skysight-inc/HackerNews huggingface dataset:
A former employer of mine supposedly mulled drug testing, but abandoned the idea when they realized they would no longer have a creative department.

On a more serious note, it seems to be that drug testing is only required where physical safety is compromised by drugs, like drivers, warehouse workers, etc. Similar to how people who have direct responsibility of money may have to undergo credit checks. Properly managed, these seems like acceptable precautions to me.

I've never been asked to take one, nor would I submit to one for a software development job, despite being drug-free.

I am having trouble coming up with a legitimate need that an employer would have for a facebook account password, short of someone who has a high level security clearance where phone taps and surveillance are also to be expected.
Interesting strategy by Atlassian. First they bought bitbucket, then SourceTree, now HipChat.

Also I hope HipChat will now finally get that native OS X client they've been promising for ages.
It's also called securities fraud.
Information overload can be a huge opponent sometimes. I had a hard time fighting it, so much that I still consider it a true addiction (and still avoid falling on the same trap again).

When I started using firefox for the first time (whoa, tabs!), I started opening dozens of tabs at the same time, thinking I would read them all, one after another. But I could not, and their contents were interesting enough to prevent me from closing them. This habit followed for a long time, I installed a session saver, then I started using a feed reader. I had dozens of subscriptions and, if I didn't check my feeds for a whole day, soon there would be a hundred of them in my inbox — and I had to check them, or else I could lose information.

The stress came from the fear of losing information. It didn't matter if it were tabs, saved sessions or feeds, the idea of not reading any of those interesting articles was something hard to accept. I had to learn how to let this river of information flow without wanting to consume everything. No more feeds, no more than 9 tabs opened, no more saving sessions. This works for me now (most of the time).
Oh dear, what happened there?
IPad 3 may include haptic display technology to provide on-screen textures
The call to get Congress to reform ECPA
Love the site design, has some serious impact. Any tools/software used when doing that design or was it just notepad?

By the way, your heatmap download contains a .png that takes up 99% of the size. I'd suggest taking it out.
Here's one I've played around with.

http://colorfilter.wickline.org/

I'm not really clear on how it or color blindness in general works. So I don't know if finding the filter which makes the image unchanged for me (color-blind) is a good way of representing how the world looks to "normal" visioned people.
Tried to follow, but guess that handle should be @fortaweso_me, correct?
The corporation is its own, independent legal entity. Because it's fictitious, it cannot make decisions, which means (as a matter of law) it's incompetent to stand trial.

I don't follow the logic here. If it's fictitious and incompetent to stand trial, then why it can be brought to trial at all?
Great stuff! I found myself missing a bit of background, though, which you can find here: http://byuu.org/articles/emulation/decap
I'd hope that we all know about mlock() by now http://linux.die.net/man/2/mlock
This looks to be a serious issue.

The video link that was provided in the explanation does a very good job of illustrating the problem.

http://www.youtube.com/watch?v=LgNLHskYvVE

My heart jumped when he ran strings on the temp file system and the contents of his scrollback from the SSH session were shown.

I guess I had always assumed that stuff wasn't going to be written to any local disk in any way.
Yes they can be ( http://www.murderousmaths.co.uk/games/primcal.htm, http://primes.utm.edu/notes/faq/six.html ) but the unfortunate thing is that while the ((p^2)-1 % 24 == 0) test is a necessary requirement for primality testing, it is not sufficient. Lots of non-primes like 25, 49, 155 etc. also have 0 remainders.
New Apple TV has the same price tag of $99
The High Lands: Exploring drug tourism across Southeast Asia
...at which point the $1500 dollar version doesn't sound like a bad deal...
I bought a Nexus One, it can no longer run the latest software. The software it has is buggy. I will never buy a Samsung, but maybe when the next Nexus comes out, hopefully by Motorola.
[iOS][Concept] Canned SMS Response
I believe Any senior engineer worth his salt should be able to do lint style verification of someone else's code quickly. When I am expecting someone to be a senior enough engineer, they should be able to look at someone's code during Code reviews and find the issues in it that can lead to problems without resorting to IDE/debugging.

