.' The definition is simple but often forgotten: Investing is laying out money now to get more money back in the future — more money in real terms, after taking inflation into account." [1]

-Warren Buffett

"Over the long term, it's hard for a stock to earn a much better return than the business which underlies it earns. If the business earns 6% on capital over 40 years and you hold it for that 40 years, you're not going to make much different than a 6% return — even if you originally buy it at a huge discount. Conversely, if a business earns 18% on capital over 20 or 30 years, even if you pay an expensive looking price, you'll end up with a fine result." [2]

-Charlie Munger

- - -

[1] http://money.cnn.com/magazines/fortune/fortune_archive/1999/...

[2] http://ycombinator.com/munger.html
Google social search? No thanks...
If you are part of a big enough group, and your ballot is not traceable to you, your vote is essentially anonymous even when the authority can determine for sure that you voted.

I agree that voting may be flawed in cases. Electronic voting is particularly vulnerable.
Is that bad? It seems like one or two dedupes more than cover the cost of redundant metadata.

One great example is a document sent as an email attachement to employees. that crap takes up tons of spool space.

Just one win like that more than makes up for triple storage of metadata.
That's been done across online job boards since 1996 when we launched hotjobs. Resumes, although varying aesthetically contain a pretty ridged structure that presents itself well to localized extraction. This allows easy term extraction for searching across a very large data set quickly.

A simple 30 line flex/yacc combo will work effectively at a high ninety percentile
Not only their fans. For some reason almost nobody can look at Apple and their products objectively. It's love/hate.

My best guess is that people who care about little details like 2 volume levels for headphones & speakers, pausing your iPod when you unplug the headphones, etc. really love Apple (that's the case with me), so when we go off about how great they are someone else who sat down at a Mac with a default config couldn't right click, maximize a window, etc. and hated it, it makes him hate it even more because to him it's blind Apple love. Nobody could possibly love such a hamstrung system in the hater's eyes, and in the lover's eyes Apple can do no wrong. So the rift widens because of the strong opposing feelings. Talking often makes it worse.
Amazon’s Kindle Ebook Sales Surpass Print
Good god, really?

1. Seek Novelty

2. Challenge Yourself

3. Think Creatively

4. Do Things The Hard Way

5. Network

How on earth did Scientific American allow an article that resembles a content-farm link-bait piece on its site? (Other than the obvious reasons for traffic.)

I have seen those five rules on articles like, "How to Become a Better Writer," and "How to Stick to a Workout Program."
It's not unique to Apple. Nike, Porsche, Mercedes, BMW, Yankees, and many others do the same thing. It's known as cult branding. There's a good book on it called" The Power of Cult Branding" by Mathew Ragas.
LinkedIn Shares Soar After Flotation
Related: http://paulgraham.com/identity.html
This isn't a news. Google profiles can be indexed by search engines since 2008. See the google robots.txt file:

http://www.google.com/robots.txt
This is pretty interesting, but can someone please tell me the advantage of using CSS instead of Javascript? Is it to reduce code cruft in each page, or because some people turn Javascript off?
I remember reading about a teenager who was persecuted (I don't say "prosecuted," because I think he settled for a fraction of his profits) for buying stocks and making bullish comments about them on the Internet. He fully disclosed that he bought the stock and liked it.

Now I read this bearish comment and the author discloses he intends to buy puts. Given that the stock market is run on sentiment, is there a clear line drawn between legal and illegal manipulation? Or does it come down to whether you are in the club or out of the club?
Given there is no way to know what your hardware manufacturer puts behind the SATA interface of your SSD, ZFS will need to just not assume identical blocks are stored independently.

• a random salt is not required in the metadata, a sequential serial number would do, and is easier (you only need know that last, not all previous numbers).

• with the right checksum algorithm you can remove the previous serial and update to the next serial with only minor computation on the checksum.

• you do not need to copy the metadata in ram if you can tolerate doing the writes sequentially. (This is will be a speed loss since the drive can't get all of them at once and schedule them optimally. It might be a big loss if the drive is also receiving a lot of other write requests at the same time.)
There are some differences between Racket and the Scheme in SICP, for instance SICP Scheme is a little bit more "vanilla", and uses set-car!, set-cdr! instead of the set-mcar!, set-mcdr! and other mutable pairs stuff in Racket (disclaimer: I don't know Racket, I just fumble with it occasionally while reading Scheme books that use other dialects).

The best thing it adds though is full support for the picture language.

http://mitpress.mit.edu/sicp/full-text/book/book-Z-H-15.html...

You can do things like

> (right-split rogers 4)

And get the resulting image right there in the DrRacket REPL.
The problem is that the OS isn't aware of it, so it can't take advantage of the space savings; and moreover _because_ the OS isn't aware of it, the OS might make poor assumptions about data integrity.

If there was a way for the OS to a) disable dedup when integrity is desired and b) exploit the space saved by using dedup, then it would be a good idea.
I wonder how this might impact the overall security? Right now URL bar provides useful information about the domain where you are at. Hiding the URL box could bring back the most brain-dead attacks like hosting a phishing site on a regular HTTP (no cert = no warnings from the browser) and hidden URL cloacks the fact that the URL in fact is "bankofameri.ca".
fwiw, that's another package it just provides (according to what i read on the linked page): http://planet.plt-scheme.org/display.ss?package=sicp.plt&...
SMS API - Why a direct to carrier model matters
Its essentially an interpreter built into the browser.

Browers hands the JS to the engine. Engine parses it, checks for syntax errors, checks for semantic errors, optimizes, generates machine code (assembly), runs it!

