skysight-inc/HackerNews huggingface dataset:
"> Even worse, some dropped C, Lisp(Scheme) or others for Java.
Again, tools."

No, they are more than tools (on itself they are)

They are the sole, or the most important member of a certain paradigm of programming.

To learn how to fasten bolts you need a wrench. Any wrench will do of course, but you need a wrench.

Now, if there's only one 'tool manufacturer' you go with that

Or you expect a dentist to not use tools and only have theoretical knowledge of them in school?
I don't get your post. Are you saying the two positions are inconsistent? How?
The issue is lack of key management for ssh keys in a lot of environments, especially for accounts not always used. You can wrap protection around it, but you ay be better off just using a different authentication system (Kerberos? Something else?) in large environments.
GP probably meant effective medicine, not a 'health care system that is shiny and fair'.

If you measure historically, being able to buy a bottle of aspirin is some sort of miracle. Never mind vaccines, treatments for disease or antibiotics (many vaccines and antibiotics are more or less free).
‘The Shawshank Redemption’: A Simple But Powerful Message
that's because you smoked indica instead of sativa.
If this happened surely the benefits would be two-edged. Ubuntu/Linux would unlock all the potential of sharing applications of Android, while Google would suddenly gain the ability to run a desktop OS on the android stack.

This is obviously purely theoretical, but would bring the ubiquity of Android to a whole host of new machines if used in a desktop context. That would make the whole experience quite interesting and exciting.
These news just might have increased the traffic a tad.
InfoWorld | Epic codefest: 7 programming languages in 7 days
Today's real-time data, tomorrows forgotten dream
From a user perspective I wish you guys would switch to something better like bit torrent (at least offer an alternative torrent download).

I almost gave up before playing the game when an interrupted download meant that I had to start again, and it is pretty frustrating not even maxing out my slow internet connection at peak times for patches.

The fact that you don't have any kind of diffing solution seems like absoulte madness to me.
Apple’s Planned ‘IWatch’ Could Be More Profitable Than TV
Allow users to test drive the design of your site or product
As the other comment say, Security is about risk mitigation. Risk in turn is about identifying threats, and attack surface is avenues where that threat might cause damage.

The problem I have with the articles claim is that limiting roots access in ssh is not improved security. It does not acknowledge the threat or attack avenue at all, but rather tries a blind approach. The threat is script kiddies. The attack avenue is bad passwords combined with password authenticated use of ssh by root. One can then either fix A) the password, or B), the access root has in using ssh. I pick option A and thus have have good passwords that secure even against internal users, rather than having bad passwords and limiting roots use of ssh. Having good passwords, and disable ssh for root is redundant and a expensive limitation for no security benefit. Having bad passwords and disabled ssh is bad security practice, as bad passwords should by policy be impossible.

> 2. necessitates assigning administration rights to specific persons and roles.

If you need to have different assigned administration roles for a single installation, and guarantee a correct audit trail, you should look into physical tokens or at least a kerberos+ldap setup. "root" user should then not exist as something that anyone should use. however, if you do not care about guaranteed audit trail (and to be honest here, the common use case does not require kerbros+ldap setup), you can add something like environment variables to indicate which user is logged, and ask administrators to document changes to the system.

> 5. can reduce (unnecessary) system resource usage.

This goal can be mitigated in several way. Thus in a honest discussion, this should be the target of it and not the pretense of increased security.
Now we need a Post Mortem on the Post Mortem, as it is now down

"Oh noes! Something went wrong."
Jailed cyber criminal hacked into prison computer system from Jail
Yes -- FISMA. There are both requirements that the implementations be FIPS 140 (although software is ok) and other requirements. I don't think I've ever seen anyone use a securid without a password, so the password complexity requirement is satisfied there. (It wasn't that an auditor failed it, but it was said we'd need to fix this to avoid any issues, so enh)

I don't have a particularly high opinion of most security audit standards, though.
"Taxes shouldn't be too high, and shouldn't be too low" is about the most precise statement anyone can make about the Laffer curve and still be able to have it hold up in the face of the real world.

