skysight-inc/HackerNews huggingface dataset:
Pardon and excuse the self promotion, but just yesterday night I did a small blog post on deploying Rails Apps with Puma. The deployment part is really quite naive and I'm working on part 2 of the post.

http://jasdeep.ca/2013/07/deploying-rails-apps-with-puma-and...
MEGA launches Android App
Class Mac Pro renderings
The strangest thing is that the only email, specifically accusing Tony Hawks of abusing his name's similarity to Tony Hawk is in Dutch. Likely, however, Mr Hawks has received numerous complaints about it in English and chose to ignore those, but kept the one in Dutch as he did not understand it (or did not care what it said).
The metric system still fails to impose itself universally, so we can wait some time before the decimal mark is unified...
Amazon EC2/S3 vs. colocation vs. hosted prices
s/217.000/217'000/
FIFY
I think you'd have to be slightly delusional to feel that the USA is more diverse than the whole of the EU.
Yeah, not sure why this is getting upvoted. They are just having the standard open source 3D printing apps in the repos, nothing else :s
Web stuff tends to be embarrassingly parallel: http://en.wikipedia.org/wiki/Embarrassingly_parallel. Which means that it's extremely easy to make a framework that's reentrant: http://en.wikipedia.org/wiki/Reentrancy_(computing). Reentrancy gives you thread-safety by default.

Yeah, Ruby core data structures are not thread-safe. But that doesn't matter. You're not supposed to a lot of any data structures between requests anyway. Of the few that are shared (e.g. the Rails cache object), they are explicitly engineered to be thread-safe.

There's also the story that Ruby cannot use multi-core. That's partially correct: on the MRI implementation, it doesn't matter how many threads you have, only one can be active at a time. However what you can have is multiple processes, each with multiple threads. Each process can use a different core. Furthermore, the JRuby and Rubinius implementations can handle multi-core with multithreading just fine. Both Phusion Passenger and Puma support JRuby and Rubinius.

Maybe I'm just too familiar with Ruby and multithreading, but I don't understand why people have trouble with multithreaded Ruby. In my eyes it's pretty easy. If you have a library that's not thread-safe, then just don't share that library's objects between threads, or ensure that you grab a lock before using that object, and you'll be fine. In my opinion, the situation is not much different in Python, Java or C++.
Wanting hard problems to be easy doesn't make them easy. Computer science and math don't care how much you need cryptography.

And, a reminder: while I agree that we could use better UX for GPG, that's not what Cryptocat is. Cryptocat is simpler to use because it's a simpler, less secure system.

The Cryptocat team seems to have a flair for attractive, usable interfaces, and people seem to like the way Cryptocat works. They should spend their time building a similar interface for GPG and give up on the custom cryptosystem. They wouldn't be able to say they'd designed their own cryptosystem, but in reality, people with a professional understanding of cryptography would think more highly of them for that, not less.
What was naive about [your deployment section], and what needs updating?
They should be commended for trying to make security accessible.

I strongly agree with you.

Unfortunately they have made security less accessible.

Why are they rolling their own crypto, and not trying to make some existing product easier to talk?

> At least the documentation warns it's really a bad choice.

It seems the warnings are small and the hype is big.
What OS are you running? What are your physical keyboard and keyboard map, UK or US?
random punctuation along with missing words (probably caused by autocorrect) makes your post extremely unreadable hence the downvotes
Why keeping your business alive is not enough
Real-time collaborative text editing based on operational transform, like Google Wave and Etherpad, is probably a better analogy to Engelbart's system than screen sharing.
I've owned a domain for 10+ years that's spelled correctly and is kinda neat and i'll do something with it some day. A few years back a start up got some funding, tried to buy my domain several times, and ended up going with a variation of the domain, but minus a vowel. eg, if i owned flicker.com, they ended up with flickr.com (it's neither of those domains, BTW).

I semi-regularly get support emails for them. If i'm in a good mood and see the email as it comes in, i'll tell them the correct email to use (no one has ever thanked me for that, as it happens). Normally I just ignore them, or don't notice them for a few days.