I do agree that nano-questions are not useful except in situations where you get a resume with keyword bonanza: You know the kind, ones with every language,OS in the first page listed so that they will pass through the corporate recruiter filter. For those, nano-questions trip up but that will give me an indication to dig a little deeper into their IDE usage pattern. If they show some proficiency in it, (for e.g., tell me the command in Eclipse to find all the references to a particular method, if the answer is search in files, .. :)).
I'm kind of on the fence on this.

These questions might seem pretty lame, but as an interviewer it does tell you something about the candidate's level of experience with a language.

If you've worked with a language for any decent amount of time. There are things that you really should know without having to look it up all the time.

This is especially true if you mention on your resume that you're an expert at something. I'm definitely going to ask you a difficult question about it and I'll expect you to answer in some depth.

If you mention you're a Java pro but can't tell me what the 'synchronized' keyword does for example. I'd be concerned.
Actual second part of the title: subpixel anti-aliasing and some webkits on some platforms depending on the underlying text renderer.
This is totally legit. 100% free - for the 3.x releases. Can't recommend this enough....especially as I just dropped £300 on an iOS licence a month back :E
Your "fugly syntax extension" is your old friend the closure. The syntax is as good as its going to get in an Algol derivative. I'll take it over plain java any day of the week. If Kotlin takes off on Android then we'll have a real contest.
I love this game...
Apple snuck Senseg’s groundbreaking haptic display technology into iPad 3?
Difference Between URL and URI
> The Nexus line of phones have the latest software directly from Google, and no carrier bloat

With the caveat that only some Nexus Ses have received ICS.
Urology EHR | Urology EMR
The Urology-specific EHR system includes clinically defined templates for common urological complaints, a history of present illness and a review of systems.
I'm not near a computer I can test this on, does it allow you to remotely debug javascript? Does it allow you to do so in multiple browsers (For example on Android you have Android Browser, Chrome, Firefox, and Opera as different rendering engines)?
That's incredible. Going through the art for the first movie, I imagine in my head a movie that is much more "fantasy" (the genre) than what came out. Like something a little more Labyrinth and a little less Princess Bride (not that Star Wars is anything like those two movies, just trying to articulate)
There are some references in the Google+ app for Android to an unpublished app named "com.google.android.apps.oneup" that seems to be related to gaming.

I'm really interested to see where Google is heading with their gaming strategy.
But people, including reporters, conduct such audits all the time. I'm not sure I see the connection between private security and an increased outcry; people who don't like the current level of security wouldn't be necessarily be more vocal if it was a business instead of a government agency. In fact, I'd bet a lot of people who get extremely exercised about privacy are generally not the biggest fans of the government (understandably).
Nice concept, unfortunately you get some strange results if you apply it to the new page (where I think it would have a much better use): http://i.imgur.com/afSPm.jpg

Is there a reason it seems to highlight at random?
Same here but not as much. I do all my work that way in FreeBSD but with another FreeBSD box sitting next to it running X for any graphical stuff I need to look at.
>The difference between Windows and Android is that even if Microsoft finished XP in 2000, they waited until all the manufacturers put it on new hardware to release it. Google doesn't do that. They release it as soon as it's ready, and then manufacturers have to put it on hardware. It's just a matter of perception of who has it "faster".

Is the XP timeline an idle speculation on your part(as seems to happen with your posts about MS) or do you have references to back that up? You couldn't be wronger.

Microsoft regularly shares builds with OEMs so that they can start optimizing their hardware and even publishes beta versions to the public so even small developers can start making their software compatible.

What do we get with Android? For something that's supposed to be open source, the source gets thrown over a wall at release. One OEM does get a head start at the expense of others though.

Microsoft just released Windows 8 developer and consumer previews, did Google do that with ICS?

>It's kind of like Microsoft not wanting to make IE9 work on XP anymore, because it's a much different version than Vista and 7.