Pardon me if I'm not bowled over by that.
To transcend your genetic programming to create more of you takes a kind of self control few people in this world can muster, I don't even think I can do it. The problem is, the moment you achieve it, you immediately remove yourself from the gene pool, so your kids don't have your hardware. However, you do augment the fitness of your collective, as if they were your kids, then your ability to transcend desire to procreate is somewhat selected back into the genome because your presence enables human life (and continued reproduction) where it was previously not possible.

Wearing these electronics in front of your face makes you un-datable, and if you are completely OK with that, then you're a candidate for being a very-early adopter of the next thing that's going to be bigger than the invention of the Internet.
And back up.
I love the reporting in that article. No details what so ever; they basically just reiterated the headline several dozen times for content.
I used to go down the repository/unit of work route but I found that just adds loads of unnecessary abstraction and complication. Now I simply expose the data context through an interface and inject that into my controllers. For testing I use a fake data context.
I'm sorry, how is this relevant to the subject at hand?
"* If we do want to work towards that state, what then does it mean to live a good life?"

We solved that a long time ago. Rich people's offspring (ancient equiv of trustafarians) got an education to learn how to live the good life. Aka the liberal arts. Philosophy, etc.

There is a long corrupt history afterwards where at least some businesses wanted the aristocracy in their corporation, so suddenly "gettin an education" becomes an aspirational good for the middle class and down. Then it turns out a world owned by very rich philosopher kings works pretty well, you can't have a world operated by philosopher peons, so "education" is very carefully conflated with "training" and for prole-schools has completely replaced education with training (see vocational and tech schools) Then the middle class has to have ALL kids pay ANYTHING at all, ANYTHING, in order to keep up with the other kids who are already paying ANYTHING they'd like to charge as tuition. In fact the .gov has their backs, raise tuition sky high the .gov will guarantee the loans.

So kids (aka 20-somethings) today are poor, because for generations they've been willing to pay "anything" for credentials so the monopoly-ish providers are more than willing to charge "anything" (kinda like health care). All because GGG-Grandpa lost his job to Sir Earl Duke of BumbleF and politely blamed it on his lack of .edu rather than being a peasant where Sir Earl is a Duke. Its the long term effect generations later of monarchy-phillia or whatever its called.
An exercise in Refactoring - Playing around with Monoids and Endomorphisms
Why would knowledge of development, and git, have anything at all to do with if someone wanted this kind of data? I can't imagine why you would draw a connection.

It is raw data. It isn't a brochure or a printable map or anything else directly consumable. I am making an eminently obvious statement, so why is this surprising to you?

Secondly, what is so funny about the parenthesis? What is your point?

I sense that you're trying hard to be snotty in some way, as if you've done your part against elitism, but the end result is rather bizarre.
To be fair, if you get something wrong in C, your computer might catch fire (not really, but you see my point. C will let you do a lot of things that you maybe shouldn't be doing, and getting something wrong can have more consequences than it does in many other languages. Accuracy is very important.)
As a post-doc, I think you're deluding yourself or they're fooling you :)
Help collect, sort & share info about unaccompanied children in emergency
RapidFTR is a versatile open-source mobile phone application and data storage system that seeks to expedite the process of reuniting by helping humanitarian workers collect, sort and share information about unaccompanied and separated children in emergency situations so they can be registered for care services and reunited with their families. RapidFTR is specifically designed to streamline and speed up Family Tracing and Reunification (FTR) efforts both in the immediate aftermath of a crisis and during ongoing recovery efforts.
>UK government is chairing the G20 and is pushing "fixing international corporate taxation"

That's rich, considering London is one of the biggest tax havens around.

