skysight-inc/HackerNews huggingface dataset:
> ...The implications to any other form of Govt gag orders (think sealed court records) would be immense.

Gag order also of Greenberg/Guardian, then what are ES' options?

> "....The Ministry of Defence has issued a D notice preventing the UK media from 'publish[ing] information that may "jeopardise both national security and possibly UK personnel"'.

http://www.guardian.co.uk/world/2013/jun/17/defence-d-bbc-me....

what's left-- pastebin, Kim Dotcom, Prate's Bay, that New Yorker thing(no, gag order), Anonymous posting onto defaced sites, Wikileaks, ... ?
You could consider switching to a Paas - https://www.openshift.com/open-source

http://www.xenproject.org/ is nice too
You should give Apache OpenOffice a try.
They've currently have an exclusive right on IBM's Lotus Symphony code, which would make a great addition to any open source office suite.
TypeScript is far better suited than CoffeeScript if your goal is ES6. TypeScript currently outputs as ES3 or ES5 depending on a flag. ES6 to follow. It's very much up in the air with CoffeeScript.
Are BTC different from accepting any other non-cash asset as payment? It's not really a foreign concept, just a new example of it.
No particular reason. Mostly just time, I want to get a color picker like that in there someday.
What Happens When You Light a Fire in Space
It's worth noting that there's a big difference between appreciating and agreeing with the ideals in the UNDoHR and being willing to vote in an election or poll that explicitly or implicitly legitimizes the UN's authority to govern.
I don't disagree that S3 is superior for hosting static content; I'm just concerned with the question of micro instances' capacity.

To continue that particular line of thinking... For the "CPU boost" point you bring up, do you understand the throttling as literally reducing the CPU capacity to zero when the boost is "exhausted"? Or simply dramatically reduced?

For the sake of argument again, let's say the Micro instance that is not being throttled by the Amazon hypervisor can handle 0.5% the sustained load of a i7 2600K. That is, 1,000 static requests per second from nginx.

Then, just by conjecture, let's say the throttling algorithm smashes the CPU allocation to 10% of its nominal maximum, thereby reducing our throttled micro instance's capacity to 0.05% that of an i7 2600K. We can still process 100 static requests per second from nginx. That is still more than enough to handle the few dozen requests per second that come in at #1 on the HN home page.

Like I said, it's theoretically possible that they throttle the CPU to literally zero but that seems extraordinarily punitive.
Thank you for creating this book!
Textile Engineering - Cyber Textile School
Which itself could be traced back to Adobe trying to make Flash -> native iOS a thing. Apple's process is too expensive to manage the flood of games that would come from that.
perhaps the incidences of head injuries dont go down, but what happens to the severity of those head injuries when helmets are being worn. If you classify a bruise on the forehead and a severe cerebral contusion both as "head injuries", you are unlikely to see much of a difference between wearing a helmet and not in terms of head injuries
Are you sure Mongo wasn't one of them? :-)
FWIW, I've only tested emacs support. It's definitely sub-par. Barely indentation and syntax highlighting, we're still in need of a real typescript-mode for emacs.

I appreciate the effort, (I can't say the same for other Microsoft projects), but it's still not fun to play with typescript in emacs (as opposed to more mature projects like Python, C or, of course, Lisp).
How do you like working in OR? Are there a lot of jobs in the field? I'm a math major and like programming, so it seems like it'd be an interesting career for me.
How about instead of looking at the people who take exception to the position of the download link in the right top, we look at why you're so dead set on having it there?

That's the same kind of logic.

People who expect the login link at that spot might as well reverse that attitude on you, and think to themselves: "if there's a person who insists on putting the download link where the login button usually resides, then I really don't want to be their customer. They sound like far more trouble then they're worth."

I guess the both of you will be happy, but also, the both of you will miss out.

Not a great attitude in business or UI design.
Funny thing is, the NSA knows that you're calling them. ;(
I am from one of the third world countries where Sweat Shops are common. I think these bad conditions exist because local govt administrators don't enforce work norms properly and not because you the end user are demanding lower prices. We regularly sell our votes for money and pay bribes wherever needed. While you staying away from Sweatshops might help a little, most of the ways of improving are in the hands of people who work in these Sweatshops. Also, what is a sweatshop to you may not be a sweatshop to a person used to hard labour from childhood. He may not even feel the pinch!
Wow, just utterly blown away that someone can live on earth for as many years as you presumably have, and have such a deep, fundamental misunderstanding of how it works...
is it just me or Microsoft is slowly converting Javascript into C#? Don't get me wrong I like typescript but next thing you know we have .NETJS floating around :)
Is there more than just syntax support in Sublime? I was pretty psyched when TypeScript was first announced but quickly bummed that the Sublime plugin didn't have any of the fancy autocomplete features.
Aren't you conflating "Lisp" with "Common Lisp" here?I suspect this, because I was told that for CL users the word "Lisp" means their particular Lisp incarnation. For the rest of the world - at least in those parts of the world where people speak Scheme or Clojure or newLisp or Shen or... - the word "Lisp" means "a family of languages, descendants of John McCarthy's 'original' one with this original included".

