skysight-inc/HackerNews huggingface dataset:
This is one of the few areas where us entrepreneurs can learn from enterprise. You never see large software companies talking about their technology; they sell "solutions". They've learned over the years that the customers don't give a rat's left buttock how it gets done, so long as it gets done well. The good ones know that they're not selling technology, they're selling a solution to a problem you have.
This is a very good point, and is the sort of situation where API tokens can come into play and be useful. A client can make a single request to "open a session" and receive a short-lived key that is used as the password credentials for subsequent requests. Store active keys - since they are short-lived, offline attacks are less of a concern and you can probably choose to not slow-hash them. When the token expires and a request fails authentication, the client simply requests a new one and retries. The token lifetime is a much easier adjustment for which to weigh security versus performance/load considerations, compared to against broader password storage security.
>>The readme does say how to add new programs, but it doesn't say where the original programs of the shootout are in the distribution.<<

You seem to have found the benchmarks game "original programs" in the project tarball.

People measure their own programs with bencher, not the benchmarks game programs -- it's not dependent on the benchmarks game programs.

>>I had to remove everything in tmp/* because...<<

#5.3 #5.4

>>what variables are available for the commandline strings aren't written anywhere<<

my.linux.ini [commandlines]

>>testrange from your CSV files, as the ones used on the website aren't distributed anywhere<<

nanobench/makefiles/u64q.ini
nanobench/makefiles/u64.ini
nanobench/makefiles/u32q.ini
nanobench/makefiles/u32.ini

>>you're free to continue ignoring useful comments<<

You're comments are useful because they show what someone might become confused about.
Hi Dave,

Would be nice to have some offline conversations - can you drop me a line? You can get my email from my github pages site.

thanks,
Ian
Actually, lots of people here on HN have been inquiring about Trello's business model because they, presumptive consumers, are running businesses and don't want to use a service that's free today and might be gone tomorrow. The fact that Trello now offers a business plan increases the perception of stability.
Not only does it give you a surface for jam-and-buttering...

Yeah, but if you drop it on the floor it is guaranteed to land jam-side-down 100% of the time.
How Etsy Increased Diversity in Its Engineering Department [video]
That must have been very near release, since I played (2003) it's always been only one character on an account can train skills.
Google Hangout with KAL, cartoonist from The Economist (Kevin Kallaugher)
The Remarkable Decline of the WSJ's Long-Form Journalism
As someone who has commissioned Web sites from agencies and usually sits on the client side, I'm going to make a few counterpoints:

> The worst part about it was that most of this software we were debating was free and open. There was no cost associated with the platform.

That last sentence. Arrgh. There may be no upfront cost, but there is certainly a cost involved in on-going maintenance, security, expandability and flexibility.

A lot of companies I've worked with on Web projects have come from proprietary or closed source CMSs and have suffered trauma when the only person who knows how it works disapears or the company that provides it has upped the license fees.

So they move to open source. Even so, the following question applies: "If this guy disappears, how maintainable will it be, what's the size of the community? how stable is it? how extensible? If is a complex nightmare of spaghetti for in-house staff to manage. How will I integrate it into existing systems

So yes. I love to hear your excellent plans for the business and your thoughts on how to improve customer engagement etc, but I also want to know that you are a technically competent firm which can articulate the reasons behind your choice of technology in terms better than "Oh, we know Drupal/Wordpress/Joomla and therefore that's what we use for everything.
I don't understand the whole "things were different in the 1800's when they wrote the 2nd amendment" argument. Isn't that why they added the whole Amendment process? The process has been used twenty-something times to great success.

I'm frustrated with people advocating reinterpreting an aspect of the Constitution when they don't have the popular support needed to amend it.
I have been investigating a switch from Google Maps inside pressureNET to OSM for a while but haven't interacted with them yet. Thanks for the tip, I'll look more into it!

