skysight-inc/HackerNews huggingface dataset:
No the single greatest benefit that a IOC container provides is object lifetime and scoping management. The next greatest benefit is the ability to decompose your code base into a single responsibility adhering components with good decoupling and namespace cohesion characteristics.

Testing is very low down on the list of advantages of a IOC container. And even then, most people that think they're doing testing properly with a IOC container are doing it wrong. Hint: "Re-binding" your container by forcing it to drop an existing service implementation and replacing it with your mock/test implementation is "doing it wrong".

The reason there is always so much discourse around DI and IOC is because very few programmers actually bothered to learn, and grok it, even if they think they already have.
Suppose - for a moment - that the press isn't as free as you think it is.
Hello,

Redis accepts both a structured protocol, and a simple space-separated tokens protocol (called the inline protocol) that helps sysadmins to avoid a disaster just because they lack a proper redis-cli but are in need to run a Redis command ASAP. Perhaps this proxy is also supporting both forms.

You can do that with any modern enough Redis server:

Escape character is '^]'.
ping
+PONG
set foo bar
+OK
get foo
$3
bar
NYC had a good scene through the 90s but gentrification and a bunch of legislation in the mid 2000s killed it.
Seriously? 105 years in prison because the leaked data he was investigating had some credit card numbers buried in it? Is there anything else? That seems like too much of a bastardization of justice. Hopefully his jury knows about jury nullification.

EDIT: I see from a comment below that 40 of the years are due to his withdrawal induced youtube rant and obstruction of justice charges. Which is still freaking ridiculuous, especially considering that wouldn't have happened without the BS credit card charges.
Trapping a person inside a building by force, when otherwise they would be physically capable of leaving, on the other hand, could easily be construed as criminal kidnapping. In this case, kidnapping in order to obstruct justice may even be arguable.
How Our Visions of Virtual Reality Have Changed in the Past 40 Years
Doesn't the US constitution prohibit cruel and unusual punishments?
The Body-Data Craze
IOS 7 includes the ability to control your iPhone or iPad using head movements
Abstract of Place Hacking: Tales of Urban Exploration, doctoral thesis by Bradley Garrett [1]. Includes download link (slow) for the full document.

[1] http://pure.rhul.ac.uk/portal/en/publications/place-hacking-...
"sounds like" word generator for your language
What was the problem for installation?

I use redis-router in production as a library. some of my non-pythoneer friends asked to use it in PHP, so I made a little wrapper with gevent.

It's probably not compatible with current clients. Needs testing :)
The Never-Ending Quest For The Perfect Social Network
Ask NH: Ruby/Rails or Python, 2013
I am a Scala developer without JEE experience. I would like to add a script language to my skillset and increase my employability. I started to look at Ruby/Rails to use as a backend API for Angular app, but after yesterday's lagn popularity pool I started to doubt if Ruby is a good investment in 2013.
Can you please advise on Python (Django, Flask etc.) and Ruby/RoR ?

* Jobs prospects (particularly, in Europe)

* Adoption and perspectives

* Usefulness a for backend guy, wanting to grow in web dev and increase employability.

P.S. I see the similar question was asked 3 years ago https://news.ycombinator.com/item?id=1830063 and interested in current situation.
Article says there was 5 million emails and it was that which he pasted the link to, therein contained credit card info for 5k people. How would he have known to screen it for credit card no's? What were the credit card details doing in the emails? How did stratfor come in to possession of them, wikipedia says it has 70 employees? Was that possession legal?
An illegal rave, like anything else, needs a lot of planning and organization to make it any good. The reality is that most things like this are set up by rich people with artistic pretensions (and often parents with connections in city hall), because they're the ones who can afford to take the risk.

If you go to one that wasn't set up by rich people you get a much more low-key affair; if it's not marketed well enough it can easily degenerate into a handful of people drinking in the dark in an empty building. Which is fun in its own way (but wouldn't lend itself to bloggable photos).
The article claims the official story is unclear, but I disagree. As a potential customer, I've learnt everything I need to know to protect myself from vulnerabilities. (Though the inner hacker would like to hear how their infrastructure was compromised and whether it can have any effect on related services, such as Fastmail.)

Opera also states the security breach has been handled on their end, so I see nothing wrong with the announcement's title either.

It would be unfortunate if the situation got out of hand, with recent fundamental changes to their browser, Opera now needs 100% focus to stay competitive.
Yep, and 2 of those 5 days were the weekend and the monday was a national holiday.
koush is kind of kicking ass on this front: https://plus.google.com/110558071969009568835/posts/gVt8SWRR...

From his comments it sounds like he's working with other app makers who are making independent apps so this could target everyone, effectively.

I do have a side project that would, at least personally, greatly decrease my dependence/reliance/usage of GMail...
It may not seem like it is copied, but it definitely is. Take a look at the background image that gives that curved effect. They haven't just tried to recreate it, they've literally downloaded the same image and just used that.