So your objection is unfounded - CL is not primarily FP oriented, but it was not CL that the author of the quote meant when writing the word "Lisp".
Yeah, I think the site needs a lot of work, but their product seems to be nice: https://vine.co/v/bDHB2rVaYO7
You should call Microsoft and tell them what they will do in the future. They could use a person with your powers of prediction.
I commute by bike on roads shared with cars every day and wear a helmet. When I ride in the whole way to work, I tend to average about 15mph, which is probably about 18mph if I count only time actually moving. Some cyclists can ride far faster than this. Most cyclists ride slower than this. There are far more occasional riders or people taking a mountain bike to Caltrain than there are lycra-suited enthusiasts.

I have never seen any reference to bike helmets being "rated" for a specific speed or type of impact. Bike helmets are approved based on a single test carried out by the CSPC which is not calibrated to correspond to any particular speed or type of impact. I don't consider the method of testing helmets particularly important to the well-supported fact that these helmets significantly reduce the risk of serious head injury and death.
Is it a seismic shift, or just an example of a very large operator contracting another very large operator with experience in the field to do something right the first time?
I'm confused about why they even had the need for canonicalising the usernames for whatever purpose? Why couldn't they just have stored and used them just as they are?
Trending Buzz
I guess since now corporations are people, this should be no problem.
Yes, real-world traffic will definitely vary over time.

1,000 rps is significantly beyond the average rps needed for 500,000 requests per day (which works out to an average/sustained ~6 rps). I consider the capacity to handle 1,000 rps well beyond the realm of handling the unpredictable burstiness of a 6 rps sustained load.

But just to contribute some anecdotal evidence: I've never observed greater than ~50 rps from the HN #1 position. Real world traffic is not smooth, but it's also not bursty to quite the degree that would be necessary to cause the server to wince.

All of this remains predicated on Amazon not throttling the CPU capacity to true zero or something approximating true zero.
> Probably just websense being rubbish

Websense is always rubbish.
> Facebook is in the business of social networking, not activism.

Your distinction between "social networking" and "activism" at its core is a distinction between privileged users who are allowed to speak their mind however they please (seeing that the gracious host considers it to be 'profitable' and 'acceptable') and oppressed users whose speech, unfortunately, falls under the "activism" category, and as such should go seek alternative methods of spreading their vile thoughts.

Only a man of privilege can make such a distinction and keep a straight face.

I'd like to see you make the same claim as a citizen living under an oppressive regime.
If you view the government as a single entity, then the whole concept is irrelevant since it can amend, or even simply ignore the constitution as whole.

As far as I understand it, the idea is that due to the separation of powers, the people who judge whether a particular search is reasonable are not the same who create and implement them, so yes, there is in theory some protection of rights.
Can I ask who your weather forecast provider is? The only one I bother using in the UK is the BBC or Met Office
It's also irrelevant. We're here to talk about their crime spree, not any supposed good works done during.
A similar issue exists with international domain names.

https://en.wikipedia.org/wiki/IDN_homograph_attack
Why does Unicode threat Omega and Ohm like different characters?
“Hasanoff relayed that the New York Stock Exchange was surrounded by approximately four streets..."

I love that. It captures downtown Manhattan perfectly.
They gave one reason in the post. They wanted usernames to be case insensitive, so that if there's a user named BigBird, somebody else can't sign up as bigbird. Case insensitive usernames are also helpful to minimize support issues when somebody forgets the exact case they used when they created their account.
But the minute some Google (or Facebook, etc) engineer mentions some slight detail about how that access works, you will have half the Internet trying to break it.
Although that would be kinda fun....
Easy to implement in a small project. Not so easy in a large enterprise project likely comprised of multiple interconnected systems.
I use both TypeScript and Dart for different uses cases (Dart lacks IE8 support) and both are a joy to use compared to POJS (plain old JavaScript.)
If it were me, I'd offer an option to see just new e-mails into the VIP box, or all mailboxes.
Because, then there can be multiple accounts that are variations of BigBird, and all annoying to differentiate for users. Such as Bigbird bigBird BigBIrd. Combind with this, the fact that you have unicode characters, and it makes it very easy to 'spoof' as another user by simply changing the letter 'o', to a unicode circle, or various other tricks.
Well there is a bigger list of plots that has not been prevented.
I agree with all of this, but it would be nice if the decorum rules on HN included begging pardon or even apologizing in a case like this. At the very least, when you make an inflammatory claim about someone else in a thread, notice and acknowledge when it's refuted.
Why does HTML have a <strong> and a <b> tag?
Nine User Experience (UX) Tips to Rule Them All.
Ask HN: Why is my company not matching salary?
X & Y are two $1 Billion+ revenue companies, both in same space, in bay area. I am in 'X' currently. 'Y' offered me a job with 25% extra pay for the same skill set that I am using in 'X'. 'X' is refusing to match the salary (<$130k) that 'Y' is paying. What might be the reasons for this? Could it be that corporate salary bands stop them from giving a raise?