OpenWeatherMap looks fantastic - I definitely want to use their API in pressureNET. Thanks, I hadn't seen this before. We really want to focus our work on collecting large amounts of pressure data, so building top-level UIs and other features like regular forecasts hasn't been priority. But this API looks great.
2 and 4 will be solved by 1. Currently very very few places accept BitCoin as a form of payment and because of that the value is disconnected from everything but the commodities market (MtGox and other currency exchanges). Normal commodities have uses outside of stores of value, E.G. gold is useful both for aesthetic reasons (jewelry) as well as functional ones (good conductor), which help to add stability to their values on the commodities market. Because the current primary use of BitCoin is solely as a commodity to be traded, the "value" of BitCoin is massively subject to fluctuation, minor changes in investment by the commodities market lead to massive swings in value.

If BitCoin can survive long enough to see more widespread adoption of it as a currency that should go a long way towards helping to tamp down the swings in value we currently see occurring.
Word "Enterpreneurs" should be replaced to "author of this post".
Except gold has intrinsic value for various applications(though that value is much less than the market price).
This isn't a problem specifically with HTTP basic which at the end of the day is just a HTTP request header with an encoded string.

If you're using basic auth and a long random server generated key as Stripe does instead of a user supplied pasword performance is a non issue as you'd SHA2 it in your DB not bcrypt.
From what I understand, it's if you do too much pvp on players who don't want to pvp. I guess there's some sort of flag to turn on if you want to pvp, a little like World of Warcraft.
MOOR: Massively Open and Online Research
The 419 scams can begin!!!

(URGENT BUSINESS ASSISTANCE STRICTLY CONFIDENTIAL)

COMPLIMENTS OF THE SEASON

Good Day!

My name is Sir Akadayo Olemobado, I am the manager of bills and exchange at the foriegn remittance department of the (Mt.Gox Exchange ). I am writting you this letter to ask for your support and co-operation to carry out this transaction. We discovered some abandoned sum $15,500,000(FIFTEEN MILLION, FIVE HUNDRED THOUSAND BTC ) in an account that belongs to one of our foriegn customer who died along-side his entire family in march this year in a terrorist train bomb blast in Spain some few months ago.Since this development,we have advertised for his next of kin or any close relation to come forward to claim this money,but nobody came yet to apply for the claim.

To this effect,i and other official in my department have decided to look for a trusted foriegn partner who can stand in as the next of kin of the deceased as we cannot do it only ourselves and claim this money.We need a foreign partner to apply for the claim on our behalf because of the fact that the customer was a foreign and we don't want this money to go into the treasury as unclaimed fund.

Every document to effect this process will emanate from my table and i will perfect every document to be in accordance with the banking law and guideline,so you have nothing to worry about and we have agreed that 30% of this money will be for you,while 10%will be for any expenses incured on both sides wihile 60% will be for my colleagues and me. If you are willing to help us,please indicate by replying this letter and putting in your name, private telephone number,fax and permanent residential address via my private email address below.I awaits your immediate response to enable us start this transaction as soon as i recieved your reply,i will send you a text application form for immediate APPLICATIION OF CLAIM.

Please contact me even if you are not intrested in my proposal to you to enable us scout for another partner in the event of non-interest on your part. Thanks for your co-operation

E-MAIL :Akadayo_Olemobado@netscape.net
Mr Akadayo Olemobado
This is indeed an important point to make, and I'd never considered it -- thank you. While I think background checks should be mandatory on all gun purchases, I would agree that as a citizen, to support the second amendment, gun purchasers should not have to pay for these background checks and licenses entirely themselves.

This is a time when, though it might not be my personal taste, I believe that a portion of taxes should go to either subsidies or the elimination of fees for these sort of checks.

Such a program would ensure that gun owners chip in (through their taxes), and that a portion of everyone's taxes would be used to ensure both safer gun record keeping and the ability of gun ownership & transfers.

