skysight-inc/HackerNews huggingface dataset:
So now you have two pieces of gear to test changes on and another interaction where stuff could break / go weird.

I don't see how that would solve anything here.
Game assets don't change in the ways that compiled binaries do, so bsdiff doesn't sound like it would be appropriate.
Since I got my Open Pandora (http://openpandora.org/) I've stopped playing video games on my workstations and laptops, and gotten a lot more productive!

Anyone who wants to revisit their old collections of games and other interesting software needs to investigate this wonderful underrated platform - its truly a neat device and a very rewarding user experience!
They don't seem to. Plus, if they hit more than 5 ports their ip gets blocked. Plus it keeps crap out of my logs...
You're vastly oversimplifying the problem here by only accounting for one class of problems.

>". I would be willing to bet that outside of heavy-DDoS conditions that even a tiny fraction of Cloudflare's network could handle the incoming tcp connections and deny all of them." depends on the attack.

>"You can send a tiny error page. You can let X% of requests get through and be fully served." Not usually that easy.
fun stories? try http://bash.org/?top
If someone logs in directly as root, how do you track root access? Given that you should be discouraging root use and using sudo or scripts to automate admin tasks, why are you encouraging admins to log on as root?
Well it's sure a nice plan to pack a light bag and just go, I did it many times around europe when I was 20. And enjoyed a lot, without smartphone or computer, just me and friends.

But now we got smartphone and services in our hands, why not use it? I've booked a flat from airbnb the night before leaving to london during a barbecue with friends, in 5 minutes I had a place to stay.

I think in some way apps are really simplifying our lives. It all depends on which and how we use em.
This is what I used to believe as well. But I'm reading more and more about how ISPs are filtering out such attacks and how some dedicated networking gear (eg Pravail APS) can stop at least some types of DDoS attacks from saturating your web farm.

It's that side of things that I'm mostly unclear about. Are solutions like Pravail APS basically snake oil?
Given that half of the professional IT people I've ever worked with don't even have IT-related qualifications, I'm really not surprised (but I am disappointed for our industry that the bar is set so low).

Can you work as a lawyer without a law degree? No. As a doctor without a medical degree? No. As an IT worker without a computing-related degree? Sure thing, how hard can it be!

I guess the differences are:

1. IT is still young as a profession.
2. IT lacks professional bodies to regulate the industry (see above).

So we end up with lots of unqualified people pulling the strings :-(
> What's really absurd about English is the contempt for diacritical marks.

Not just English, but also Chinese. Pinyin was originally specified as having marks over the vowels:

āáǎà ēéěè īíǐì ōóǒò ūúǔù üǖǘǚǜ

But although you see pinyin used a lot in mainland China alongside Chinese characters, you virtually never see those diacritics, just:

a e i o u v

where v is used instead of ü.
Disclaimer: I'm a SIL-4 rated programmer and have worked in safety-critical systems for decades.

Yes, its true: radiation can destroy the benefit of having an ECC controller in your design. There are very few hardware methods, short of encasing the entire device in several tonnes of Lead, that will prevent this from happening when you're out there beyond the atmosphere ..

So the solution is, typically, a combination of hardened CPU's (as much shielding as the weight budget allows) plus SOFTWARE to detect the error, and react accordingly.

Memory corruption is something that a SIL-4 or Space-rated software system HAS to check for, actively, continuously. Its quite possible to use a number of techniques to cover the cases as much as possible .. for example, you can have a process which double-checks the Text Segment for running processes and compares it with a known valid CRC for the process. You can use 2-out-of-3 style voting systems, so that redundant decision making can detect problems, and so on.
If you're the shareholder of a big company that can leverage tax competition, then tax competition is a good thing. If you're anybody else - starting from businesses that have to cope with normal tax rates where they operate, and compete with the aforementioned big companies - it is a bad thing.
"I never understood how e.g. Spanish speakers think that a door is female or a clock is male. I mean, it's not like there are any body parts you can examine for a definitive answer..."

But "gender," as a term in grammar, just means an arbitrary classification of words for grammatical purposes. It's only a few languages which, absurdly, map these grammatical tags to biological or cultural sex distinctions. English compounds the absurdity by retaining this grammatical distinction only in this one bizarre case.

(My favourite example of the arbitrary nature of grammatical gender is Dutch. Dutch has two genders, common and neuter, which, if you wanted to map them to sex, would mean "either male or female" and "neither male nor female", respectively.)
Only if you have a really bad chair and computer desk.

On a side note, drugs are for drug dealers and losers. Only one benefits.
Cannon.js - A lightweight and simple 3D physics engine for the web
It's a tool problem.