I find it mildly amusing when there's a series of emails from the same person with panic escalating over a few hours.

"Where is my project?"

"I need this for my report in the morning!"

"I'M GOING TO SUE YOU!"
I share the dislike of Gnome 3 with many but I also see the potential of it for others so this is meant as a humorous countergraph: https://www.google.com/trends/explore?q=%22xfce%20sucks%22%2...

(Google Trends is not a measure of anything but Google Trends!)
The 2006 CIA Factbook stated that the "US is the only industrialized nation that does not mainly use the metric system", (in addition to non-industrialised Burma/Myanmar and Liberia).
217.000,00 FIFY
Picking the right [web development] tool for the job
If Opera do focus their attentions on the UI (not the rendering engine), then that's a good thing. And there's so many ways the web browser could be improved.

I used to like Opera's bells and whistles. I loved no image mode, tabs, fit to width, it's zoom, mouse gestures, url keywords, toolbar customisation and alternative stylesheets. And some of the keyboard shortcuts (which became confusing over time.)

But the menu system, and backend was klunky. The app didn't integrate well into the Linux desktop well either.

Unite was interesting (they should have waited for IPV6 to go mainstream...) Tab stacks didn't go far enough. Speed dial - really - What's the point? I'd rather they polish up the bookmarking and history interfaces. Stash looks like it's just a lifo ordered stack, which is good, but lends no context to the stashed page. Does a stashed page retain it's history? How do I group pages/bookmarks - why is this so shitty across browsers? A stash could just be a temporary/ephemeral bookmark.

Is their any point in having graphical snapshots of pages and thumbnails? These just take away screen real estate. They bring nothing for me.

I think there should be focus on: reading aids, bookmarking/tabs, privacy, developer tools, and a very clean configuration - with sensible defaults. An easy way to flip the browser into an intermediate/advanced mode would be nice.

Bring back a slice of innovation to the browser. It needs to be more than a Chrome clone. I can think of loads of nice features that could be roled into the browser rather than end up as a stray extension.

Anyway I hope the clean core and fresh start is a good jump off point for them, I'll be watching this space.

Where's the Linux version?
Right-wing fringe thinkers like to fantasize about putting their guns to patriotic use in much the same way that leftist fringe thinkers like to fantasize about general strikes and establishment of a dictatorship of the proletariat.

And yet, the "establishment of a dictatorship of the proletariat" in the history of communism's spread, without a single exception, has been accomplished at the barrel of a gun, with extraordinarily bloody results.

And then there's the starvation purges of entire regions of huge populations of people.

Oh, those wily leftist fringe thinkers and their peaceful ideas!
> And they're much less likely to ask you to sleep in the office overnight.... They will know for a fact that the only reason you're doing that is to make up for goofing off during the daytime

A long time ago, an engineer who used to work at a big old east-coast company told me that management said, "If you can't get your work done in 8 hours, then either you're incompetent and you should be fired, or your boss is incompetent and your boss should be fired."
Friday is Webday Newsletter
Shouldnt this be called DecryptoDog? I've never trusted any in browser/java nonsense crypto since FireGPG was exposed for dozens of problems and leaks.
Boxee's main problem is they built a platform for pirates, sold it at break-even and expected to make their money selling said pirates $5 VOD movies from walmart.
So, nobody server-client architectures on Windows?

Have you been inside of one of the many .NET shops around the globe?
Cholera is Altering the Human Genome
Turn off SSL 3.0 and TLS 1.0.

Problem solved for all known attacks.

Unfortunately, that includes your users.
> Cryptocat is simpler to use because it's a simpler, less secure system.

Simple does not need to mean less secure. HTTPS is easy (for the user) and secure.

