skysight-inc/HackerNews huggingface dataset:
The hypocrisy from some of these anti-"hate" people is truly astounding.

We'll hear them go on for hours about how it's very wrong to target one particular group of people. Yet they'll so quickly and easily turn around, and target a particular group of people they deem to be expressing "hate". Their actions are often far more extreme and harmful than those of the group they are targeting.

It does not help the situation when those who speak out against creating "hostile environments" are often quite eager to engage in hostile behavior toward those they disagree with.
> (Actually, IIRC, S3 and S4 are the ones that bring him to the fore. In fact Im not sure he was in S2 at all. Cant remember.... Im old!!!!)

Hugh Laurie was introduced in season 3. The role he played was played by Tim McInnerny in season 1 and 2.
Big value companies - yes. Big companies - no.

They are just fad artists.
What a good observation! Commoditize the complements by dropping a free competitive software that any entity can use and modify. And they've also restricted modifications from other companies with the trademark, so they have control over that as well. It's quite brilliant.
a timing attack doesn't require constant duration for execution paths in the code. even with the noise in server communications remote timing attacks are often feasible - the noise filters out when you up the number of measurements or use the statistical techniques most modern side channel attacks rely on.

remote timing attacks contain noise by default, as they rely on server communications passed across a network with latency instead of examining the hardware directly to determine execution time. if you compare the network latency to the cache timing you'll find the noise is actually pretty fucking substantial.

a timing attack relies on a average difference in execution time between two paths of code. certain noise isn't going to protect you - for example, if everything on average takes 200ms longer, the average difference in execution time is still there.
I think the US Government is lobbying against it, too (and of course Facebook):

http://techcrunch.com/2013/01/18/us-government-still-leaning...
Top Floor Relationships Make For a Top Entrepreneur
Great idea and nice artwork. Also, €3000 seems a bit low to be honest.
Same here in the Netherlands. I don't think I can change mine at all.

This has however resulted in me forgetting it several times, once I almost got stranded at a station and was lucky to have enough cash to buy a ticket.

I won't tell you what I've done to mitigate against being stranded at random places due to forgetting my PIN but it's not secure. Therefore, I have my reservations about forcing people to remember random numbers.
> the OS X kernel's closed source

Isn't darwin open source?
Expression `False = True` reminds me of http://stackoverflow.com/a/771974/458610.
I like how the SQLite devs handled this (SQLite is public domain, and, if I'm not mistaken, widely used outside the US):

They sell a license for $1000.

http://www.hwaci.com/cgi-bin/license-step1

I'm curious if there is anyone in a place that doesn't "recognize" an author's right to give their work to the public that's actually bought a license?
Exactly!

We know very little. The same goes for the atomic model and a lot of other things.

Electrons, protons, quarks? That's our model. We know the equations, we know how to predict a lot of stuff.

This guarantees nothing. Maybe tomorrow someone comes up with a different theory that explains things better but doesn't say anything about waves or particles. Who knows.

Quick example: what's a magnetic field? It is a measurable quantity, there are theories about how forces are exchanged between charged particles, but essentially it is more a mathematical aid than anything else.

And physics is the most 'hard' science. Easily reproducible, the same everywhere in the universe (as far as we know), experiments can be reproduced as many times as you want without interference.

Now if you go to more specific sciences (biology, medicine, etc) it gets worse. They are only valid on planet Earth for a short period of time, for a start. Test subjects all have differences and experimenting on them affects the results.
I had a glance at the list, out of curiosity to see whether it included Case Western or Carnegie Mellon, both whose names reflect mergers. It did not. My point, though, is that mergers are not necessarily bad.
LinkedIn, Google and Atlassian JIRA's REST APIs all correctly implement HATEOAS. It helps to make your application less brittle when calling a third party API: if they suddenly change how a particular URL is formed, you already know from parsing the HATEOAS.

The kind of daft thing is that they provide a separate reference with all those links anyways; they have to uprev the API (and docs) if they actually want to make one of these changes. So, they're doing the right thing, but taking all the good out of it.
IANAL, but I believe you're incorrect about shipping the libraries in particular ways. My understanding of the LGPL is you don't have to ship the libraries with your application, you just need to provide the relevant copyright notices - usually in your Help/About.

I worked with the legal department at my company to get a list of approved open source licenses for components included in our applications. The GPL was immediately ruled out. Because of the GPL they spent several weeks scrutinizing the LGPL. They approved it.