http://www.guardian.co.uk/money/2007/jul/08/tax.business1
Unfortunately EF doesn't provide a interface. Unlikely I know but what if you swapped your ORM, wouldn't that mean a lot of refactoring?
Just wanted to say good job on being clean for 9 months. Keep at it.
They're subheadings, not 'random words'.
This is Python so threads don't run concurrently because of the GIL (no, using C/C++ code where you can release it is not in the scope of this article). Save yourself the trouble and use multiprocessing.
This article talked about letting go of a project in a start-up, but the lessons learned apply in non-start-ups, as well. Everyone has customers to consider - even though the customer doesn't always fit the traditional definition of a customer. No matter how brilliant the project, if customers don't want it, it doesn't matter. And figuring out - and implementing - lessons learned is always a good idea.
Show HN: My First Podcast (ContentForest Talk)
Life Inside the Aaron Swartz Investigation - Quinn Norton
You define iterations like something small. In general, iteration can mean something huge, like full re-work.

I mean, improvements can be gradual or revolutionary. Still it is iterative process.
Very related: https://news.ycombinator.com/item?id=5305073 A tech from Posterous got in contact with members of ArchiveTeam via Twitter https://twitter.com/vincentchu/status/308467595416334336 and then joined IRC: http://pastebin.com/YB0emvnY

TL;DR Posterous and ArchiveTeam are working on a way to backup Posterous before the deadline without accidentally DDoS'ing it.
That would actually not be a bad thing. After using Android for a while, I really how applications cooperate so seamlessly using intents. I find myself frequently wanting to use intents on my Linux desktop, both as a user and as a developer. It feels almost like shell pipelines for the whole OS.
Silicon Alley Beat - NYC Tech & Startup Events - March 4 - 8
Why did they wait until 2013 to tax something that happened in 2002? That reflects poorly on Denmark.
Show HN: My First Vlog (Full On)
You should really consider using SSL for at least the sign-up and login pages. People are transferring personal data, after all.
Yes, I use the media buttons constantly, play/pause in particular as well as forward. I'm sure I'm not the only one.

To make this post more valuable, here's a link to the script I use to make it work with Spotify/Ubuntu: http://code.google.com/p/spotify-notify/
Internet is improving. UNIX is improving -> Linux, etc. LISP? I'm not sure whether it still alive.
As a non-native english speaker I assure you everything has a cost even a supposedly universal good thing like english. The more fluent I am at english the more my thought process changes. There are already cases where I find myself unable to relate to the simple joy that people around me seem to get for free.
Discouraging root usage is common in desktop and laptop environments, and for developers on production servers. For admins on servers, root use is basically required for all commands, and sudo would not improve the security at all.

Commonly, I track access through environment variables (configuration on the ssh client), and documentation that each administrator do after finishing a task. As one should not recruit administrators that do rm -rf /, tracking (blame) is of an lesser importance and documentation a much higher one. If more was required, I would go with kerberos+ldap approach without anyone using local root user accounts at all.
What Women Want at Work [Infographic]
I'm from South Africa and this simply demonstrates the extent of corruption within our government departments. It is not uncommon for government departments to inflate tender budgets so as to benefit from kickbacks. I'm appalled by such such acts, firstly as a South African citizen and secondly as a hard working web developer.
I actually hope the development company is stuck with the bandwidth bill. Should at least take a little bit off that ridiculous profit.
> An accelerometer isn't very useful for a tower PC, is it ?

It could help to detect if the kids thought it was a toy horse
IDbSet<T> is enough.
If you swap your ORM, you're swapping mindset more than just methods, unless you're mapping ORM entities to POCOs in your repository object.
this. Everytime I check my logs there's tons of failed tries to port 22 yet none to the port ssh actually runs on. Which keeps the log with failed logins clean.
Watch 15,000 volts ripple across plywood in stunning time-lapse video
Sony Hits Beyonce File-Sharer With $233,000 Damages Lawsuit
I honestly do not understand why you need a deploy account with sudo access.

I much prefer a deploy accound which DOES NOT have sudo access. I add firewall rules transparently redirecting 80/443 to non-privileged ports that the webapp is actually listening to. Hence no need to be root / sudo'ed for the deploy account.

