skysight-inc/HackerNews huggingface dataset:
Heroku runs bundle install on deploy, so it's not safe until all your gems (and their dependencies in gemfile.lock) are cleared.
My most recent MOOC experience
All the Canadians in the world will not save them.

If they do manage to turn around, it will be one of the biggest turnarounds since maybe Apple or IBM.
This guy's biggest problem is that he doesn't know the standard library very well.

I admit it's ugly, but the code below removes whitespace using only standard C++ calls. There's also an isspace() function from the <locale> header that takes a specific locale, but I'm not sure it's important for whitespace.

std::wstring removeSpaces(std::wstring theStr) {
return std::wstring(theStr.begin(),
std::remove_if(theStr.begin(),
theStr.end(),
std::iswspace));
}

There's also codec conversion in the <locale> header [1]. It's also pretty ugly, but it's easier to understand than his home grown solution, and if nothing else, is already debugged. And to be honest, if you're using C++ you should be used to the code being verbose and ugly.

[1] http://en.cppreference.com/w/cpp/locale/codecvt
A tangent, but I always thought "YAML" was pronounced /'jæm.ḷ/, however the post's use of "an YAML" suggests it's actually pronounced /waɪ.eɪ.ɛm.ɛl/. Weird.
Heroku a great.
All of the other 'backup' storage providers seem to be going in this direction. It'll be a battle to the lowest cost system. Free usually attracts the most people.
That sounds an awful lot like Sun's CDDL.
Actually, I think "Placebo" has always meant "a thing used to make not taking a drug an indistinguishable experience to taking it" (which, it turns out upon reflection, requires it to inflict side effects). Inertness is just a popular misconception.

That said, I think capitalizing on that misconception is wrong and that it might be reasonable to take actions which prevent true but subtle statements like "drug had similar side-effects to a placebo" from misleading laymen.
it'd be cool to see what happens inside producing a hackathon
The question of dress code, I've found, follows industries a bit more than it does specific cities. As someone who's lived and worked in tech in both San Francisco and Philadelphia, I can tell you I've worked almost entirely at places with either a business casual or casual vibe.

This may not be the case for an enterprise marketing firm or a law office, certainly, but it seems to follow for tech companies and the startup realm.
i wrote a note about this: http://tinyurl.com/accwjd9

it's based on Steve Pavlina's advice: http://www.stevepavlina.com/blog/2006/04/how-to-get-up-right...

tim ferris on sleep: http://www.huffingtonpost.com/tim-ferriss/11-tricks-for-perf...
I think you are being oversensitive about a tiny difference of wording, maybe due to some prior history with the Python community?
I made a very similar website. Also offers uploading files and encrypting the data you share. It offers a little more flexibility on how you want to secure the content you're sharing.

https://www.alicetobob.com

You can check out the source code https://github.com/hellonoam/cryptopad though I should probably update the readme with more info.
Any pictures/videos of the UI in action?

Edit:

Thank you.

Seems the UI is a mix of all the current fads. Not a bad thing itself.
The amount of code the wizard generates is actually remarkably small - most of the interesting stuff is happening in the base classes. You could probably create a new wizard project and merge in what you need, depending upon the options needed of course.
tl;dr -

"At around 8pm, on January 26, reports appeared on Weibo and Twitter that users in China trying to access GitHub.com were getting warning messages about invalid SSL certificates. The evidence, listed further down in this post, indicates that this was caused by a man-in-the-middle attack."

"The attack happened on a Saturday night. It was very crude, in that the fake certificate was signed by an unknown authority and bound to be detected quickly. The attack stopped after about an hour."

"While the attack was short-lived, it is possible that passwords of many GitHub users were recorded. It’s also possible that the IP addresses of users accessing certain URLs, such as these lists of GFW [Great Firewall] contributors, were tracked."

"HTTPS effectively disables half of what the Great Firewall can do. We have argued for a long time that the reason that Gmail isn’t fully blocked is that it’s considered too important and that the backlash against closing down access would be too great. ... It now appears that GitHub has been added to this list. ... With every website that switches to HTTPS, the authorities’ options are limited to two: completely blocking it, or completely allowing it. The more they fear a public reaction to complete blocks, the fewer their options become. Man-in-the-middle attacks are likely to become increasingly tempting."