IE8 came up almost 10 years after XP. Not to mention that Vista and Windows 7 were on atleast 40% of mahines then and selling on almost 100% of machines. With ICS the numbers are 1%.
Khan Academy Inspires Flip of Doctor-Patient Relationship Model
Hah, kids these days.
Xorg is a DREAM compared to it's predecessors X11 and friends.
I appreciate you're liking it, the only tool I used for it was vim. Thanks for the hint, makes sense to remove that from the archive
It depends who you ask, a lot of developers out there are not polyglots and mostly (especially in the enterprise world) are good old 9-5'ers who have no interest in programming outside of work time. I've encountered many people like this.

Nothing wrong with that obviously, but asking a question like "what is your favourite language" is never going to yield fair results across the board
The site won't let me post comments and there is ZERO information to support any arguments. Sounds like more right-wing propaganda to me.
If you are trying to hire an "expert" and ask him questions like that, you are doing it really wrong, unless you are trying to scare him away. If anything you want to actually talk to him about what he has done, about the languages, his thoughts and passion in the subject... not ask him first programming classes in college questions.

However if you are trying to hire some kind of junior-like engineer who has never had a job before, i can see why questions like this could be asked, but i still dont think it's the best way to gather knowledge about the person you are interviewings level of expertise.
MySQL branch maintained and used at Google
We appear to be in complete agreement with each other.
Wow. That's a pretty darn good idea. I'll be in touch.
No domain seizure works in the face of caching. Eventually your cache will time out, and then it hits.
The article isn't about graphs-as-in-charts, but graphs as in the mathematical concept. In this case, expressing dependencies between different pieces of operational infrastructure, such that changes to one piece of infrastructure trigger automatic changes to other pieces.

Unfortunately, the author is pretty vague about exactly what pieces of infrastructure they imagine defining relationships between, and what triggers they might use. On the smaller side, they mention 'I changed a config, I must restart nginx' (micro level dependency between nginx and its config) and 'something changed in my app tier, need to tell my load balancer' (macro-level dependency between a service and its front-end). What kind of dependencies would be useful to define between services in a service oriented architecture, which are usually designed so as to minimize dependencies?
At least you can still get AIR for OSX. Trying running the HipChat client on Linux... it's pretty painful, and getting more painful as time goes on (and we get further and further from Adobe's last release of AIR for Linux). It's even more painful to get it running on a 64 bit Linux distribution...
I really would like to say my congratulations to them. They are a pretty decent project management tool, we use them at ollaa and recently I have written a blog post about HipChat. http://ahmetalpbalkan.com/blog/why-we-love-and-hate-hipchat/ Atlassian is making really smart decisions.
Anatomy of a perfect startup video pitch
IBM calls it the "Anti-Spoofing Password Dialog Box": https://www.redbooks.ibm.com/redbooks/pdfs/sg245341.pdf (PDF - page 63).
I really like the idea. It's a nice way to go to what "probably" are the most interesting topics when you don't have much time.

I think that being able to click directly on the heatmap instead of having to close it first, and therefore not losing your visual aid, will be a big improvement.

Anyway, nice job.

P.S. I also have a problem with the height of the rows, tested both with Chrome and Firefox on W7.
Ok, scratch "anybody able to sniff their traffic" (assuming both sides use the native gateway.) This still leaves the IRC server itself as a potential vulnerability.
I imagine they will not open source their Linux drivers. While I wish they would, I am not certain that would make business sense for them.
All primes > 3 are of the form (6n + 1) or (6n - 1) where n is a natural number.
Therefore the square of a prime will be of the form (36n^2 + 12n + 1) or (36n^2 - 12n + 1).
The "interesting" properties pretty much follow from that.
Electronic Arts bringing back ‘SimCity’ franchise after 10-year absence
The future of computers: 3D chip stacking
there is a reason but it's rather incompleteness than an actual bug. the current version of the script only visualizes the posts of the front page.
> (I'm not an Atlassian fan)

Clearly...