But figuring out exactly what part of the tool is buggy is hard. If I'd have figured out what the problem was (probably spending hours), and reported it, the javac people would've said, "javac is working just fine, you specified the wrong locale." The Eclipse people would've said, "Eclipse is working just fine, it uses the system locale as a default when you don't specify." The Ubuntu people would have said, "Our locale setup is fine, it's your fault for not selecting ISO-1234-5678 instead of or in addition to UTF back when you installed the system. Oh, and of course you also have to set your environment variables correctly..." The author would have said, "I'm using a normal system and it compiles fine for me. If I change encoding so it compiles for you, it breaks on my system!"

The upshot is, the tool support is garbage, because you have to jump through a bunch of hoops to get code to compile. I recall the error messages not being helpful. (Would it be so hard for the compiler to say "Warning: Unrecognized character o.., it looks like you're using ISY-2358 encoding even though you didn't specify. To make this warning go away, enable the ISQ-1337 locale, regenerate your locales, and set the LC_ALL environment variable.") Being able to compile a given piece of source code into object code should not break if you change obscure environment settings between machines.

Spending hours figuring out what's breaking, only to find out that things aren't breaking and I have to change a bunch of settings on every development machine I use (with different values for every program I compile, of course), is a lot more effort than just limiting your source files to character codes less than 128 (or 126 or whatever the top ASCII character is).
Film to be distributed via games console for first time
Magic Numbers and Being Naughty
It's always practical to use a configuration management tool. It's not always practical to use specific tools like Chef/Puppet.

Even a shell script that automates your standard install scripts is better than doing it by hand, because they can ensure you don't forget any steps and verify the state afterwards and ensure you don't forget any of the verification steps either.
I guess my response to all of these is... using key based auth is so much more secure than changing the port that changing the port seems to me, completely, pointless. Especially considering that:

- password auth = me having to type my password everytime, likely to have a less secure password

- key based auth = me never having to type it in, with a key length so long that it's completely inconceivable it'll be cracked or collided or brute forced

and then when you change the port, the only "advantage" I get is that I now have to remember the port because they're already not getting in by virtue of key-based auth.
INTERESTED IN UX ARCHITECTURE? HERE’S WHAT YOU SHOULD BE LOOKING FOR.
So there are two parts to this question: why do you end up with non-technical directors of IT and why do you end up with idiots who raise obviously dumb helpdesk calls.

The later one is a fair question and I can't answer it in any useful way beyond the fact that organisations are often structured to allow and indeed reward things which might otherwise be seen as odd.

As to the former, a few reasons spring to mind:

1) Because it's hard remaining technical once you reach a certain level. Sure, you can be the best sysadmin or developer in the company, but when you move up the ladder you will spend more and more time doing non-technical things. As that happens you'll pretty rapidly find that others will surpass you technically - entirely reasonable as they're doing stuff five days a week, you're not. If you're managing a big department then the amount of time you're hands on will rapidly drop to zero and given the pace of technology within three years or so you're probably better assuming you know nothing as what you do know is as likely to be wrong as it is right.

2) Because they should have decent people they can trust to know and do that stuff. People complain that technical people aren't trusted but having a technical manager as often as not results in meddling and second guessing. A decent IT manager should understand high level principals, be able to ask the right questions and help structure thinking and other than that should let their staff do what he pays them to do. As to why they employ consultants to do things their existing staff can do - a lot of the time this seems to be the case but in 20 years I actually can't think of a single place I've worked where this has been true. Sometimes there's a lack of resource (that is people are busy elsewhere), sometimes specialist knowledge is needed or whatever. In my experience people are usually either neutral or positive about consultants coming in.

3) Consider that troubleshooting a VPN isn't the best use of their time. Possibly they could sort out their own VPN connection but if they're earning a six figure salary is it best that they spend half a day sorting it out themselves or that they call in someone who can sort it out in 30 minutes?

The short version: a director of IT isn't some sort of senior, senior sysadmin. It's a different job that needs different skills. Yep having technical understanding would be nice but given the choice between a director of IT who could configure a firewall and one who could manage budgets and keep political crap off my desk I know which one I'd take everytime.
I think the real question here is "why do support teams not have technical leads?"

No one bats an eyelid at a software project having a non-technical PM because it's a Team/Technical Lead's role to fill in for the PM's lack of technical knowledge; I've never heard of a Support Team/Technical Lead before though.
JavaScript useCapture demystified
I do not recommend unattended upgrades. Every upgrade without any exceptions have the possibility to destroy any working system or your applications. Test and deploy would be wiser.

