skysight-inc/HackerNews huggingface dataset:
I have a friend that is building a startup that takes your git repo and hooks it up to a gerrit/jenkins layer. So, it automatically runs commits through the unit tests and gives a +1 if you pass all, and requires another +1 from manual review to make it to production.

It's kinda cool, actually. And obviously, if anyone is interested in beta, send me an email (in my profile).
So your conclusion is that dynamically interpreted languages are all insecure?

(You can instantiate objects with classes specified by data in Java too, although Java isn't usually considered exactly dynamicaly interpreted. In fact, there was a very analagous bug in Spring, as mentioned in many places in this comment thread. But anyway, okay, sufficiently dynamically interpreted to allow instantiation of objects with classes chosen at runtime... is the root of the problem, you're suggesting, if everyone just used C++ it would be fine?)
Those are some heavy graphs, but I wonder what was the spread before the release of the news?
Traders buying early on the news might be dealing with a big spread as everybody is expecting the news to come out.
Remote would be great, and would certainly increase my chances of participating in a future event. I was, though, talking about physically attending a future event. I wanted to know your feelings on attendees coming in from outside of a reasonable distance from Mountain View, if that matters.
Just created http://www.txtbox.co/default

What could go wrong?
I would love to see a "from nothing to web app" style piece of writing on this. It sounds intriguing. Blog, paid videocast, book, set of tutorials.. If you're interested in doing one, perhaps as a noob I could provide some "that's hard to grasp" style feedback and collaboration (mail in profile hinthint).
Well... think about it. If a professor was allowed to post the textbook --or even just pieces of it, say, the homework problems or example problems-- what use then would a student have for the textbook? Nobody would buy Fundamentals of Chemistry 50th Edition!

Clearly such actions are not fair use.
Think about it this way... A lot of people try to sell their iPhone 4S's or 4's when the new model came out. So what did they do? They went to eBay, Amazon, Craigslist, Gazelle, etc. to sell it. Once sold, they used the money to pay for it plus the difference.

Think of that whole experience done on one site... Swapidy. You sell your stuff to us, get paid instantly, and buy whatever you want right away.

As for the remaining balance goes. New products come out all the time and more often that not, you will purchase a new product in the future, right? You can use that currency that was left over to buy the next best thing whenever it comes out. And better yet, we will always be updating our product lines. So there will always be something new to buy.

So think of it as savings in your bank that's used for something else down the road. The value is never going anywhere... it always stays the same ($1 = 10 Honey).

Let me know if you have any other clarifications I can make.

-Adam
Between 11 and 12. Up by 6:30
Stalin worked at TX/RX?
While this article was noncommittal in offering up the reasons for HB's success, the pleasant sales experience was reiterated throughout the article. THIS IS HUGE IN RETAIL.

As of this coming Saturday, I'll be a year into operating a coffee shop I opened with two friends. Like HB, my shop has exceeded my expectations in the first year. FWIW, here are my observations on success:
If you have the best sales experience in town coupled with a great, consistent product, people will talk about you. I monitor every mention of keywords related to our shop on twitter, Facebook, yelp, instagram, tumblr, etc and after a year in operation, it's pretty clear that people value the attitude [or lack thereof] of my employees, our approachability, the quality and consistency of our product, and the beauty of our shop. In combination, these things help create and maintain a lot of positive buzz about the shop. Buzz begets buzz too. We've never once paid for advertising and instead let word of mouth and good product do the talking. First there were just tweets, Facebook mentions, and word of mouth. Then bloggers started writing about us. Then we had local press do a few stories on us. With time, all this turned into positive reputation and people outside of the city began to mention us. Recently we've received national press. We also just climbed atop the #1 ranking in yelp for coffee in Charleston, SC. Over the past year, I've made a concerted effort to keep people talking and it seems to have worked.