"No browser would prevent the authorities from using their ultimate tool though: certificates signed by the China Internet Network Information Center. CNNIC is controlled by the government through the Ministry of Industry and Information Technology. They are recognized by all major browsers as a trusted Certificate Authority. If they sign a fake certificate used in a man-in-the-middle attack, no browser will warn of any usual activity."
The moon illusion is probably the coolest thing ever.
I can't tell if this comment is satirical, and the picture doesn't help.
Lean Canvas
DirectX/XNA Phase Out Continues
To reveal the magician's secret: the lower tone indicates the row on the phone keypad, and the higher tone indicates the column. So on a keypad, the first four digits 1-5-7-0 consecutively goes down the keypad's rows and alternate between the first and second column, and you can see that same pattern in the picture.

IOW, each digit plays a two-note chord indicating the row and column on the keypad.

EDIT: http://en.wikipedia.org/wiki/Telephone_keypad
"I'm not afraid of the guy with 190 IQ, I'm afraid of the sicko who never gives up"
A bad programmer talks about bad programming
Melrose Massachusetts
Find apartments, homes, condos and townhouses in Melrose Massachusetts while even searching for school and crime rankings....
Typically the new tech companies very casual - the larger existing companies are more like you remember. The number of startups, involved people and events has grown considerably - even over the last 5 years - e.g. http://redsnakephilly.org is a great upcoming event - Python and RUby groups team up and it's one of the best local tech events of the year - there will be 200+ there.
I think you are conflating the grammar checking of a language with all the checks done in other compilation phases.

For example, in a context free language, if "A : B;" is a variable declaration, A is always a type and B is always a variable name. In the expression "C = C + 1", C would always be a variable name even if C has not been declared. In this case the error will be detected in the next compilation phase but not during grammar checking.

In the same ways all type checking are done after grammar checking.

For example :

int i = "iyi";

is a valid line for C++ grammar but invalid for the type checker.
Yay! LiveCode Rulz!
The 64GB Surface Pro Ships With Just 23GB of Usable Space
I have a sit stand desk, been tempted to go full treadmill with it. Standing gets a bit difficult to do for longer stretches.
If we're going to report anecdotes, two (aerospace) engineer friends of mine (one of whom professed this purported fact) at the same company got picked for a jury on the same drunk-driving case.
Agreed. We've looked into running our own mirrors for rubygems and it's there's nothing really supported out there. The addition of git gems in bundler means you'd really need a git mirror tool as well.
Tools like CSShat (http://www.csshat.com) which turn Photoshop layers into CSS is a step forward, in the future it will hopefully be able to do layouts and more.

Reading the comments I have to disagree with the statements that designers have to code.

I'm a designer and I make it my priority to understand the technology I work with, it's important to know what the creativity possibilities of new OS updates, APIs and languages etc, as well as the limitations.

I know what CSS and HTML5 can do, I can design in a way that makes the most out of the languages, creating the best possible experience. I read through a API doc and know what different actions can be performed and how to turn data points into great user flows.

But I can't code.

Well, I can code really badly, I can hack together things by cutting and pasting from tutorials or whatever, it's fine for things like http://www.dandandan.net but not for a client. My primary focus is to get better and better at design.

Knowing about code is a huge advantage, I can help development by suggesting frameworks or by locating answers on Stack Overflow that help a problem the dev might have. Or presenting examples of interactions on other sites or maybe a new open-source JS thing I've seen on HN that cuts dev time down.

If I was to hire a designer, I would rather hire a great developer and a great designer separately.

"The era of being a Photoshop designer only...is coming to an end. "

If you didn't notice there's a UX/UI boom right now, if you managed to catch the TV and Radio interviews by the Blackberry Managing Director on BBC today, he actually said 'user experience' several times.