You then could get a bit fancier and set the login shell for the deploy account to /bin/false or something fancy (like a fake honeypot shell) to add a bit of "defense in depth" in case someone exploiting a hole in your web server manages tries to drop down to a shell. You'd then use another account to do the (automated) deploy/start/stop/update/patch whatever.

I'd also say that during the first five minutes you should set the default firewalling rules to REJECT anything and then only whitelist what is actually allowed.
"Ntsele told the newspaper opposition parties had an agenda against black businessmen and that the website’s cost was fair."

Yeah, right...
This isn't really criticism of XML, though. You can do a good job of screwing up in any language or format.
I suspect it's referring to how many former Ubuntu users were driven away by Ubuntu's past UI changes. The switch to Unity was particularly disruptive, and alienated many staunch Ubuntu users very rapidly, for example. What's being discussed here sounds very much like the same kind of disruptive change, with the likely outcome of alienating yet more users.

Many of these users who have been forced out of the Ubuntu camp have moved to Linux Mint, because it tends to offer what were the benefits of Ubuntu, but without the painful points. The fact that they're better off now than if they had still been using Ubuntu shows that these types of changes aren't really helping the Ubuntu experience.
It does seem likely that the ARM Chromebook is having some device-specific hardware issues, both due to its cost and because it is lagging behind the other devices in terms of getting OS updates.
> do not use template languages to generate XML.

Small correction: do not use text template languages (Jinja, moustache, erb — which seems to be the one used here considering `%= display_date %>`, raw PHP, smarty, freemarker, what have you) to generate XML. There are templating languages whose primary use case is to generate markup (including XML)[0] and (unless they're broken to uselessness) they should guarantee the output is valid XML.

> Schema-design-wise, the content:encoded and excerpt:encoded element names are deeply suspect, as if someone looked at RSS 2.0, squinted, shrugged, and invented their own ad hoc analogous namespace prefix, rather than understanding the role of elements in XML.

They seem to be using Wordpress's WXR import/export format, hence the wp-namespaced elements. The "content" and "excerpt" namespace garbage comes straight from there according to http://ipggi.wordpress.com/2011/03/16/the-wordpress-extended...

> <content:encoded> Is the replacement for the restrictive Rss <description> element. Enclosed within a character data enclosure is the complete WordPress formatted blog post, HTML tags and all.

> <excerpt:encoded> This is an unknown elementThis is a summary or description of the post often used by RSS/Atom feeds..

Considering the cottage industry of wordpress interaction, it was probably a good move to shoot for interop (should allow posterous exports to be directly imported into wordpress?). Not sure they succeeded though.

[0] genshi for instance http://genshi.edgewall.org/
Very entertaining read. And the lessons he mentions from the 80s still mostly apply.

But the one that caught my eye was point #4: Knowing how to read and understand source code is a valuable skill.

I definitely agree. Nonetheless, having worked in four different countries, it always surprises me to meet so many people that are not actually any good at it working as programmers/developers/software engineers! :-/
Fall on your ass, it's good for you
"human labor ... will have such tiny value as to be worthless"

Hairdressers. Here on HN there is the background assumption that face to face office work is useless and sitting at a desk at home works just as well. Its so entrenched that occasionally you'll get an ultra-extremist counterreaction that of course we all need to work in offices because no multiple office multinationals exist, or some such nonsense.

Anyway, Hairdressers. There's a large fraction of the population who like driving 30 minutes, waiting 30 more minutes, gossiping with the hair lady, and paying $30 for the privilege, and spending 30 minutes driving back home. And they call it relaxing and "spa like" and a privilege blah blah. Personally to show my HN street cred I do the equiv of work at home and spend 5 minutes with a buzz-cut thing and a #3 attachment every two weeks which means my Imperial hair is always between 3/8 and 1/2 inch long. But the world is full of people who wanna spend enormous amounts of their limited time and money for someone else to F around with their hair.

Ditto investment advisors (duh, just push the highest commission), Insurance salesman (duh, figure out the most they can spend, convince them to spend a little more, and be a data entry clerk), real estate (see insurance salesmen, but without the data entry skills). XXX personal services.