If you hash both files on the original website and the new one, you'll see they both amount to: e6a486ac74a59aaa1abefec33de40c55

What more proof is needed? Haha
Hash both the images that are used to create that curved hero unit thing they both have. They both come out as e6a486ac74a59aaa1abefec33de40c55
Also, what about non-Americans? We don't get a say and our rights get violated, apparently.
Mouse cloned from drop of blood
DI is about breaking constructor coupling. I wish people would understand that.
At its core DI is basically constructing instances of objects with the help of other objects.
So you have constructor injection , setter injection , property injection ,etc ...

Now that you got these huge object graphs, you need a way to wire them without pain.

That's where service locators and IOC containers are handy.

A service locator is basically a registery that holds the dependencies and you instanciate objects that way

container.createDefinition("MyClass").injectProperty("prop1","MyOtherClass").injectConstructor("MyThirdClass","MyLastClass")

then

myInstance = container.create("MyClass")

or whatever

The question is while dependency injection is good practice in general , do Pythonists need IOC containers or Service Locators? etc ...

AMD in javascript has nothing to do with dependency injection. AMD is not about instanciating objects but resolving file dependencies.
European Commision tells public bodies to break free from vendor lock-in
Sure, but have fun spending 10-15 years tied up in court cases and appeals to try and prove it.
The business implications are clear!

Obligatory xkcd comic: http://xkcd.com/1138/
Yes, these methods are dangerous to use.

I need a locking mechanism to do it safely but this will wait until I need it most likely.
SourceTree 1.0 released, now with Mercurial support
another good alternative: https://github.com/disqus/nydus
Podcast Showdown: Startups For The Rest Of Us
The wast wast majority of people who write code get paid real money for real work, and the buyer get functionality, source code and most of the time, copyright assignment.

Its called a salary.
Non-profit porn startup video wins Gold Lion at Cannes 2013
It's weak speculation, and hardly related here. If we allow our suspicions to recurse, perhaps I might suggest that your comment here is in fact disinformation designed to make people concerned about Barrett Brown's treatment sound like a bunch of conspiracy theory wackjobs. :)
Meh... surely there's room for people who want to a startup thingie, but don't want to live someplace awful like SV...
I'm also curious about the downsides of using Vagrant.

Correct me if I'm wrong but if you have full access to the command line you can probably get your recipes working there. If this works, I understand it's not as easy as provisioning with Vagrant but it's a workaround for now.
I know of that simple protocol. But the responses in the example telnet session on that side return "True" and "13" where it should be "+OK" and ":13" with the redis protocol.
How is Flask a "content management system"? I thought it was a fairly small set of utilities for writing web applications, aka a microframework. A CMS is a program/app for publishing and editing web pages or blogs, is it not?
Was the Verizon FISC order that was leaked, requiring daily dumps on all calls even with both endpoints inside the US, targeting individuals reasonably believed to be outside the US?
Consider the use of the word "scolds" instead of "blasts", "criticizes", etc.
It doesn't support like this. It seems easy to implement it like that though. I will do it when I have free time.
Glad you asked this. That is just a pre-launch page so it does not go into detail in length. Nothing built in-house – it uses Salted password hashing with PBKDF2-SHA1 and key stretching as mentioned on [0]. Password hashing is too delicate to write a custom algorithm.

[0] http://crackstation.net/hashing-security.htm

"Salt ensures that attackers can't use specialized attacks like lookup tables and rainbow tables to crack large collections of hashes quickly, but it doesn't prevent them from running dictionary or brute-force attacks on each hash individually. High-end graphics cards (GPUs) and custom hardware can compute billions of hashes per second, so these attacks are still very effective. To make these attacks less effective, we can use a technique known as key stretching. The idea is to make the hash function very slow, so that even with a fast GPU or custom hardware, dictionary and brute-force attacks are too slow to be worthwhile. The goal is to make the hash function slow enough to impede attacks, but still fast enough to not cause a noticeable delay for the user."
Poll: How often do you deploy to production?
How often do you deploy new versions of your code to your production server? Manually or using CI, including quick bug fixes and patches.
Every 1-2 hours
Once-twice a day
Once-twice a week
Once-twice a month
Once every few months
Designed By Apple
The Magic Of The 2 Minute Rule
Had problems installing "ketama".

I re-read the README now and it explicitely states that libketama should be installed from the git repository. I'll try it again later.
I'd prefer by type to by name, but there's still a small decoupling advantage: suppose you have some componentA in your application and you want to add some more functionality that depends on some serviceB. What DI should make possible is you modify only componentA, to state that it now depends on serviceB, and as long as you have a serviceB available then you don't need to change your "wire up my application" code at all (but of course if there is no serviceB then this should fail as fast as possible and tell you to fix it).