I know nobody likes the idea of more taxes, but does this seem an equitable solution? Interested in your opinion.
I'd like to know what the best practices with regards to security are for using pip, or installing packages in general.

How do you verify package integrity? Do you simply pray that PyPI isn't compromised at the moment, or do you download your packages from Github instead, because the main repositories have more eyeballs on them?

How do you do security updates with pip?

I'm using apt-get at the moment which gives me security updates AFAIK, but my need is growing for more recent versions and certain packages that aren't accessible with apt.
I don't use mobile sites, so I don't have any perspective on that. I'm just irritated at all the things that are mobile-only when they don't need to be. The best way to get the web to look better on mobile is to encourage developers to start thinking about the web again.
For a certain class of customer you are absolutely right. There is another class of customer who get enraged when you bang on about bloody solutions. They know what they want - a hammer, and having a salesman blather on about the company's wide range of percussive nail-driving implements for your particular vertical' will irritate them.
It will fall jam side down 100% of the time even if it's not a Mobius strip. It's the law.
I recently learned the lesson about global packages. I thought it would be so nice to have all packages readily on hand, but now startup time is about 15 seconds of crawling the filesystem looking for files (over NFS).

Go is looking more attractive day by day.....
Actually... Why do they want to pass this bill in the first place?

I mean... The things they want to do are comparable with monitoring all phone calls. Listening to all phone calls and trying to catch dangerous words in the conversations. Why nobody tried to do this with phone calls, but now they try to do this with on-line messaging and social networks?
In addition to what other have already noted, one other thing to keep in mind:

The Tor exit node that happens to handle any particular request gets to read the relevant traffic (since it is handling the request to the actual end server on your behalf). So, for instance, if you're logging into some bulletin board via unencrypted http, the Tor exit node handling the login request gets to see your username and password on that bulletin board in cleartext (as can all the other net infrastructure between that exit node and the bboard itself).

In one sense, this doesn't change your risk profile; if you're logging in over unencrypted http directly, you're also at risk of sniffing. However, the risk may be enhanced with Tor; there are persistent rumors of law enforcement and intelligence agencies (and others with darker-colored hats) running exit nodes which deliberately sniff the traffic they're proxying to see if something interesting comes up. It also might be possible for such a hostile exit node to mess with the content of unencrypted traffic, though I've personally heard no rumors of that.

Note that if you're using Tor to proxy encrypted traffic (https), the exit node sees only the encrypted data stream, which is as secure as the encryption you're using --- and the official Tor browser bundle includes the "HTTPS everywhere" Firefox plugin to try to get you to use HTTPS where available.

Additionally, if you're using Tor, anyone monitoring the net segments between you and the entry nodes you hit may be able to tell that you're using it (though they won't be able to tell what you're using it for). If the local secret (or other) police frown on that sort of thing in principle, it could be trouble.
"The Amended Complaint further alleges that, in or about the summer of 2010, Full Tilt Poker’s payment processing channels were so disrupted that the company faced increasing difficulty attempting to collect funds from players in the United States. Rather than disclose this fact, Full Tilt Poker simply credited players’ online gambling accounts with money that had never actually been collected from the players’ bank accounts."

Blaming the Federal Government for shutting down a Ponzi scheme before you "got yours" at the expense of some downline? You're deluded, incredibly dishonest, or both.
>How is it that we can be enraged over a privacy bill that erodes the Fourth Amendment, but completely fine with a gun control bill that erodes the Second Amendment?

Because while just about everybody publicly holds the Constitution up as holy scripture, they really just care about using it to get what they want. I don't care about the right to bear arms. I think it's a dumb, outdated provision that never should have been added in the first place. Speech, privacy, not being forced to incriminate yourself - these are all immensely important rights that every human should have. Owning weapons, on the other hand - what are we, cavemen? And don't tell me that it's so we can fight the government if it ever gets too much out of hand. We're long past that point. Any serious attempt at revolution today would be over in less than a week, the leaders assassinated by unmanned drones.