Of course this is only a high level overview, gets more interesting the deeper you go. There is a video on Chrome/v8 posted on Youtube by Google - check it out. I'll try to find the link once I'm on a computer.
Here's a video about the all-CFD car and their simulator (from last year): http://www.jamesallenonf1.com/2010/09/video-behind-the-scene...
Why? What does that have to do with anything? So lets assume I enter into linked in the fact that I have a 100 professional people who won't spit on my name, my employment history and some recommendation blurbs. How much is that worth to a hiring manager screening employees? Out of 20 candidates for a job its not worth much, but if they want to extend an offer its worth something. Also assume job switching every 2 years. So every couple of years some sucker would be willing to pay for that information. The thing I find funny is that the upgraded accounts that linked in flogs are violating your privacy for extra money. Can I check a "Not linked in's bitch" check mark?
Only anecdotal, but of all my friends and acquaintances that have worked abroad, either for a limited time, or permanently, none of them regretted it, even those that went to weirder places like Armenia or Mocambique.

Of course there is an opportunity cost, and if you have family and kids it might be too high, but if I was in that situation, I'd try to take my family with me. I have other friends and acquaintances that lived elsewhere for a few years as a kid, and all of them only had positive stories to tell of it.

The cornerstone of intellectualism is the ability to imagine the world from different perspectives, to realize that not everyone is the same, and nothing teaches you that like traveling or moving to a different country, and it will make you a better person.
> The NSA have different priorities to you.

I'm pretty sure the NSA still has to maintain their vast networks of computers. You don't need to be in a software shop to eventually require a new dependency. Networks of servers are hardly ever static. At some point you will need to deploy/upgrade/patch an application, troubleshoot an error or a network glitch, or support some added functionality. It is far less problematic to have the software available than deal with the potential fallout of problems of maintaining such a network and its access to installing software remotely.

Also, clearly you have never read the source to yum or dealt with its myriad bugs and functional inconsistencies. Let me just tell you that indeed, yum is horrible, and I urge you to avoid it whenever possible.

> It's better to keep /boot separate so that when you upgrade, say, your ext3 root filesystem to ext4, your bootloader will keep on working if the upgrade were to b0rk.

What are you going to do with a system with only a /boot partition? Install busybox? If you want a new filesystem you should be kickstarting via PXE and reinstalling the whole thing, not upgrading in place.

> Say the machine is in a cage in a rack. There is a BIOS password to prevent you changing the boot order and other settings. In this case a password for the boot loader could make sense.

If you've got physical access to the machine in the cage you can do anything you want, which includes bypassing BIOS and Bootloader passwords in about 5 minutes.

> The machine is in a cage in a rack. A locked cage.

You've never noticed that the cages are easy to scale? If i'm going to attack the datacenter i'm going to have a fake badge and pick up the key at the front desk anyway. Trust me, most datacenters are not really that hard to get into. NSA datacenters on the other hand...

> TCP wrappers can give application level warnings that iptables can't.

No, iptables can give you the exact same warning tcpwrappers will, which is access control based on host or IP. There are lots of ways to replicate it with iptables. The more important thing to note is that it's fucking retarded to rely on host or IP level access control of a network service. It's somewhat useful in preventing mass brute-force network attempts, but you should also have iptables rules in place to stop that.

> If possible. You could admin using a kvm if you wanted, but yeah disabling OpenSSH is kinda silly, restricting to a management subnet is better.

A kvm won't transfer files for you and it's usually pretty hard to script 1,000 KVMs to run automated commands in 10 minutes.
I read the original 4,500 words, and I don't think it adds anything beyond the tl;dr. Most opinion pieces are terrible at being concise.
I'm still amazed at how fast these companies can add a new distribution model that surpasses the one they built their businesses on.

Amazon:

Kindle release: November 19, 2007

Date surpassed: ~May 2011

---

Netflix:

Streaming started: Fall/Winter 2008?

Date surpassed: ~November 2010
Tika is very good at converting documents to plain text. Very reliable too. The problem for us was that, most resumes have a lot of formatting in them. For example candidates use tables to structure data. When such a resume is converted to plain text using tika, it looks jumbled.

Will take a look at pandoc. Thanks for suggesting.
A more secure society wouldn't have secret agencies operating in peacetime. Why? Because their mandates, budgets, policies are also secret and subject to mission creep.
Top 40+ Sites for Web Designers | Joanna Ciolek
rbranson said: "but it doesn't seem as if it's really practically possible (in C at least) to make mmap() I/O work in a cooperative concurrency model."

In that context, it ought to make sense.

Further, there's a set of technologies that are good, but range from difficult to effectively impossible to use in C, and the list is growing, not shrinking. We can't afford to bind ourselves to what will work in C forever. For instance: Garbage collection, possible but hard and certainly a bit inelegant, you're fighting C. Software transactional memory: Don't even think about doing it in C. But it may still be a useful thing in some places. And so on, for a mix of things. C is what C is, but "it doesn't practically work in C" can't be allowed to be a fatal objection if we want to progress.

Sure, you can type anything you want in C. But you won't. And I know it. Don't even try to argue that you will, it's obvious that you won't. Given the current state of the programming language environment, it is an impossibly small window to sail through to claim that Java, Erlang, Haskell, Javascript, C#, C++, SQL, etc, all have no advantages over C because we can always do the same thing in C (and I deliberately picked a wide range), yet C has some sort of advantage over assembler that makes it worth using. I reject that C is a Platonic default language that all others must justify their existence against; it's merely one that got some popular OSes written in it for certain good reasons, but that doesn't gold-plate it against criticism. This argument hasn't been sensible for about 30 years now, and now it's just gibberish; we know better. Cost factors matter a lot.
There's going to be a lot more angels running around town the next few years with money to invest.

Things are going to get very, very interesting.

Next up, Zynga, Twitter, Facebook, Yelp, Pandora...