Obviously your mileage has varied with your lawyers. And if we want to keep our jobs we can't cross the lawyers, even if we believe them to be wrong. It'd be nice if our community had a common understanding of the LGPL. There seems to be a lot of confusion.
Kingdom Hearts HD Confirmed for North American Release
anyone else notice the inconsistency?

the final image:
http://www.banksy.co.uk/QA/camden/Images_Large/photo13-2.jpg

contains the feet from:
http://www.banksy.co.uk/QA/camden/Images_Large/photo6.jpg

but this was supposedly painted over in:
http://www.banksy.co.uk/QA/camden/Images_Large/photo8.jpg

perhaps this is actually the final image in the series:
http://www.banksy.co.uk/QA/camden/Images_Large/photo12.jpg
As someone on a bioinformatics team in a public research institution, salaries range from $75k to $100K for developers on our team. This includes a number of people, including myself, who do primarily normal IT things (data management, small webapps for various clinical and research needs) and also for devs doing pipeline/workflow mgmt software, novel dev (e.g. new research code for sequencing), and variant calling work.

In my geographic area, this salary range is somewhat below corporate IT work (say 10% to 15%), but generally higher than the typical university software dev job listing. The university is really bad to list jobs and job requirements with laughable salaries. I have seen (in other departments) web app dev jobs that require significant front-end and back-end skillsets/experience and then pop a salary that is full 50% less than entry level jobs for CS undergrads.

One problem is that hiring departments in that position will find someone to hire at that rate, so they think it was correct. From personal experience, I can verify that "good on-paper" candidates with exceptional credentials (say MS in CS, bunch of experience) from other depts who look to join our team are unable to to write any code at the whiteboard at all (say a for loop in java to println something). But to be fair, a recent job interview cycle one of my teammates performed produced exactly two candidates out of 16 who could do this and only one of those could write a SQL statement that required a simple inner-join. Most of those folks were external, so it's not just a problem inside the institution.

I have a number of cynical and embarrassing opinions about this situation.
No cut and paste, no treeview. There's probably more, but I mostly just use the terminal nowadays.
If it's in public domain, all of them will use it, then make separate forks, and maintain them (individually, or in groups).

SQLite is almost exactly analogous to what you described (database, public domain).

AFAIK, there is no widely-used SQLite fork.

IOW, the situation you describe with every company "maintaining their own fork" literally did not happen to the software that's the closest case study in real life to what you describe.
I like the idea. One suggestion, provide the "social proof" so people are confident you can pull it off.
Agreed, a single video is not very representative and the results are still subjective. I would have liked these claims to be backed up by measurements like PSNR or VQM over multiple sources.
The answer -- regardless of who thinks they can "win" the argument -- is "this is not a useful question to ask, because people will draw incorrect conclusions, based on assumptions from other languages, from whichever answer is given".

Similarly, "pointer to something" is not a useful way to think about Python, because people with a background in C will start making assumptions about what "pointer" means. You might think that assigning to that "pointer" changes what's stored in the memory it points to, but really all it does is re-bind a name within the (local, which does not affect global) scope, leaving the "memory" unchanged.

So rather than ask which misleading-analogy-to-another-language Python uses, just ask how Python works.
Thanks! Yes, maybe it will be updated depending on the number of deals I will have :-)
I have seen this in many bio fields. As the biology research becomes more of a computational problem, requiring unique solutions for bleeding edge research, I imagine the field is going to have huge pains before actually paying for the work vs. using seniority and degree level as the sole determinate of pay scale.
Also see iPython. Not as pretty but has an astonishing range of capabilities.
But also any GPL project can poach from a BSD project, but not the converse, so BSD contributions are (technically) a strict subset of GPL contributions.
Hi cdl, we're happy you like it!

You hit the nail on the head: mobile is all about accessability so we built Frontpage to bring your content to you, the way it should be.

The low image count is just the nature of The New York Times. Next week we're rolling out a bunch of new publications which use pictures more often so be sure to check for updates!

We'll also be introducing an article caching system to fix those loading delays.

Thanks for your input! Email info@frontpageapp.com if you'd like to be kept up to date on Frontpage's progress as we move forward.
So I have 1 secret 4 digit number that I use to encrypt all my other pin numbers by adding it to them using modulo 10 addition. I then write the resultant 4 digit pin on the back of the card. I've been doing this for well over a decade since seeing it in a book about encryption.
Without it I'd have needed to have been issued with new pin numbers many times
Hi, I do realize that quitting Facebook is always an option. However there are other concerns. In theory, searching real people's data, as you put it, seems quite useful, however the reliability of the data is in question here.
"In fairness" about what? How is client's computer compromise related to server compromise? If someone gets access to, for example, Tarsnap servers, the attackers can do nothing apart from deleting your backups. If the same happens to Backblaze (who have some interesting understanding of "security", BTW: http://i.imgur.com/t3NCm3X.png), they can get full access to your backups.
I am not sure that copyleft (GPL and co) maximizes societal freedom.

We would have to weigh the "patches acquired by court" versus the "would have contributed but rejects viral code" cases. Since the latter cannot be reasonably measure, we are stuck in discussion based on beliefs.