Care to provide any more detail? A well reasoned post might have spared you some downvotes.
It seems it pulls data from the HN homepage no matter what, so it's not analysing the contents of your current page. It then decides on the heat locations based on that data.

Script is here (hope that's OK to link to!):

http://www.patrick-wied.at/projects/hohn/hn-heatmap.js
I almost exclusively use

perl -pi -e COMMAND

instead of sed for stream processing. I also use grep --perl-regexp in most cases. I need to remember Emacs and perl regex semantics; I'd rather not have more variants to remember.
America's Future: A Conversation with Bill Gates & Thomas Friedman (video)
The primary issue, not the primary use of birth control. Though I suspect you would be surprised by a breakdown.

"However, the "other conditions" case IS covered, and this wasn't about that."

Depending on the organisation, it often times it is not. That is why the issue has been in the news so much recently.
> The glut of expensive surgeons in the L.A. area indicates cost is not a major factor.

Unless you're also going to argue that the large number of expensive cars in LA "indicates that cost is not a major factor" for cars. (The same can be said for handbags.)

Never confuse what rich folk will pay for luxuries with real world prices.
Nice to see Adobe adapting to the slow passing of Flash with interesting tools for the new generation of mobile developers and their problems (device/os fragmentation).
Can't they just ask people to turn to the side?
Apple iPad 3/HD Laucnh Event Streaming Live For Free
I recently bought an iOS Basic licence and got an e-mail from Unity stating that I get 25% off my next purchase just because I missed this sale.

Great customer support!
This article was more about DAG than shiny 'how are our servers' graphs. Sounds a lot like you just posted to a story acting like you read it so you could advertise, than that you are contributing to this topic :-\
> use env vars to identify which environment an app is running in

Be aware about issues between mod_wsgi and that approach - http://code.google.com/p/modwsgi/wiki/ApplicationIssues#Appl...
EVE is ridiculous - I remember reading about a guy who spent months setting up an in game bank, and then stole all the funds and made about $100,000 of real money.
Don’t Forget About These On Site SEO Factors
Potential SEO Client Do Not’s
Doesn't even provide extra information or analysis of the answer.
I wonder what kind of maintainability benefits do the separate packages bring in this case? To me, having a lot of empty __init__.py files and subdirs reduces readability, so I like to maximize simplicity.
Show HN: Virtual mobile handshakes to keep the Olympic germs away.
I think these could be weeder questions for people you know little about.

If you have an applicant who has a github full of great code or experience working for a good software company you can probably skip this.

However if you get a candidate without much on paper but who insists they are a Java expert but doesn't know what the extends keyword does then there is something wrong somewhere.

The problem with asking for definitions for words though is that I personally often forget exactly what these are if I ever learned the correct term in the first place.

For example I knew how to override methods and the differences between the type system in PHP and the one in Java long before I knew what polymorphism or "dynamic typing" meant.
Native apps are definitely in our future. :)
Ask HN: Best practices for storing API key's in a database
I'm building a publicly facing HTTP API. To authenticate against it, users have an email address and a randomly generated API key.

An API key is essentially a password, and common practice tells me it should be one way hashed with bcrypt just like the actual passwords in my API are. However, many other websites display the API key to user when they sign in to their account (Github, for example, does this). This means the API key is not one-way hashed.

So, what are the best practices for storing an API key? In plaintext? Encrypted with a real encryption protocol? If my API is ever broken into and the database downloaded, they essentially have access to everyone's account because the API keys are plaintext or decryptable.

Any thoughts on how to do this securely?
I can tell you what will happen next - instead of shutting down the whole nude-scanner program, more money will be fed into developing enhanced version of nude-scanner with built-in metal detector. All old scanner will be scraped, more billions will be pushed toward TSA to buy more nude-scanner upgrades.
This is where I like Darcs. Your hack is actually the default there, because it is "obvious" that a patch representing a new blog entry doesn't depend on anything.