If you've ever read the HHGTTG the "B Ark" is not a current social commentary (well, mostly) its more a blueprint for the future. When I/everyone can no longer make money slinging code I'll probably be running my buzz cut hair trimmer with #3 attachment for a line of you goofballs going around the block, for $30 a piece and it'll take you 2 hours and you'll be just thrilled at the privilege of getting a genuine VLM haircut. And I'll take my dough and do equally stupid things like ask my life insurance salesman if I'm spending enough with him, followed by a nice $50 restaurant dinner cooked and served by genuine humans blah blah blah.
It's ridiculous that even with this type of thing happening openly, no opposition party can beat the ruling ANC. We can just hope Ramphele's Agang party will know how to use this type of thing against them.
Are you kidding?

The issue is that the idiots at Apple failed to create a connector (or at least add a secondary connector for video) with enough bandwidth to even drive a single low-end 1080p display (and what about 2560x1600, 3D at 120/240Hz, 4K, multiple 4K configurations?!?).

So, they had use H.264 compression and sell a ludicrously expensive adapter with a CPU, destroying the signal, introducing latency and effectively defrauding their consumers who thought they would get arbitrary and direct HDMI output like you would expect from any reasonable system.
Minimum Viable Product ;)
Your private key should have a strong passphrase. I agree that using a passphrase-less key is bad practice. As for keyloggers, once they obtain your password, they have succeeded. But after obtaining a key's passphrase (which you normally only type in once a local session if using ssh-agent), they still need the key, which may or may not be marginally harder. It's still another step to overcome. So, even if it can be shown to be only a narrow improvement over passwords under certain circumstances, it's a big win in convenience and even security under normal circumstances if done properly. Give it a try, finetune your ~/.ssh/config and you might end up loving it.
Content Marketing Nirvana
No, people like to use alcohol and nicotine in combination.
Baidu rolls out world's first commercial deployment of Marvell ARM server
It was not intended as a criticism of XML at all. XML is a perfectly cromulent standard. It is a criticism of amateurish use of XML.
Schrödinger's Cat could be visible after all
It takes time to uncover that Microsoft had done something tax worthy without telling anyone.

Microsoft bought a danish company, then sold a huge asset from that company to another Microsoft owned company in Ireland (probably for tax reasons) then told the danish tax department that the asset was worth less than it should have been, thus avoiding large taxes.

This all takes a while to uncover, then it has to be double checked. Then you have to talk to Microsoft about it....and then you can tell the press about it.
> It's ridiculously slow for me.

Installing WP Supercache is an extra R40,000,000.
If someone logs in directly as root, how do you track root access?

By their SSH-key and IP address (both of which are logged to a remote syslog-server).

Given that you should be discouraging root use and using sudo or scripts to automate admin tasks, why are you encouraging admins to log on as root?

That is a false premise. I'd never encourage anyone to use "sudo" because it's a source of errors; people get the escaping and context wrong all the time, doing things that they didn't intend, and wasting precious productivity on getting the incantation just right.

It also doesn't add any meaningful security, it's a red herring.

If you need a dependable audit-trail then sudo is worth zilch. In that case you're looking at SELinux, auditd and friends.

If you don't need that trail (which is most people) then sudo is a ball on a chain and a false sense of security. Local privilege escalation exploits are dime a dozen, any shell-account can be upgraded to root by a dedicated attacker anyway (sometimes via sudo itself, as seen in in the recent sudo exploit...).

Oh, and let's not forget: If you enable a user to do anything meaningful with sudo then that normally includes giving him a way to write arbitrary files as root...
Which is everywhere (xhtml, anyone?)
> Get off my lawn, you kids.

Isn't that what they were doing?
I love the performance of these larger sensors, and these demos blow everything I've seen out of the water, but I'd never carry that kind of gear around for any of my purposes (the size and weight more than the price, though that's definitely a large factor).
Inside GoPro: Silicon Valley's hottest hardware company