> They should spend their time building a similar interface for GPG and give up on the custom cryptosystem

Yes, that could be an approach, using a higher level crypto infrastructure and focusing on the UX.
Doesn't work for putting files on the desktop, the ~/Desktop folder doesn't have it's contents displayed on the desktop for some reason. Assuming a gnome3 thing...?
How to inject an object using Spring configuration file
No the problem is that the content was created with the intention of making profit and the BBC aren't allowed to do that in the UK.
I don't think there's a less intrusive way to pull it off, but with sufficient compiler support you should be able to make it fairly transparent to the programmer.
That line isn't used in anything sensitive.
Curious about what? Your "question" is non-sensical.
Are you talking about War Plan Red? If so then it's not new: the plan was created in the 1920s and 1930s, and was declassified in 1974. It did cause some hubbub then.

http://en.wikipedia.org/wiki/War_Plan_Red

But fear not! Canada had a counter to the plan, called Defence Scheme No. 1. The plan was to launch a surprise counter-invasion of several cities near the border (Seattle, Portland, Minneapolis, and Albany) then to wait for reinforcements from England.

http://en.wikipedia.org/wiki/Defence_Scheme_No._1

Except no one ever told England that Canada would expect reinforcements in this situation, nor verified that they would be willing to provide them.

Cities like Halifax and Winnipeg are far more vital to Canadian industry than any of the American cities: without them, Eastern Canada would be cut off from Western Canada by rail (cutting off grain supply) and from the Atlantic by sea. It would effectively lay siege of all of Ontario and Quebec.
Why are they charging so much for such an old game?
You pay through the nose for the cloud. What else is new ?
Are we allowed to make a minecraft server on a Google fiber connection?
>Making technology accessible to everybody is very important

What if the technology is fundamentally flawed and the users are at risk for using it?

GPG and such are terrible to use, imo, but at least they work. CryptoCat could be exploited with relative ease, at least at times. Considering their considered demographic, this is quite dangerous.
No, that's not true. HTTPS is simpler than GPG and also provides less security. You rely on HTTPS/TLS today with certificate-pinned DHE HTTPS connections to Gmail. Clearly, the people who use Cryptocat don't feel like they're getting enough security from Gmail. HTTPS is simpler to use because it's a simpler, less secure system.
Yes. Because we are humans, not Vulcans.

Someone saying: "Don't hit me, please" is also an argument from emotion.
>> So don't promote it on the publicly funded sites. Done.

That's exactly what they are doing. The only sites the BBC are legally allowed to operate within the UK have to be publicly funded.
A new section has just been added which compares memory usage.
As a Boxee Box owner, I think they had a chance, a niche of their own and they blew it.

When I bought the Boxee Box, it was because I had sampled the software for free on a regular PC first. Yes, you could actually download the software, see that it met your needs, and then buy it, prepacked as a dedicated device, an appliance.

It was genius marketing and it had me throwing out my old setup instantly. Everything just worked. The remote was unmatched. Simple on one side. Qwerty on the other side, for apps, searches, etc.

The box itself played all kinds of file-formats & sources without a hitch. It extracted, identified and unified meta-data much better than any other software I have seen, and auto-combined it into a huge database, all without having performance degraded, like much software does when the library goes big.

Everything was great. They even shipped updates, and with a simple checkbox, you could join the beta-channel to get early releases.

And you did get releases often enough to feel that you were using a living product. It was great.

But then, suddenly they seemed to shift focus. You could no longer download and sample the software. You had to buy the box, unsampled. Then they shifted focus away from the one thing it did great (play your media, from your storage and network devices) to the one everyone fails at: Creating a "unified livingroom media experience".

Big surprise: They failed at it.

They wanted me to sign up for an account, have it integrate with everything social, pull all my friends embarassing youtube likes and linked facebook content, in my face, everytime I turned the device on.

And then they stopped updating the apps and app-repos. That Youtube app which was kinda shit, but sorta worked? Yeah, no longer working after Youtube introduced couch-mode. And they're not fixing it either.

There also seems to be some performance problems arising. But nobody has been pushing any updates to fix that. So you need to reboot the device every now and then.

They went from being what everyone wished XBMC could be, to something completely without focus. They took and sacrificed the one thing they did well trying to be "everything to everyone".

They took something which worked well and let it rot, super-busy failing at something else.