There, reverting any such patch would simply delete your entry without any more question (unless of course you committed another patch on top of it to, say, correct spelling). I assume this is the kind of advantage you get from your hack?
"Am I the only person ..."

The answer to this is always no.
I agree. mailto: links firing Thunderbird for people who don't use it is so not cool.

Actually, I think the mailto: protocol has a lot of potential but has been mostly neglected by browsers. Only recently did Chrome announce the support for using gmail as an alternative for opening mailto: links.

Anyway, I decided to do something about it and cooked up a small snippet [1] that opens up a modal window every time a user clicks on a mailto link and lets him send a mail via MailerJS [2]. Just paste the snippet in your web page and skadooosh, all mailto: links get so much more awesome!

Might also write a Firefox extension that enables using gmail for mailto: links when I get some time.

[1]: https://github.com/creatorrr/Snippets/blob/master/mailtofix....

[2]: http://mailerjs.com/
It's actually ($4500 * number of developer seats) if you still want android + ios. Unless the entire company revenue comes from your unity3d project, this may certainly be a dealbreaker. Definitely makes it impossible to use on what would otherwise be a one-week project.
Having an opinionated, best practice default doesn't have to prevent customization. I have always thought Rails is better than Django in this sense. There's one clear default way to do things, and then you can customize if you need to.
personally i would draft a different email to each person and send it to them individually. i wouldn't just copy paste it either cause you never know if they are sitting beside each other when they get it!!

i think it would make a better impression if each of them receive a different thank you email.
Scala dispatch pusher client
Lots of assumptions. If you happen to be be self-employed selling something with a 3% margin and $100k gross revenues, then Unity+iOS+Android costs more money than you made all year. Gross revenue tells you nothing about profits.
> Basically: Any question that takes 5 seconds to answer with Google is not a good question.

Can't argue there. I haven't done a ton of interviewing in my career so far, but it is important to me to find out how the other person thinks. Being able to cite function names and package identifiers from rote is not important, at all.
Don't get me wrong. I ask all those other questions as well.

The problem is: people lie.

It's the old thing where if you want to hire a juggler, don't you want to see them juggle?
The strange world of youtube reply girls
>It was part of his CIA training to be able to do that.

In the '90s, long before 9/11, I was traveling with a girlfriend. She didn't want to remove her belt with a big metal buckle so she just went through the metal detector with it on. The machine buzzed and the agent sent her through again. A female agent looked sympathetic and told her to twist her belt buckle horizontally so it wouldn't set off the machine. That was my intro to security theater.

Moral of the story is that if you're a pretty white girl, you don't need CIA training to learn security secrets from lazy guards.
I think that the point of this comment is that that's mostly incorrect. There are support libraries which basically mean that any device can run at any API level. This is fact, it has been for a while. Suck it up.
Yes, it sounds like it. The difference being that most people expect the browser to cache data to disk and it even uses this wording in the preferences. Most people using the command line don't expect the data in the scrollback to be written to disk.
KONY 2012; The Real Reason Why Obama Sent Troops to Africa
OIN Announces Broad Expansion of  Linux System Definition
Getting up to go to the bathroom between typing in the password and hitting Enter?
Blame it on the alcohol: My accidental week-long bender in New Delhi
Xorg is fine today, it's pretty much automatic. I'm talking about 6 or 7 years ago when you had to dive into xorg.conf to get 75% of graphics cards to work.
Obeso muore per infarto. Schiaccia e uccide il figlio - NEWEDENOTICE
Thanks, that was it. No, it's not about representing how the world looks to normal visioned people, it's about how we cannot differentiate between some colours, or all colours for the worst case.
as stated in a comment on the original blog, work on things like these are done using rules engines ( based off rete algorithm http://en.wikipedia.org/wiki/Rete_algorithm )

Here is a example of monitoring for a fire in a room, and how one handles it -- similar concepts can be applied to infrastructure components as well ) -- http://blog.athico.com/2009/03/drools-quick-start-stateful-k...