It takes 2+ yrs for a person to perform well my current role. I feel that they being unnecessarily stingy and making a bad business decision. FWIW, I am a high performing person around here.

(Sorry for not being specific).
Boeing Launches The 787-10 Dreamliner
This isn't really an educational article. I say that because of the studies it selectively cites and the conclusions they reach.

For example it's fine to call a facial skin abrasion a "head injury" if you are clear about that definition in the research. It's another thing to cite research about "head injuries" and helmet use without mentioning what they means by a head injury.

The article also fails to cite research that contradicts the authors bias. Academic work such as Robinson's longitudinal study of AU or numerous pieces in the British Medical Journal (as referenced at http://www.boycottbell.com/ ) appear to have been carefully avoided.

For these reasons, and the fact that Bicycling Magazine is heavily funded by helmet advertising, it would be naive not to see the advertising influence in this article which goes out of its way to appear to be educational.

The unfortunate result of this sort of "journalism" is that people with little cycling experience and no knowledge of epidemiology read it and assume it is true despite the fact that 98% of the world's bicycling population don't wear helmets and their incidence of true head injuries are uniformly lower among them than the US' helmeted riders. Another downside to this propaganda is that many kids never take up cycling in the first place and many of those who do ride are afraid to venture outside of bike paths, sidewalks and super-low-traffic routes.

From a foreigner's perspective this illustrates American's naivete with regards to sales and marketing and their relatively undeveloped bicycling ecosystem. I for one hope both of those dysfunctional cultural attributes improve with the rising price of petrol.
Walking estimates too? Actually... I mean, I know how long it takes me to walk to work, but it'd be good to just be able to punch a number in. (Maybe automatically multiply by 1.1 or 1.2 when it's raining).
Reminds me of the early GMail bug, where you could sign up with "john.smith", "jo.hn.smi.th" or "johnsmith", but all mail was delivered to the period-less version:

http://arstechnica.com/uncategorized/2006/01/6022-2/
This is the wrong argument to have. The issue is not whether or not illegal surveillance has thwarted any plots.

We could put a video camera in every home that can't be turned off and has a direct feed into the local police station. I'm sure that after a few months, the police could then point to all the crimes they'd discovered as a result.

Success rates are not the only consideration when determining whether or not we should give a particular power to the government.
And I think that is a fine principle, but an unreasonable expectation.
The book is on sale here: http://shop.oreilly.com/category/deals/velocity-celebration.... (50% discount)
I don't see any real reason to rely on idempotence.

They could simply store two names: One is provided by the user (verbatim), and the second is its reduction to lowercase letters and digits (canonical). For all internal logic, they could use only the canonical name, and use the verbatim name in the front-end to make the user happy.

> Lower casing has the key property of being idempotent, i.e., that applying it more than once has no effect: x.lower() == x.lower().lower(). So if a username gets passed from service to service and you want to make sure it is in canonical form you can safely apply .lower() and if it was already in canonical form there is no harm done, and it is easy to stay safe.

Apparently, they thought that it's ok to use verbatim and canonical names interchangeably, relying on idenpotence property of the XMPP function.

It looks like a huge design error.
Because he is anti-semite, in their modern form they say "...but israel!" whenever you criticize them or even question their ideology. There's a strong myth about liberals/jews being responsible for the devastating economic policies of the government in hungary.

Fun fact: Most Jobbik members and sympathizers are describing themselfs as apolitical hungarians who are "just patriotic".
I'm sure it even matters. GPL is copyleft. Doesn't that mean that they can not relicense the same or derived work under a more restrictive license?
If so, then the US has fired the first shot and hit...its foot.
OK so here's the question: who thinks that everything the NSA does should be public knowledge - not just what they do, but everything they have, all their data, everything.

I'm sure some people do, but would imagine most don't. Most want a public overview of what they are doing and what rights they have, but understand that specifics/data need to stay secret.

For this to be the case, surely they do need to make sure security is as tight as possible. But on the flip side, if they were able to 100% prevent all leaks, it would mean that nothing like this could happen again, i.e. the kind of leaks that we want to see. So where should the line be drawn?
The web needs better layout
If they did as you suggest, the specific account-stealing flaw they had wouldn't happen, but since many unicode points have very similar glyphs, there would still be "copycat" accounts. That is, the strings "Oscar" and "Οscar" appear very similar (if one has the proper fonts installed), and one user could therefore pose as another.