TLDR: If people see integrity in the ownership, quality in the product, and a pleasant sales environment, they will tell someone and they will be loyal to the brand. If you've done your job so well that you can inspire your customers to talk about you, you will grow, even if you aren't in a prime location.
This seems like an insane undertaking for one person. I could understand it with C - that would be difficult enough. But a compliant C++11 compiler? It has taken MSVC, GCC, and clang years to get just partial C++11 compliance! None of them are fully compliant in their current state. How is this course supposed to be tractable!?
I think something like this might be a very cool project for those of us who have the time. You get intimate knowledge of C++, compilers, assembly and other close-to-the-metal aspects of programming. I wonder how much time it is going to take; the very simple compiler I had to write in college using yacc/Bison, supplied boilerplating and a trivial output format already took several days of full-time work. Full C++-compliance seems like a _huge_ project.

The website is missing some information however: who's behind it? It says:

The CPPGM Foundation was formed by a software company that
recognized the value to programmer productivity that a good
knowledge of language mechanics had to new developers to
their team. The C++ Grandmaster Certification began
development as an internal training program, and the
foundation was founded to offer it publicly.

but fails to mention what that company is. Additionally, the domain is registered anonymously...

Edit:
After some digging, it seems that the only information available on the people behind this is the fact that they emailed the press release to the comp.lang.c++ newsgroup from a residential IP-address in Switzerland. (NNTP-Posting-Host header)
Heh. Go figure. I make my money with PHP.
There's definitely a big gap, but I'd still suggest diving in. Reading a few of the major Functional Pearls is tough going at first, but they're generally designed to be free-standing and practical.
I agree with this. In fact, it isn't really productive even trying to implement a language as complex as C++ (many might say overly complex).
I live in the country side and walk to my office through farms, cows, horses, and crops.
The YAML vulnerability was not from any 'eval' in the YAML library itself, you realize, right?

It was from allowing de-serialization to arbitrary classes, when it turned out that some classes had dangerous side-effects merely from instantiation -- including in some cases, 'eval' behavior, yes, but the eval behavior wasn't in YAML, it was in other classes, where it could be triggered by instantiation.

To use your language, I don't think it's 'intellectual honest' to call allowing de-serialization to data-specified classes "a YAML parser that executed code"--that's being misleading -- or to say that a 'trained monkey should have known it was a bad idea' (allowing de-serialization to arbitrary data-specified classes).

There have been multiple vulnerabilities _just like this_ in other environments, including several in Java (and in major popular Java packages). You could say with all that prior art it ought to have been obvious, but of course you could say that for each of the multiple prior vulnerabilities too. Of course, each time there's even more prior art, and for whatever reason this one finally got enough publicity that maybe this kind of vulnerablity will be common knowledge now.
> else everyone on the team needs change their otherwise perfectly normal and perfectly productive patterns of communication (leading to frustration with the artificial constraint).

I have yet to work in any place, remote or local, that doesn't have a large portion of the executive team (which is always a double-digit percentage of the total headcount of the company) on the road for various reasons a substantial chunk of the time.

I think companies that rely on this face-to-face dynamic (of which there are many) are doomed because the normal operation of their company will necessarily disconnect people on a regular basis. If you're not putting all the critical information somewhere reachable by everyone, all the time, you're shooting yourself in the foot, even if (in the usual case) everyone shows up to the same room every day.
> In addition, I wonder by what criteria one would evaluate how "properly" the markets are functioning. Who decides what is proper? For example, based on the business fundamentals it seems ludicrous to me that Apple would have a lower P/E ratio than GM--but it currently does.

Couple of things:

1. Reference to Apple PE ratio is likely a market driven phenomenon that has occurred before to the other technology company that grew very large very fast (MSFT) ie. sometime around 2000, most mutual/institutional investment funds literally owned more of MSFT (and now they likely do of AAPL) than they were legally allowed to own. At this cap, given that these buyers are the largest "long term" drivers of a stock's directionality, the stock must change direction. The second part of this effect is that now a bunch of them are underwater, and the psychology of holding a bad trade will affect whether they decide to book the loss (likely they wont for a while). TLDR: Apple is simply too large, relative to the tech sector, for its stock price growth to match its business fundamentals.