Personally, I believe the GPL virality hurts more than it heals.
What do you mean by "social proof"? I'm not sure to understand.
To avenge Aaron Swartz, Anonymous hijacks U.S. Sentencing Commission Website
I'm not saying timing attacks against interpreted code are impossible. I'm just saying they are easier to execute against native code, and thus have nothing to do with JS crypto being less secure than native crypto.
Well that is not really a problem with Node itself. Are there any framework like Rails for Node? Then makes ( or try to make ) all the best options for you?
Question: how do you define cheat sheet?

I like cheat sheets (regex, vim, Gmail hotkeys, etc.), but I wouldn't include the article on "Python Shortcuts for the Python Beginner" in a list of cheat sheets.
It's the first thing i install in my virtualenvs. Much better then the standard interactive console and just works out of the box.
If you don't want more then tab completion, docstrings and a working command history between sessions it is great!
For more stuff, see ipython.
Ask HN: Framework for REST
Can anyone recommend a good framework for a simple REST service with JSON? I know PHP, Python, Ruby and JavaScript (not a big fan of Node, though).

What I'm looking for is a framework that is fast and simple and preferably isn't bogged down by a lot of code aimed at outputting HTML, since I'll only need JSON.

I'm going to use the REST service in connection with single-page apps built with AngularJS.
I imagine that the author had in mind other Free relational systems, rather than NoSQL or proprietary. For example, off the top of my head:

* Postgres
* Apache Derby
* SQLite

All of which I'd prefer to using MySQL in just about any context, and each of which has contexts for which it's overwhelmingly the best choice.
You have to provide a way for your users to relink to a different version of the library. This is hard for iOS easy if your target is Linux.
What people take for granted:

It is still legal to develop/install your own software on most devices.

You don't have to pay to some corporation for the privilege to be allowed to distribute your program to other users or even to start developing your program in most cases.

You may build whatever program you like without thinking whether it confirms to some corporation's rulebook/opaque acceptance process.

You can create a popular application without using API that is controlled by a corporation that will pull plug on you if your application becomes too popular/not aligned with its interests.

--
What license better enables the above?

Enjoy the freedom to choose whatever license you like. Don't bash GPL in the process.
The MPL belongs to the "copyleft" category, whereas MIT is "permissive". So, you made quite a switch. Basically, copyleft licences require modifications to use the same licence, while permissive licences allow proprietary derivatives.
This is an interesting look at the data but some of the inference isn't quite there. The author uses the relative prevalence of the pattern 2468 over 1357 to justify the conclusion that people prefer even numbers to odd, completely ignoring the pattern-based analysis he just used to understand the prevalence of 2580!
MindMup is now open source
I think it's just demonstrating how its possible to redefine even Python keywords.
Facebook’s Categorial Imperative
Exactly. One thing I have noticed in the U.S. is that pleasure, happiness, and joy have slowly become synonyms, which is way off the mark, IMO.
Did he really do that?
This is the very core of our scientific method (critical rationalism, Karl Popper [1]), theoretical models can only be used in science when they can be falsified. That is why we call them hypothesis (from the Greek word for assumption [2]). Logically, no number of positive outcomes at the level of experimental testing can confirm a scientific theory, but a single counterexample is logically decisive.

For example, we can observe a thousand white swans in the world, and hypothesize that all swans are white. That is until we encounter that one black swan, and our hypothesis has been falsified.

[1] http://en.wikipedia.org/wiki/Karl_Popper
[2] http://en.wikipedia.org/wiki/Hypothesis
no serious person writes native code that vulnerable to timing attacks. if native crypto code has a measurable difference in execution time for different code paths that usually results in huge security advisories, patches, and it's against openssl a published paper. if the native code is written with constant time taken for all execution paths then by definition a timing attack is not possible. even if they are very close in execution time the timing attack is much more difficult, if not impossible.

timing attacks are only easier against native code written by people who don't know what they're doing, which means they made different execution paths take variable amounts of time, didn't examine the generated assembly by a hardware expert, and didn't bother to mask the crypto operations with proper noise generated using a cryptographically secure prng.
VIM plugin for auto alignment
Hi, My first VIM plugin,

wish you like :)
'Is the pursuit of meaning a requirement for living a good life? I don't think so.'

I don't either. I think living a good life brings meaning.
Didn't say they're far from each other, of course it may be possible. I'm also aware of Microsoft's support for Node and Azure, and their contributions to Node.