I hope Samsung buying these guys means they will be going back to doing what they used to do well. Because I need a new media-box soon and I still haven't found anything which looks like a worthwhile replacement for my old Boxee box.
SSL has various problems, mostly related to CAs.
Also it is only easy to use because the server admin has done the hard part for you, therefor you have to trust them.

To apply SSL to a cryptocat style system would require both parties to generate keys and somehow verify them, not so simple.
Show HN: pycandy - Python flavored screencasts for impatient developers
Sweden: not only do they have the best death metal, but they have the best icon design. It must all originate in the Futhark.
Code Example: File Upload Servlet with Apache Common File API
https://www.google.com/trends/explore?q=gnome+issues#q=gnome...
They're semi-funny reply emails, but I don't really understand how he was having fun with them. Doing it for the lulz of punking individual users trying to get help?

Seems a bit like being a bully on an individual kid.

Possibly cathartic though if he's being swamped by misdirected support emails... maybe?
Take the Orwell Test
We have never been attacked by space aliens. The system works.
> What right do you have

A first amendment right.

> You have absolutely no right to complain

Freedom of speech includes freedom to complain.

> in much the same way I don't have any right to look at your Github repo

...per the fourth amendment for my private repros. I'll assume you're referring to my public repros instead of trying to compare as "the same" something that goes directly against someone's constitutional rights, with something that's explicitly protected by someone's constitutional rights.

> tell you you're a terrible developer and you should never touch a computer again.

...but this part is well within your first amendment rights as well. And if you think I've been undermining the pursuit of life and liberty as much as broken crypto can, repeatedly, despite fair warning, I'd dearly hope you'd exercise said rights. Rudeness and hurt egos are more survivable than broken crypto. Learning crypto is fine, but not at the expense of those who's lives may depend upon it. Whether or not they'll learn isn't the question: learning takes time, period, full stop. Time that cannot be afforded by those who would depend on said crypto.
Infographic: Best practice for website owners
Did you know that there are over 2.4 billion internet users world wide with over 1,500 average banners seen by each a year?
Check out this infographic to learn more about best performing banner sizes, most popular sizes and the magic of rich media.
While I think SSL/TLS is "less secure" in some sense than GPG, which is fundamentally end-to-end, I still think SSL/TLS is a good system, if for no other reason than that it's the focus of a huge amount of research.

The CA problems with HTTPS/TLS aren't fundamental to SSL/TLS. They're a consequence of browser UI. If you build your own software that uses TLS to make secure connections, you have a variety of options to avoid the browser CA problem; you can run your own CA (every instance of Burp Suite, the industry standard web pentest tool, does exactly that), or you can verify certificate fingerprints statically, or you can invent a new authentication system.
>Snowden's "revelations" are completely unsurprising to anyone who has thought about this and the technology. I'm still waiting for him to reveal something actually surprising.

To someone used to an abusive relationship, no abuse is surprising.

"Oh, now he hit me with a metal club. Big fucking deal"

That doesn't make it acceptable or non dangerous.

So I wouldn't be waiting, like a mere spectator on something that doesn't affect me, for him to "reveal something actually surprising".
While I don't doubt that there are bad guys who are paying for anonymizing VPNs, I wonder to what extent this is a majority.

I know around ten people, who are technically-adept (but not techies), who are using VPNs for Netflix, BBC iPlayer, Hulu, sporting events, etc... In many cases they are "paying to pay" for these services.

Hackers, crackers, carders, and script kiddies can pretty easily get access by compromising insecure hosting accounts or remote windows machines in the desired location.
I think that's a bit harsh. In the case of the USA my impression is that the main source of cultural diversity is from immigrant communities whereas in Europe the main diversity is between long established communities - often at a level well below that of the current nation state (particularly noticeable in places like the UK and the other larger European states).