2. Re: markets functioning properly - we should remember that the "markets" are literally a construct. For all the logical arguments made about how HFT reduce the bid/offer spreads, I'm philosophically opposed to them. Mark Cuban has articulated why better than I can: http://blogmaverick.com/2010/05/09/what-business-is-wall-str...

In a nutshell, if we constructed the markets fundamentally to make it easier for businesses in the real economy to raise and price capital, and HFT starts to account for a multiple of that, then the purpose of the "market" construct has been hijacked.

This leads to all sorts of gnarly questions about how to decide what the right volume is etc, so I recognize its'a thorny area - just pointing out that HFT is not so benign, and oftentime comes with consequences that far outweigh the benefit, and happen too often to ignore.
Understandable and I think your point is certainly valid.

We're testing to see what works and what doesn't right now. If you think about it, people are more likely to buy or sell if the number is higher. But we will only know if people get used to it within a matter of days.
How to clone a DVD-video disc?
Usually, DVD-video disc refer to the commercial DVD movies released by many movie studios, which have now increasingly become an indispensable part of our daily lives. People buy DVD movies and enjoy them at home, so there comes the need to make backups of these DVD-video discs. To backup a DVD-video disc, we need call in a piece of DVD cloner software, and DVDFab DVD Copy, the best DVD cloner you ever seen on the market, is born for this.

Check this tip up to see how to clone a DVD-video disc with DVDFab DVD Copy.
This has been very true in my experience. Even having the team in the same room and the same space, but with individual cubicles can be insufficient. It is really hard for people, especially developers, to let go of their personal space. I know it was for me during the transition.

Working on many different teams in numerous cities over the last few years, the bullpen and shared space is one of the best ways to remove silos and promote organic conversation (kill meetings). Pairing instead of code reviews (or gated checkins), talking instead of team meetings, one on ones instead of political games and going out for coffee to think through a hard problem. With the right team, you show up at 9am and leave work at 10am (really it is 5pm, but it feels like 10am).
There are a lot of killers between birth and elderly. Look at life expectancy at 65.
Circa 2010, and a list composed of Democrats in what proved to be a dismal election for liberals overall.

As events since have shown, awareness is still spreading.
Four little things that shaped India: Part 1
Side note, I forgot that CPTTv2 was $101 (for the Kindle version no less).
Any particular reason to use MaxCDN over CloudFront?

Edit: just realized why that's a silly question. Would still be curious to hear the answer though.
Chief Architect at Basho here:

Saying Riak is categorically non-operations-oriented is a bit hyperbolic, but I will be the first to acknowledge that we need even more visibility into failure-recovery / degraded mode situations. I've spoken to a few customers who have "cheat sheets" of Erlang console commands they use to debug things like handoff slowness or poor performance in general. This alone means we need to do better,

On the other hand, Riak continues to function in scenarios where other databases would be completely unavailable. I'll take immature visibility during those situations over complete unavailability any day,

I appreciate your feedback - I can assure you that this is something we're constantly working on and you'll see improvements with each release.

Finally, if you've been bitten by anything specific you'd like to see fixed, we do all our development in the open at http://github.com/basho, so github issues, pull requests, etc go right into our internal tools and workflows.

Cheers,

Andy Gross
I think you must be talking about the Silicon Valley VC crowd. I'm sure there are VCs in other places.

And if you're right about the Silicon Valley VC crowd, that's a business opportunity for new VCs in that area to set better terms and not collude.
>JPEG XR†, seems vastly superior to WebP in almost every way

No animations duh.
They should all be Hackathons
Lynn Hill: amazing profession climber. Mis-tied her knot (figure 8 with a follow - she forgot to finish the follow so it was useless) and fell 60 feet into trees to live and keep on climbing. Her advice at a talk a few years ago was "always tie a stopper knot". A stopper knot is an extra "useless" knot that takes seconds to tie and will secure your figure 8 if you threaded it wrong.