So I will play lip service to the second amendment insofar as I don't want precedent set that will weaken the parts of the Bill of Rights that are actually important. But don't tell me I'm a hypocrite because I care about privacy and also think that violent criminals shouldn't be able to easily buy guns.
The YC job postings are relevant HN. They may seem like bacon to people who're not looking for a job (or are not interested by the YC club, but they are still a part of HN/YC.

TechCrunch is a different issue. Yes, cross-posting everything here through ghost accounts is a sucky move, yet their subjects are "relevant" (when it's about tech, silicon valley life),...

And I wouldn't go as far as say "People don't post on HN for extra eyeballs", but there's a difference between a member advertising a tech product and someone who creates an account just for advertising a non-tech product. If not, what's next? Anybody here trying to sell his car?
Scala Versus Java
The pyres web interface (where you can view job status) is built using itty.

edit: looks like they're using flask now, I don't see itty being used anywhere. They also split the web interface (resweb) into a separate project, so pyres doesn't depend on a web framework now.
Ah, nice feature addition. I recently started using DynamoDB and was wondering why the range was restricted to only one field.
Raspberry Pi colocation
That's fair and I agree. I wasn't sure how well all the game industry jargon is in the tech industry. Catan is probably the most popular Euro-style game.

Many reviewers have said that players who love Catan will love Relic Expedition, so I thought it seemed like a good description.
> No. I said they solve some problems and don't solve others.

Yes, they don't solve the problem of distributing messy UNIX software with complex and unstable dependency graphs, written for systems with anemic base libraries, that install a litter of files all over your system.

That's a good thing. In fact, I'd say the world would be a better place if we'd never implemented package managers and instead UNIXes were finally forced to clean up their mess. The real world doesn't work that way, so instead the best we can do is create new systems that don't inherit the mistakes of the old.

> I am yet to meet a non-technical Linux user who has experienced what could be described as "package management disaster". Software management is mostly automated for their use cases.

Use cases like, say, trying a new piece of software that hasn't been packaged?

Getting updates directly from the vendor?

Being able to have their vendor-supplied applications continue to work across major OS releases?

Or how about from the vendor perspective, where we have to deal with mistake-prone volunteers packaging up our software, inconsistent and incompatible libraries and an ever-shifting dependency graph. The only reason anything ever works at all is because there are hundreds/thousands of people whose sole contribution is to keep the entire dependency graph afloat. Just how many human hours do you think are spent on software packaging overhead?

> I solve my problems, you solve yours. Deal with it.

Thanks for elucidating exactly why Linux developed shouldn't be anywhere near the design process for consumer software like an OS.
That's true to a point but in my experience clients can be fairly insistent about using a particular technology, even if it's a bad fit for the problem.

I guess it's probably because they know that once the project is done they can hire one of the thousands of $8/hour teenage "Wordpress/Joomla experts" for maintenance.
I was under the impression that Django projects couldn't be deployed when they were bdists (because Django doesn't use pkg_resources).

I agree the annoyance wrt needing the same environment as the target. We tend to have two platforms that are supported: CentOS 5.x and MacOS. Keeping the build machine on the same platform as the deployment machines is simple. Creating the eggs for MacOS developers is more difficult, but still not too bad. That might seem odd, since we could just use pypi.python.org, but we have an internal PyPi server so that we can easily share internal libraries. Adding a line to a project's setup.cfg makes this trivial for the application developers.

There's another annoyance with sdists. I don't want to compile during deployments. So, I build everything that can possibly be built as an egg as one, and fall back to sdist for everything else. I push those to the internal PyPi server. At deploy time, I create a virtualenv and easy_install the appropriate artifacts. I know the correct artifacts because I `pip freeze` the requirements at build time.