Last time I wanted to integrate postgres with Node, I had flashbacks of myself, 10 years ago, building an ORM before ORMs were that hip - this is true for any of the impedance mismatch offered by taking an RDBMS and plugging it with Node. I think there's something with using stores such as MongoDB with Node that feels very right, almost essential.
Lifelogging and Self Quantization : the good and the bad
I'm not sure how far Android goes to sandbox you, but you might be able to write an app that runs in the background to detect/manage/switch-between network interfaces depending on what the intent of the user is at that moment. It'd be a handy little tool if it worked.
Not an expert but I find this difficult to believe. We know a LOT about battery chemistry.
Wouldn't the checkin to your source code repository already have those patch(es)?
Better: he announced the exploit in the talk he gave upon receiving the Turing Award:

http://cm.bell-labs.com/who/ken/trust.html
yes - look up Reflections on Trusting Trust - its a classic paper.
Our target is everywhere. So no, not possible on many platforms.

And the terms become more restrictive with every iteration. That general theme may be present but in the end you have to conform exactly to how the license is written. The verbiage about linkages etc becomes meaningless on some platform (those without a loader for instance). Where does that leave you, legally? I learn to never ask a lawyer techical engineering questions - like the old line about teaching a pig to sing.
I think he means that you should add references from the people you've worked for, e.g. "Sandro is a great developer who can deliver on time" Tim from Company X.

I wouldn't worry about that too much. If you get a deal - which shouldn't be a problem as your price is very reasonable, even low - deliver it on time, maybe putting a little extra effort if needed, and use it as your first reference.
From the interesting submitted article: "'Traditionally, literary history was done by studying a relative handful of texts,' says Mr. Jockers, an assistant professor of English and a researcher at the Center for Digital Research in the Humanities at the University of Nebraska. 'What this technology does is let you see the big picture — the context in which a writer worked — on a scale we’ve never seen before.'" This is interesting. Simply considering more data is likely to improve the inferences about which earlier authors were read by and were influential on later authors. And "big data" insights into patterns that are hard to notice when reading one book at a time in the usual practiced manner of a literature scholar will produce hypotheses that can be tested by going back to the familiar texts and looking for details that were not noticed before.

As this work expands to include writings first published in languages other than English, it will be interesting to see how turns of phrase from (for example) French entered the English language when English-speaking authors read translations of French literature. This will give a much more complete picture of worldwide influences on the development of literature.
I agree. I've only high school electrochemistry to draw on, but questioning this sort of thing becomes much easier if we focus on the exact claim:

* When reduced, ethylene carbonate forms a dense material that lithium cations can pass through but solvent molecules can't.

* Propylene carbonate does not form this/similar material.

* Using propylene carbonate therefore allows the solvent to come into contact with and weaken the graphite anode.

* Nobody knows the chemical process that forms the material for ethylene carbonate but does not for propylene carbonate.
Cool idea! I would try it if I had an Android phone.

Seems a little weird to me to make the lock screen interactive, though. If there are all sorts of things you can do on the lock screen, when does the lock screen cease to be a lock screen, and when does it become some new layer of limited interactivity?
Sure. But what about rewrites? What about code fractions extracted and used in other modules? What about makefiles to integrate the code, or package builder scripts? ALl that is part of our stuff, but taken from their project.

So we expunged all of it, wrote our own or got rid of the feature (found alternate encodings of files we were decoding; used different rendering agents etc).
http://openhatch.org/
Nope. The LGPL basically requires you to make sure that the end user can replace the LGPLed code with a modified but ABI-compatible version (for instance, because there's some bug in the code). Think back to the libpng security vulnerability a few years ago, for example - because that was under a more permissive license than the LGPL, users of proprietary software that included the insecure version couldn't update to a fixed version by themselves and were reliant on the companies that supplied them the software.
Care to share how many emails you received yet? ;)
Thanks. Without getting into FUD - I have my own MongoDB battle scars as it is on Linux. I can't imagine running it on Windows, sounds like I'd be very lonely should any problem arise there.
Fair. As I said, I would rather it weren't necessary to codify the quid pro quo "rights and responsabilities." At the same time, I can't imagine not wanting the right (freedom) to view the code for software I use. (Hey, that's why I choose open over closed in the first place). The spirit of the GPL IMHO is just "pay it forward," or at least a "don't use it to peck me to death or blame be when you drop it on your foot." I agree, it puts a damper on gift-giving, but I just can't see another way. In the same way, I wish it weren't necessary to spell out human rights, but even for something as important as that, not everyone always plays nice. (I mean, people burned witches, to pick just one random morbid absurdity.) I wish the "NO WARRANTY" warnings weren't necessary either but, as the expression goes: "no good deed goes unpunished." :\
I don't consider Tarsnap's actual storage to be part of the cryptosystem – it's no different than the data simply being "in transit" indefinitely – so "compromising" a Tarsnap server has no real meaning from a cryptographic point of view.

I totally agree with you about Backblaze; at least with Tarsnap, the physical machines and environments that are actually part of the cryptosystem are in your own control.

Oh, and the "in fairness" was that compromised clients have the same problem as compromised servers. Perhaps I could have worded it better – I don't have any problem with what you wrote at all.