While climbing at the Gunks in NY about 8 years ago on a spring day, we heard this massive thunder a few hundred yards away. A small volkswagon sized boulder had broken free from the wall and fell smashing trees below. My friends were about 3 routes away from it when it fell.
Ways to generate new ideas
Subtle. A lot of effort just to prove that there will never be a "C++ Grandmaster".
There's a bunch of these logs in the "afghanistan war logs" released by wikileaks.
Watching him on The Colbert Report just confirmed that. Seems like a nice guy, a geek you can identify with.

http://www.colbertnation.com/the-colbert-report-videos/42336...
Some people have a more civilized education.
"And why exactly shouldn't the guy who's invested in the best hardware have an edge? Should perhaps we also mandate that all software engineers use exactly the same 2004-era Acer Pentium 4 laptop so that any difference in productivity is strictly due to programming skills?"

Apples and oranges. Should we also mandate that doctors only use scalpels?

Any analogy quickly becomes ridiculous as soon as you compare HFT to anything of actual use in this society.
"More significantly, we are not doing an optimization pass."

Most of the legwork in compilers like gcc involves optimizing the output code and targeting multiple architectures -- writing a dumb translator for a single architecture is a far more tractable problem.
I signed up and am excited. It is definitely something that will be challenging, but the fact that it is free means that I have nothing to lose and everything to gain. (One would say that time is something I can lose, but this is a better use of my time than Diablo 3). The only hesitation I have is that this is just yet another joke that I'm too naive to recognize. We shall see!
Current MaxCDN customer here. I'm really excited about this. I host multiple sites on Cloudfront but assets for a rails app on Maxcdn. I wanted to consolidate about a month ago. When I asked MaxCDN support why I couldn't use www, they just said no and that I should move to netdna (their other brand) to do it.

From the blog post:

"Note: MaxCDN does not automatically allow you to create a www CNAME in order to protect their system from DDoS attacks. To enable this functionality, email MaxCDN directly and mention this blog post."

I'm going to ask again and see if I can test against the experience of deploying to cloudfront. One of the things now with cloudfront is it often takes a bit of time to expire the cache.

Edit: Here's the response I received 5 mins ago from support after asking for this...

"Thanks for emailing us and I do apologize for the delayed response. I will need to escalate this to our support engineers for verification since we don't allow the use of "www" as part of custom domains for security purpose and also this needs higher level of access."
I've seen the opposite. When the team is that close it is difficult to hide your ineptitude. Team members that don't contribute get outed pretty quickly and tend to leave. This is generally viewed positively by those that are core contributors.
"Abstaining from the word completely leaves it loaded with hateful power."

The persons in power can not do not and will not recontextualize racist terminology on their own.
Neat but I will say this, I think the course is mis-named. This seems to be less of a C++ master class and a course on compilers. I would expect such a course as a C++ master class would be more on using the language rather than compiling it. But that doesn't mean the course isn't good, I haven't seen the content. :)

- For those criticizing the amount of work ... I tend to agree with you all. However, in the faq this is addressed, take that for what it's worth. However, it's free so it seems like, even if you fail at building a fully working compiler, you could learn a lot, so I say good for them!
On my phone, this link just bounces to a "an app for your phone is coming soon" page, zero content. Not the best way to do mobile...
How to spot bullshit and never feel insulted
seriously? you can just type windows update (search will open for you) then select it to install - i don't know how it's too complicated. Especially since most people use windows already.
Oh yes, he got his whole family addicted to it and suggested other families do the same.
or just start blogging on gist.github.com. your blog url is http://gist.github.com/<your-github-id>;
that was a different event
3 Quick SEO Tips You Might Not Know
Mitch Resnick: Let's teach kids to code [video]
Why do people write things like "We Should Avoid #’#(ing Their #()#% Up" instead of "We Should Avoid Fucking Their Shit Up"?