By the way, what the heck developers do on production systems?
It would be nice for some kind of professional body or 10 to come into existence, so you can become say a Chartered IT <something> after either a relevant degree, few years experience and a bar exam, or a more years experience and the same exam. It's so hard for many companies to tell the difference between a guy that simply knows computers or someone who can make the right technology decisions.
Ok, great, that's the spirit

You can put all his recommendations in a shell script (as the easiest solution) then run it (and if you ever did this more than ONE time you see the value in it)
Because it is the exact translation. It would be nice if they converted it into your currency or just leave it as the original currency.
The thing is that a cosmic particle event such as this is NOT an especially low-probability one when you're on Mars. Similar things have happened with Spirit and Opportunity as well, even earlier in their respective missions. The engineers expect things like this to happen. I don't think they have ever been wrong when attributing a glitch to a radiation event.
Node.js: Abusing Express 3.* to Enable Late Addition of Middleware
You'd better write hyphens, as in "I want to put hyphens between the words Fish, And, and Chips in my Fish-And-Chips sign".
If they have had access to a shared account, how much work are you willing to put in to verify that there's nothing in that shared account that will get executed by another user later that will quietly reinstate a key?

A reason to have separate accounts is that not only do you terminate access, you also have an easier time ensuring that less of what that person had access to could have been compromised. (This of course goes right out the window if said person has sudo/su access, in which case you have a much harder time, but even then giving them individual accounts means your opportunity to audit becomes so much greater)

After all, it's not the honest guy who'll never try to log in again you're primarily trying to protect against (in fact: for the honest people, a good security policy protects them by making them less likely to become potential suspects if/when something happens - it's in your own interest when you leave an organisation to ensure you get locked out), but the guy who might decide to try to do something later, or who might even be thinking about doing something before they leave.
I'd be surprised if Silicon Valley wasn't leading the charge on contraband use of nootropics. I'd imagine that the only populations with a higher frequency of use would be students at top tier law schools and other rigorous academic programs.
Any announcement?
Hmmm, you might want to check out your pension plan. Also, have a look at your country's next published budget.
I got it now. The issue is the language barrier. And by language I mean my native language where "ordered" is sometimes used as synonym for "sorted" (at least in CS and Math fields), hence the confusion.
Firstly look at the highest level of management, CEOs are not always experts in their fields but have a broad knowledge of operations, finance, HR, payroll, legal etc.

IT Directors do not need to be highly technical (although some technical knowledge is normally required), to manage outcomes.

Prior to my previous role at a startup, I was in the IT industry for over 15 years. What I learned taking on the CTO role is that it isn't just technical. I went from programming/infrastructure/architecting to doing budgets, recruiting, planning, and management on many levels and importantly relied on the staff underneath me to take on the low-level IT issues and provide knowledge.

Management is taking on a more important role in business in all sectors including IT. The people who fullfil these roles will start being from different backgrounds, and as organisations start to look to turn their IT departments into profit centres, they will take on people from roles like product and project management.

However I fear the day when a sales exec runs IT :)
Is piracy a freemium strategy?
Automated Python education via koans, unit testing and continuous integration
Know Yourself, Know Your Business
OT:

I'm always surprised the Irish aren't more pissed off about Bonno - uses Irish tax code that says artists don't have to pay tax, then goes around boasting how many euro he's raised for the 3rd world, while back home isn't exactly roses.
ClozureCL has been on the App store for a while now. I first downloaded it when I came across this comment on HN a year ago - http://news.ycombinator.com/item?id=3688043
> and anyone who compromises it is in a pretty good position.

You are assuming the VPN host is trusted any more than most people trusts random servers on the internet.
Encrypt the key (ssh-keygen offers you to do so) and backup it to bazillion clouds.
They also made what is now Dynamics AX - which is Microsoft's high end ERP application.
Anything that makes shitty Messages better is welcome. I particularly like how it often fails to set my status to "available" when I boot up.

And then it incorrectly shows that my contacts are offline when they're not.

Oh, and instead of bringing up a contacts list by default, it inexplicably brings up a list of old chats. Why the fuck would I want that? Hooray Apple, total detachment from real-world usefulness.
I don't think that would be of much use, since only it only deals with compression.
London, England. Lead developer.
Contact Ben@barpass.co.uk

Who are we

Bar Pass Ltd, founded by two finance professionals with experience in providing technology within the hospitality industry, growing and advising young companies through from concept to profit. What we are doing Developing a mobile application that provides customers in a bar the ability to browse the menu, order and pay for food and drinks through their mobile device.

Where we are as a company

We are fully funded up to release of V1 and have a number of people looking to back us after this point. We have had a several positive meetings with target chains of bars, that are keen on our solution and see it as a higher quality vision than our competition. We are well connected within our target market and have some very senior industry players keen to take active board positions.

Who you are

You will be working full time as CTO, working at our offices in London. You will be responsible for defining and implementing our web and mobile strategy. You will eventually have the opportunity to form and lead a larger team. During early stages you may be required to manage contractors to help build out some parts of our solution. Core requirements: > Comfortable being the sole internal developer working on a new product from the ground up > Experience with both back-end API development and front-end mobile application development > Back-end architecture and RESTful API design & development to support consumer iOS, Android and Web apps. > Work on integration with payment processors and social networks > Experience building solutions which are fast, reliable, flexible and scalable > Experience building for iOS in Objective-C > Familiarity with Agile/SCRUM and TDD practices > Continuous Integration, cloud based deployment and other DevOps/SysOps understanding

What we offer

Dependant on experience we offer a competitive salary and equity. The chance to get involved with a great business from the beginning and decide what we offer to our next employees.