UX/UI is now a competitive advantage and being heavily invested in, I don't see that changing
As far as I know, there isn't.

This particular question highlights a shortcoming of long-form changelogs though. It would be nice if there was a way to have community-voted highlighting of a changelog pointing out the significance of each line-item of a changelog.

http://sigma-star.com/blog/post/changelog-voting (Blog post inspired by this question)
The problem with that article is that the author assumes that the only purpose for javascript cryptography is so that no middle man can understand the content, not the server itself. Javascript cryptography in this context is a more difficult problem only because you must trust that the code that the authentic source delivers does itself not contain a backdoor to the information.
There are no native speakers yet... https://groups.google.com/forum/?fromgroups=#!topic/lojban/H...
Things like Arduino and 3D-printing are making it easier to prototype actual devices, and imho the effect of these is disruptive as it greatly increases the number of people who can develop ideas and it greatly increases the ability to iterate. Net-net is more innovation. So even if the rest is still hard (design for manufacturing and manufacturing at scale) there's still a disruption going on relative to the way things were a few years ago. Remember that 15 or 16 years ago, if you wanted to sell something online, you needed to buy servers, configure software, scan film and upload image files, etc. It's gotten easier and so will hardware manufacturing, because the demand is there.
I wrote a book that covers general/universal business principles: http://book.personalmba.com

For common funding and legal issues, I recommend "Venture Deals" by Brad Feld and Jason Mendelson: http://www.amazon.com/dp/0470929820

For finance and accounting, I recommend
"Financial Intelligence for Entrepreneurs" by Karen Berman, Joe Knight, and John Case: http://www.amazon.com/dp/1422119157/

Here's my complete list of recommended business books, sorted by topic: http://personalmba.com/best-business-books/

Hope this helps.
Georg Baselitz Is a Sexist Grump
Given Microsoft's track record for security, questioning the competence of any of their offerings is just good sense and due diligence. Given Microsoft's track record for honesty, questioning their motives is also good sense.
The code in the blog post removes only leading or trailing white space, not all of it.
Just to reiterate the parent: This is only valuable if we trust the signatures - which I wouldn't if they were, say, just held along side the "hacked" gems server.
Me too. Given how iOS apps are sandboxed from each other, I don't see how an app can get rid of anything in any other apps' directory.
Without at least a limited free tier, I don't see App.net taking off... I do like some of the things they've done, even paid for a year developer sub, but don't plan on continuing.. just isn't worth it to me.
You won’t get lost in Paris if you use the RATP Metro app, and your brain
What Every Business Can Learn From JPMorgan's $6.2 billion Mistake
Launch Hackathon: $50k in prizes/investment, 48 hours
No interest in seeing a proof of concept. And I make no claims about being a "proficient" shell scripter: You've nailed me there. I can write a shell script if I absolutely have to, but I avoid it when possible since Bash is such a terrible "language."

When I DO see non-trivial shell scripts, they are just this side of arcane gibberish. The command lines above are completely opaque to anyone but an expert in EACH of those tools (I know some of the tools, but not all well enough to know EXACTLY when I need to backslash a paren, or how many backslashes to use, or when I need quotes or not...).

When I see the JavaScript that spawned this conversation, despite not knowing JavaScript well at all (probably about the same level I "know" shell scripting) I was able to follow everything that was happening to the point where tweaking it to add features would have been easy.

The objective shouldn't be to write code in the fewest possible symbols. Everyone would use APL (or a more recent evolution of that language) if that were the case.

The fewest possible readable and modifiable lines of code is my objective. Shell scripting tends to have lots of obscure and unpleasant syntax to accomplish the most basic flow control.
Letter to Carmen Ortiz about Aaron Swartz
Theoretical economist. The trains run forever.
>Having said that, they're going to have a tough time.