We're also extra paranoid, so our stage and production VPCs are on different AWS accounts. We have one PyPi server per VPC and flow artifacts forward as needed.
Sorry for being rude, but I do not understand your reasoning. Yes, technical people often learn quickly - but only if they are interested in what they are learning and if it is reasonably "technical". A "technical" person might have hard time learning social skills that are easy for most people.
benefits of electricity are generally priced in

The societal benefits of cheap electricity are no more "priced in" than the negative environmental externalities of coal use.

You can't put a benefits dollar value to society on all the women in the work force who would otherwise be preparing a lot more meals from scratch. You can't put a benefits dollar value to society on the productivity gains from all the people who would have died of childhood diseases that we have cures for thanks to western medicine.

You're obviously in favor of accounting for one factor in the cost/benefit analysis of coal power and ignoring the others. I think it's hubris and folly to do so.
Funny Penguin Slap - Turn Your Speakers Up
If I wrote an article about an Internet-famous real person claiming I made them up, would that get their Wikipedia page taken down?
"I’m not against types, but I don’t know of any type systems that aren’t a complete pain, so I still like dynamic typing." -Alan Kay
The Chinese are very fond of coal as well...
The ability to "project some or all of the table's other attributes into a secondary index" smells a bit like a materialized view in the description.

I am often thinking in a star-schema direction (too much time data warehousing) rather than normalized designs. For DynamoDB, I stumble around the primary key for such setups given that a rather large subset of the tuple values in a star schema row (plus a timestamp) actually represent the primary (compound) key for the metric measurement.

Probably need to re-think all that sometime.
Kito Corp - Deutsche Boerse CME Consider Deal.
IntelliTrace is far more powerful: http://msdn.microsoft.com/en-us/library/dd264915%28v=vs.110%... .
If there are better scope and privacy controls, then what is the issue? The bill has a valid purpose, people are complaining because of the fear of abuse because the language is vague in parts.
What you describe I would describe as spam. Obviously there are wildly different informal definitions of "spam" in use. By my definition, Linkedin is definitely a spammer; I get frequent email from them and I don't have, and plan to never, get an account.
Bitcoin provides for secure transmission and storage of value independent of a trusted 3rd party (and backed by the largest distributed super-computer in the world). Isn't that enough?
$0 on BizSpark, DreamSpark, etc.
At the company I worked at previously, the case was often made that java should be used because it's easy to find java programmers. That sounds plausible, but in practice we found it very difficult to find good java programmers. Perhaps to some extent it's even harder than with other languages, because a lot of really talented people are drawn to new shiny ecosystems -- not saying java folks aren't talented, but as a java programmer myself, I see many of the most driven/passionate people wanting to get away from java.
Not at the cost they are paying. A coal plant is an order of magnitude cheaper than nuclear, and storage of wind energy isn't exactly a solved problem compared to coal / gas.

Every third world country will use the exact path the 1st world used to get to where we are because it is proven reliable, doesn't cause political turmoil (nuclear), and is cheap to implement. If the 1st world wants it to be different then we have to provide the game changing technology. That has not been done.
StackMob Named Facebook Technology Partner
"You type in the wifi SSID and password and myglass presents you with a QR code that you scan in with Glass."

There will be so many use cases for QR codes I bet!
You can "carry" out a great much more from a theft of virtual money than you can at any brick and mortar bank. A million dollars in bitcoin wallets versus ten thousand heavy, bulky dollars.
Lucidcharts has promise but their subscription model isn't working out for business use in large organisations.

Lucidchart seems to target large accounts but their business model seems tuned for small businesses.

Companies wants to centralize licensing and not add yet another vendor. Since you can't subscribe through normal licensing channels, the tool isn't widely adopted.

For personal use, I can't justify the subscription cost and I tend to avoid subscriptions for anything for better budget management.
Reinhart and Rogoff Fight Back
Calling env/bin/python directly, as opposed to `source activate` is very handy for things like:

* bash command line

* cron

* or daemon manager like supervisord