http://www.youtube.com/watch?v=dF1NUposXVQ
legs together, or it's on my chest while i'm lying down.

i kind of like that it isn't rigidly attached because my blanket or legs for that matter aren't exactly an even surface and instead of the device losing balance the keyboard leans a bit left or right.
Just as important bone density and minimizing bone loss through resistance training. Stressing the bones forces them to become stronger.
L1, not euclidean.
Is that why HTTP is always used for high-throughput network services like MySQL, Memcached or Redis? Oh wait it isn't.
Twitter strips out location data from photos when posting them when the user has disabled geotagging.

It's not hard to get this right. They just chose not to, either through neglect or malice.
I did navigate the system. The rules for refugees are considerably worse, DIAC's official estimate of processing time for an Offshore Humanitarian visa is several years. And you're welcome to take a gander at the comments on my blog to see how easy others are finding it!
off on a tangent: does anyone know a good resource/book for learning C++ from a C background? I've loathed C++ every time I've gone to use it, I'm sure there's something good in there....

i.e. is there a good book "C++ for C programmers who hate the thought of it"
Good point. I hope it is not some joke or some way of getting email addresses of programmers.

EDIT - Looking a little more, I can't tell exactly but I feel like the people that put this site up should put some more explanation up about who is doing it and ensure it is on the up and up. Surely, they are aware of this HN post so I'm waiting. :)
The server architecture is nice but my favorite part is the simple signaling protocol, as opposed to SIP or any other overly complex (for this use case) telephony signaling protocol. Nice work.
How well does yum work on Windows and Mac?
the two years I spent in Job Corps was enough give me PTSD. There was no one event that caused it. It was simply being in a stressful environment surrounded by the dumbest mother fuckers ever to claw their way out of a vagina (staff included). I have flashbacks, near constant depression, and bouts of rage that I simply turn inwards as more depression. I guess what I am saying is that it isn't just seeing combat that can fuck you up. (Not that I am in any way trivializing people who have PTSD from combat, just pointing out that, to our brains, it doesn't seem to matter)
eduardordm,

First off, thank you for the response.

>> I don't know why you need money at this stage, but please, do not depend on angel investing right now. Do something that you can charge users for right now (today!). Charge them. Are those potential customers willing to pay you TODAY for the product to be delivered in X weeks? Do that. Do not play lottery with your life.

Great advice and I wish I could follow it. My service has a co-dependent userbase. My customers are businesses that only get value if the end-users are present. I've asked a number of them and while they are willing to give it a shot, they won't pay for it until the other userbase is sufficiently established.

>>Angel investors will invest in pretty much two types of startups: 1) startups with crazy ideas that can make everyone millions or fail miserably (think color.com) 2) startups that have a reasonable idea with good traction where return should be smaller

Very well put. I believe it falls into the first category but ultimately the opinions of the angels is what matters there.

>> try to do some consulting
I have been; unfortunately there isn't a whole lot of work right now in my area & for whatever reason, telecommute gigs aren't popping up right now.

I think I'm going to continue to push ahead and hopefully build out both users bases in my area. It'll mean giving the service away for awhile but hopefully that'll be enough to garnish some weight when I cold-call angels.
Totally understandable. However, that scenario is highly unlikely.

Your currency is always worth that amount and will never change in value.
A lot of jobs have a lot of backstabbing and work politics. It's really about the company you join and its culture, and to some extent the team.

ChemE is pretty desirable, either in production plants or R&D. You're not always out in a backwater town--I believe the term is "near population centers." Sure you might have a 30 minute commute, but you get paid pretty well. I have ChemE friends working in Texas (multiple cities), Greenville (SC), Michigan (forget which city), and Baton Rouge (LA).

You could also work on an oil rig and do a rotation. They pay pretty highly, then you get a bunch of time off.

Regarding the salaries -- Yes 60K for a bachelor's was my school's average B.S. starting salary.