It's true that many sites don't care about this, but I don't fault Spotify for trying to prevent it.
Also recommend reading the (very readable) annotated sources of backbone and underscore.
Can you justify the contrary?
No, that means you can't relicence it. The copyright owners aren't affected by the license and may do as they please.
I did the same thing. I have been waiting for this book. For a variety of reasons, I have been spending more time coding in Javascript and a little less in Clojure, and I hope this book helps make that a happier experience.
In other words it's nothing at all like a fee, as you described it earlier.

But, if things are as you say, Google can do whatever it likes with the data according to the ToS. If people don't like data about them being given to the Government, or used for any other undisclosed purpose, they shouldn't have used Google.
Did you miss the bit where the author stated he was a high school student and had written the applet as an exercise to learn java? The clue was in the 3rd to 12th words on the page, where it states they did it in "grade 7".

Elsewhere they say they're now in "grade 11" and their github account has a heap of interesting projects.

I think you were a little heavy with the snark.
I agree with this on a general level, but I wonder if bandwidth at some level becomes an issue. If you have a page that weighs in at 1MB - not unlikely - and you are averaging, let's say, three dozen visitors per second for at least a little while, you are talking 288Mbps of traffic.

Would amazon allow that throughput, for a micro instance, at least briefly? Maybe, but I'd just be speculating. This I would guess is a more likely issue than CPU usage.
If you want to help the country and they won't let you do so by opting out of prism, you can always mail the government a check to make up for the prism resources you're consuming:

http://www.treasurydirect.gov/govt/resources/faq/faq_publicd...
Those are the senators that have probably said something to someone over a phone that ... that just maybe might get them into trouble if it ever leaked out.
Based on their description of the bug, it sounded like the code was modular, but they called the function twice: once when the password reset request was generated, and again when the link in the email was clicked.

However, when the link was used, canonical_username was once again applied

So after they sent the password reset link, they called "fetchUserIdByName" again, but they passed in a username that had already been canonicalized once. Because of this bug, I wonder if password resets worked at all for users with unicode characters in their names.
It's definitely NOT irrelevant. At some point (say, alien terrorist invasion that'd kill everyone on Earth), most people will decide it's a worthwhile tradeoff. If it only stopped one small bomb against a concrete statue, people would decide the other way. There is certainly a crossover point.

The crossover is probably not even close to being reached, but discussion about it is certainly relevant. Many people believe they'd be under major attacks without these secret program. Dismissing their claims doesn't further the discussion.
I think it's commendable that Ethan is okay with being on record saying his company Zvents only achieved “mediocrity” and further sharing his honest post mortem thoughts. The lessons here could apply to a lot of aspiring companies.
I do! Glad you like it :)
Generate your own progress indicators with Chimply
Inside Pocket: how a startup beat its rivals to build the 'DVR for everything'
Homejoy launches perks programs to let cos pay to clean emps homes
How to Write a Great Response to a Cease and Desist Letter
My sentiments exactly. A high success rate does not justify violating constitutional limits on government or making people forfeit basic civil liberties.
If you're forced to choose between a bullet in the head and one in the foot, you'll choose the foot almost every time. But why are those the only two choices?
> the implied means of power, the threat of force, rather than by direct military force

Sure, right, that's kinda what I implied with my post. As long as I have access to decrypted bytes in memory and I have access to: my eyeballs + pen + paper, then the jig is up.

The TPM+BitLocker scenario would protect the data on the hard disk and prevent offline attacks and would prevent someone from trying to extract the key from the running OS.

> the implied means of power, the threat of force, rather than by direct military force

Ding ding, exactly. That's why I mentioned "Group Policy". At best, you could attempt to restrict user access to the LIVE mounted decrypted data... but at that point you're trusting the client and a dedicated individual would get around it.

You'd almost need this:

Request remotely-stored invididual encrypted file -> Receive it locally -> Decrypt locally.

which would give you a chokepoint to be able to cut off access to the encrypted data, but there are a thousand problems with this scenario as well, just from a technical standpoint.
> minor children

You bring up a point (perhaps frivolously)that I haven't seen before. With many many minors owning cell phones, where does the court stand on collecting meta-data from children. The law is very clear when it comes to crimes on how minors are treated, this seems to make assumptions without guardian approval or regards to their status as minors.
A set of numbers unified by the fact that they're all unique in exactly the same way. Unique. Singular. :-)
Because one is a greek letter, and the other is a unit of resistance. The fact that they're represented by the same symbol is irrelevant.
Because they have rather different meanings. Capital omega (Ω, U+03A9) is a Greek letter, with the lower-case form ω; ohm (Ω, U+2126) is a symbol used in electrical engineering with a related symbol "mho" (℧, U+2127).