Contact Ben@barpass.co.uk
The national monthly [1] and state annual average [2] "alternative measures of labor underutilisation" stats are easy to find, but do you know where to get monthly or quarterly data by state, or better, by county?

[1]: http://www.bls.gov/news.release/empsit.t15.htm

[2]: http://www.bls.gov/lau/stalt.htm
It is the same format as gzip (deflate).
Sure, but we're programmers, so we advocate coding! That doesn't detract from EEs advocating for electronic skills or farmers advocating for agriculture skills. We don't all need to push everything.
> But they never seem to notice that we have been living in an age of untold abundance for quite a while.

That's probably because they're too busy trying to find a job, pay off their debts, find health care, or all the other things needed to live.

_Some_ people have been living in abundance, not most.
FindSounds
You fail to understand that true security is not about passwords but control.

Disabling remote root login,

1. cheaply reduces attack surface

2. necessitates assigning administration rights to specific persons and roles.

3. greatly increases command visibility and value of audit trails.

4. combines extremely well with disabled terminal shell over SSH

5. can reduce (unnecessary) system resource usage.

Etc.

There are very good reasons why this practice is standard. Unless you are specifically creating a test or honeypot box of some kind, you would be foolhardy to ignore it.
Probably the same people who want VGA as it what the corporate world use.
4) The CEO and any other execs involved in the hiring process don't know enough to hire for the position properly. Anecdotally, every single case I've seen of a non-technical Engineering / IT director (multiple, first and second hand), this has been the case.
http://dotfiles.org/.bashrc
I recommend Chef - http://www.opscode.com/chef/
Re 2 yes that is true. You need to build this in to your maintenance.
I do have the same opinion, It seems that like a miracle to me - it is not backed by hard evidence.. for any scientist it will feel like just another case of "Black swan"..wrote about..
http://www.machb.io/2013/its-hyped-up/
Being a Biologist, the viral infections and its treatments are as vague and treatments are not reproducible..
In security, this is becoming more and more the case. A lot of the CISOs (equivalent to CIO / Sr. Director of IT, but for Security) have CISSPs these days.

I also haven't run into a Director of Network Engineering that wasn't a CCNP or higher for about 5+ years now (this wasn't always the case)

I think the major challenge for "Director of IT" is that it can comprise a heckuva lot of disciplines. Even for a small company - you are looking a BizApps, Back Office Servers (Exchange, AD), Oracle DBAs, Network Engineering, Telecom, Desktop Support, ServerRoom Operations - and all the political pain associated with managing all the various interests that want things their way...
That's interesting. I know a bunch of people involved in startups (engineers and otherwise) and I can say that every single one of them I haven't met in a professional environment smokes pot at a level I had never seen before. The amount of expensive smoking paraphernalia I've seen laying around (and being carried around, which I found quite interesting) is phenomenal.
Seconded.

Autobanning always causes trouble if enough people use the server from one IP address.
The Irish I have talked to have little time for him when the topic comes up.
No, kroner doesn't translate to dollars anymore than inches translates to centimeters.
apt-get is most definitively not idempotent without a lot of care. It will upgrade packages if a new version is available, and such upgrades can have widespread implications.

Otherwise I agree with you - Puppet/ Chef etc. are overly big on ceremony for me. We "only" use about 100 VM's on about 20 physical servers at the moment, so it's a "simple" setup.

I think where people get the most value out of systems like Puppet and Chef is if a lot of their servers or VM's have simple enough requirements that they can largely use "off the shelf" community provided configurations. The more customisation you need, the more the leve of ceremony starts biting you. The more you can rely on ready-made scripts, the more those apps help you because of the size of their communities.
That doesn't bother me any; U2 has generated tons of indirect income for Ireland via tourism and overseas awareness of Irish culture (and products and services). That's the whole point of subsidizing the arts via the tax code. Most artists are earning much more modest incomes.

Things are not exactly roses in Ireland at the moment, but it's a long, long way from being a third world country.
What's the nuance here?
"Unless those NASA guys are superhuman designers, which I guess could be valid hypothesis."

They Write the Right Stuff [1] - a little old now but worth a read.

[1] http://www.fastcompany.com/28121/they-write-right-stuff
Engadget Interview: Jolla CEO Marc Dillon at MWC 2013
According to themselves they "spend it overseas".

http://www.winamericacampaign.org/
Apart from what others said, perhaps faster downloads also would lead to better user retention.