Personally, I think that Europe does have a lot more cultural diversity than the United States - but I can see that the point is arguable and that it's hardly a case of being "delusional" to argue the opposing point.
They built a platform for pirates, tried to pivot to be a legit business, was met with resistance from companies they had previously been empowering pirates against, and so tried to pivot again to something no one, pirate or non-pirate, really wanted (cloud dvr).
I don't really have a dog in this fight, I'm not defending cryptocat, but pointing out that the "dealing with people" part is difficult, too, and that in some ways, crypto software hasn't done a particularly good job at it, especially in the past. Presumably, they have improved at it over time thanks to the suggestions, comments, and help of others. I agree that it's a difficult thing to make simple for 'ordinary people'.

I think "adversarial nerds" hits the nail on the head. I understand it, but I don't have to like it.
They obviously concluded that 'Themeparkville' just didn't have that certain zyng to it.
Death of a data haven
Playing detective with rolling shutter photos
Yep. I'm perpetually waiting for square to get their shit together and just give us what we want: A frame-by-frame remake with PS4 generation graphics.
> I'm also well aware that they get replaced quite frequently.

You and I have a significant difference of opinion then.
I imagine the bigger issue is that it's a clone of the Electronic Arts game Theme Park.
The swedes actually copied it from Norway.

hahahaha.

Though to be honest we actually do have it here in Norway.
Being embarrassingly parallel and always being parallel are two separate things. I don't see how the risk of bugs that, generally, show themselves under load would ever make puma worth it. What is the advantage over unicorn? Slightly lower memory usage? My CPU and IO are always pegged way before memory is.
IPv6 NAT from a content provider's perspective
Is the term "lifestyle business" an insult?
<to the tune of bye bye birdie>
bye bye boxxeeee: you're awful simple now.
bye bye boxxeeeeee: you're not up to par

http://www.youtube.com/watch?v=1t3cBTb3xPc
This is a small awareness minisite that we built to educate visitors in the simplest possible way about what behavior usually requires you to maintain a privacy policy on your site (and how we can help fixing that gap).
The History of Online Advertising
If I'm decoding it correctly, I think a description of how his e-mail ended up in Zynga's game would in fact be an interesting story.
> to the one everyone fails at: Creating a "unified livingroom media experience"

Indeed. What I wouldn't give to have simple media playback from USB storage instead of "unified livingroom media experience" on consoles ...
The advantages depends on the workload. For a lot of applications, i.e. applications with CPU-bound, fast-running requests, multi-process behind a buffering web server (Phusion Passenger default style, Unicorn style) is fine and works great. Don't move away from that. When it comes to this kind of workload, both Phusion Passenger (open source and Enterprise alike) and Unicorn work better than Puma. While Puma can be configured to use 1 thread, Phusion Passenger still has better management tools and fault-tolerance features than Puma, while Unicorn also has better fault-tolerance features than Puma.

For applications that utilize more blocking I/O though, e.g. applications that perform a lot of HTTP calls, you need a multithreaded or an evented app server, as well as an app written to support that concurrency style. Otherwise you will run out of concurrency very soon, and your app will spend a lot of time waiting on I/O instead of doing useful work.
We are way past this now. If anything, we have the opposite problems of "apology theorists" and "coincidence theorists".

People have been trained to think "conspiracy" is some BS endeavour that includes aliens in Roswell, mind control, illuminati etc.

Fact is, most of history has seen covert action by governments and organisations. Those are also conspiracies (by definition), and it's totally wrong (and disingenuous) to lump them with BS conspiracy theories.
Yes, that's a good point. However you are always somewhat reliant on a third party to do the security for you whether that is a CA or an app developer. That third party has to be trusted. It doesn't solve the fundamental problem of:

Alice -> Bob

without doing.

Alice -> Facebook -> Bob

Unless both alice and bob know how to generate and manage their own keys (and verify each others keys).
One shouldn't have to filter personal bullshit to be able to read technical content.
They are talking about privacy and supports only log-in with facebook (under openid), WTF?
Workflowy is great. All the updates get emailed to me and this is sufficient backup for how I use the app.
'Quake III Arena' Bots Reportedly Stop Fighting After 4-Year Match
No, also not true. You can use the TLS protocol to build a "web of trust" scheme just like GPG's out of self-signed certificates and key continuity.