I don't think it'll be as tough as all that. Remember that they still have their huge corporate install base. If they'd waited another 18 months to release this, they would have really been losing that market as companies started replacing their BB infrastructure. As is, they can parlay their huge corporate client base into a market for this new phone.
Is "which was designed only for parsing trusted input" written anywhere in Psych doc? Psych is shipped with Ruby, is it written in Ruby doc maybe?
going to try and get another two angels to put up $25k (or $10k cash prize). I think $50k is the biggest prize in hackathon history... 100 teams x 4 members each. 70 have signed up. should be fun.
Apples’s 128GB iPad Shows the World Exactly What Apple Does Best?
Ah OK I didn't know that (not a Java programmer). What happens if you create a huge 10MB string, then a 10 byte substring of it, and then remove all references to the 10MB string. Does that memory ever get reclaimed?

I guess the difference in Go is that the string abstraction and the slice abstraction is exposed to the programmer, so it will be apparent if that happens.

There is some info here but I was unable to find a good explanation: http://stackoverflow.com/questions/2909848/how-does-java-imp...
Either the pain is worth $400 to avoid, or it's not... seems simple enough to me! (Same for 'PIX for Direct3D 11.1')
It makes no sense that the FDA receives extra information that is not available to peer reviewers. Why would that be?
Java 6 End of Life Impact for Apache Tomcat Users
Keep it secret, keep it safe: A beginner’s guide to Web safety
I couldn't agree more with your post and your approach to discussing the problem. Yes, unless we are talking about something like and attempt to sabotage or worst, terrorism --both of which I would like to believe are highly unlikely-- ultimately management and engineering have to look back and see where the process dropped the ball. We are only human. We make mistakes. As you said, actual data will bubble-up to the surface eventually. From an engineering standpoint (and as a passenger!!!) I'd love to understand what happened.

A while ago I enjoyed reading "The Machine That Changed the World":

http://www.amazon.com/The-Machine-That-Changed-World/dp/0060...

It was interesting to learn about the evolution of manufacturing and management practices that made a huge impact on the automobile industry. Lots of lessons from that book can be applied well outside that industry.
CRAZINESS
Max Levchin talks about data, sensors and the plan for his new startup(s)
The Verge has a pretty good video review that outlines the hardware & software for the Z10: http://www.theverge.com/2013/1/30/3929760/blackberry-z10-rev...
If I remember correctly, certain regulatory environments require that an audit log be kept of who saw which file and when.
Engadget has a really decent review of the OS.

Link: http://www.engadget.com/2013/01/30/blackberry-os-10-review/
Human Gait Optimized for Efficiency
Huh, first thing I thought of when seeing "BBRY" was Burberry (which is BRBY on the London Stock Exchange).
Show HN: CentUp - Launching in late February
We put together an Indiegogo campaign and fun video to get early users. Thoughts?

http://www.indiegogo.com/centup
App.net is one of the only tech services I've paid for and from which I'd like my money back. I'm assuming they don't do pro-rated refunds for a reason.
From the BlackBerry Youtube channel: http://www.youtube.com/watch?v=fOjLxtFUY1I
This being a publicly available index pointing to data stored, I can only assume that encrypted or not the owner of 'mega' is still liable for any copyrighted material hosted.
It depends on the type of "privacy" you need, but your ISP isn't a threat if you're using good crypto, unless you're just worried about connecting to marked IPs, in which case a proxy, VPN, or asking your collaborator to open up a new IP are all viable resolutions.
Foursquare Business App
>>That's a bit of a stretch.
Can you imagine an "active placebo" for LSD, THK, methamphetamine (for example) ?

"Placebo" must be a potent psychedelic or stimulator itself.
You can publish the key on keyservers and get some trust on it.

e.g

http://pgp.mit.edu:11371/pks/lookup?search=37signals&op=...

http://pgp.mit.edu:11371/pks/lookup?search=heroku
Any company that sells software on Windows can surely afford the professional license.
Are you sure those were automatically transcribed? https://commons.wikimedia.org/w/index.php?title=TimedText:Di... says they were uploaded by an anonymous user. I think this is a joke created by a human.
No negative history certainly. I write python code all day long at $dayjob. It just struck me as odd wording.

Thanks for the perspective at any rate. Maybe too much coffee for me this morning? :)
True, "learned" does sort of imply that it's a best practice now used by nearly everyone in the community. I know that's far from the truth. "Encountered" is more appropriate, so I'll edit my OP.
The Sorry State of Trie Implementations in Python
> "No browser would prevent the authorities from using their ultimate tool though: certificates signed by the China Internet Network Information Center. CNNIC is controlled by the government through the Ministry of Industry and Information Technology. They are recognized by all major browsers as a trusted Certificate Authority. If they sign a fake certificate used in a man-in-the-middle attack, no browser will warn of any usual activity."

That is the important part. I am surprised China isn't doing this already. Maybe they are doing so, but only for targeted attacks. The CA community really shouldn't grant China any CA authority whatsoever...
I'd rather trust the javascript code that I can review than believe that whatever is happening on the service side can be trusted.
I'd rather get MSI's convertible.
Hi , changed it up a bit does it make more sense now ?
Looks very nice! Do you have a microphone on there? It seems to be responding to music quite quickly for having to go through a computer and web server. Either way, very impressive.

Feel free to copy anything you like from my schematic if it'd be helpful!
These two points seem to tack closely to the original article. They're certainly important characteristics about promises, but the fact that the promise is an object for the future, and can be composed and their exception handling can be composed, speaks to me of greatness. These things you mention are technical bullet points emphasizing components of that greater greatness.
I think it depends on which attorney gets a turn when they question you. I don't remember exactly, but don't they take turns? I would think that, depending on the nature of the case and the evidence, one or the other attorney might prefer to inject jurors into the jury who might tend to take a more analytical approach to things.
Maybe they're just limiting their growth right now? I would agree that a dropbox revenue model in the future would be a lot better (especially considering how much they're comparing themselves to dropbox).
Some code like encryption algorithms cannot leave the United States by law (if developed by a US company/Citizen).

Another example might be Credit Card Processing software, you don't want a lot of people knowing how you generate your encryption keys.
You raise a good point. I'm not against encryption in the browser as a rule but it does open up a whole new can of worms. Our approach is to be just good enough for most usecases.
So why is it better to use tormail.org than to use crypto and send from your real mail server? You don't want the ISP to see your SMTP headers? You don't want the address you're mailing to recorded on your typical SMTP server (probably Gmail and therefore subject to uninformed subpoena and/or warrant)? It seems in most cases, unless you're trying to mail osama.bin.laden@alqaeda.org, it wouldn't be a problem to use conventional SMTP headers.

i.e. the long and short of this issue is, if there's a problem with someone seeing the SMTP headers on your mails, you're doing it wrong. If tormail is a honey pot, it's a much more concentrated source of suspicious data than the inconspicuous mail sent through Gmail or another typical route, and therefore those routes may in fact be much safer, because your mail is not likely to come under any scrutiny there unless you try really hard to call attention to yourself (by sending mail to the recipient listed above, for example).
For me, this is primarily a reflection of the quality of service and community on Github rather than any quality intrinsic to git. I prefer mercurial to git, but find myself using git significantly more as virtually every dependancy in the apps I build lives on github.

I do think however that there are lots of teams, particularly in enterprise, that are quietly and happily using mercurial.
Exactly. I personally have seen no truly compelling reason to pay for this service. I just don't see it (for me).
> Jan 6, 2012

Pertinent? How long has she been creative director at Blackberry?
Is that to discourage employees from working on personal projects at the office, and/or to discourage them from sending company-owned code outside their corporate network?
Trekdesk (amazon link: http://www.amazon.com/Trek-TD-01-TrekDesk-Treadmill-Desk/dp/...) at home I just rest stuff on the control panel of the treadmill (the trek desk gives the treadmill a pretty large foot print)
I've worked on things like poker machine software.

Pieces like the random number algorithm for that stuff is tightly controlled.
Game of Life Javascript Benchmark
Don't worry too much about this. A lot of people haven't internalized the correct rule (use "an" before a vowel sound, not a vowel letter), and instead just use "an" before a vowel, regardless of the sound it makes. I've certainly never heard anything but /'jæm.ḷ/ in the wild.