/has just written a compile-time DI framework in scala using type-level programming. It's pretty sweet except for the compile times.
An all new, flat and mobile-friendly 360gardalife
These days, it's really hard to make people trust any library that they can't see the source of, especially those that manage "sensitive stuff" like authentication.
Punishments can be either cruel or unusual. They just cannot be both.
Mozilla again postpones Firefox third-party cookie-blocking
I guess that's why Feedly is down...
Good answer, thanks.

I intentionally gave you some good options (PBKDF2, bcrypt) and some really bad ones (MD5, in house) to chose from. I assume that you are using a tested and trusted library to implement PBKDF2?

But isn't the work factor - the "number or iterations" in PBKDF2 is doing the same thing as key stretching, i.e. "make the hash function very slow". There is also a similar parameter in bcrypt. So you don't need to add anything else special to the crypto, and indeed shouldn't.
To turn up the heat on Brown, the FBI initiated charges against his mother...made Brown snap.

I could relate to Brown here. FBI or SS would tail me when I was on pretrial, I'd hear awkward clicking on my phone, and I'd have severe anxiety attacks. Just recently, my paranoia back then has been confirmed with the PRISM leaks.

Political journalism is dangerous (I think anything in politics is risky though). I give Brown and Hastings a huge huge huge amount of respect to pursue the truth and uphold their own moral beliefs.
It's Bed, Bath, and Beyond conspiring to become the biggest economy on Earth.
As long as you encrypt all your communications, you have nothing to fear, especially not as a seller. Doing it right makes you completely anonymous.
Only if you're a buyer, there comes a moment when you have to give a postal address to a seller and give up your anonimity. If the seller turns out to be law enforcement, this might cause a problem.
On the other hand, why would law enforcement go after the buyers? That doesn't solve anything, it's the sellers they want.

Even if the service is completely run by DEA/FBI/etc, taking the right precautions can help you stay anonymous. That's what's so beautiful about Tor, Bitcoin and PGP :)
I'm not at all sure it's legal but it has been trivial to view decompiled source code for any .NET class with tools like Reflector for years. If you need to see how it's done, you will see it.
USfreeads Free Classified Site Review
USfreeads Free Classified Site Review
All hail John Carmack. God.
>There are well-known stars who make between $10-20 thousand per contract (which may last about 6 months, commonly) despite having a leading role

You might be thinking of Off Broadway - all of Broadway has to pay Equity rates, which as of last October was $1,754 per week. The minimum an actor would make on a six month Broadway contract would be ~$45k (normally slightly more, there are a number of things Equity adds on top, like Per Diems, chorus fees, etc).

This is still not a lot, and of course many actors may go months without work. Non-equity gigs are also often much lower paying.
CodernityDB pure python, fast, NoSQL database
If it were me, I'd show up as planned.

Remember, you're the professional here. They're the company with the crazy project manager that flipped out on you for working the hours you agreed to work when you were hired. The rest of the company is still fine in your opinion, and you're on similarly good terms with the rest of the dev team and management. If they give you any grief, it's them behaving badly.

Incidentally, if they do want you to come back to help with knowledge transfer, you'll be quoting your day rate for consulting. This is not going to be less than $1,000 per day (or fraction thereof), and will be double that if you were anything other than a junior dev.

Good luck. Let us know four days from now when you've landed your next gig for more money!
Parallax scrolling for a good cause (oh and some naked legs too)
Would you like to explain further how you think that cruelty and unusualness are mutually exclusive, either in general or in the eyes of the law?
Show HN: Quick and Quality Photomontage (just released android app)
I'm not going to rehash my recently made above comment, but you should check it out. [1] Tylenol kills 500 people a year, so I guess that means we should make it illegal, huh?

Drugs are mostly destroying people and communities because they are illegal. Maybe if your dad went to prison for an ounce of weed, you would have a different sentiment.

When a drug can be produced in a sterile environment, you can yield greater purity and an overall safer product. Not to mention when drugs are legal people who are addicted are more apt to seek treatment. You might be surprised to hear several countries are treating heroine addictions via making heroine available under a controlled environment where addicts can seek help. They're seeing great results. [2] Also make sure to look at [1] to see how much HIV rates have dropped in Portugal because of decriminalization of drugs like heroine.

Do you want to ban alcohol, tobacco, stairs, cars, and swimming pools in the name of people you deem incapable of making wise decisions? You have no right to tell someone what they can put in their body or do to their body. Give people unbiased information and let them make their own decisions.

Stop making the assumption that people aren't going to do drugs if they're illegal. That's not true. Lower-classes, particularly poorer African-Americans have been devastated by the drug war. See the book the New Jim Crow laws for more information regarding this. If you're a young black kid with an ounce of weed you're probably going to jail, where as if you're a wealthy white executive who lives in a private gated community and happen to have a few grams of coke and you get caught, you'll get a fine and a slap on the wrist.

[1] https://news.ycombinator.com/item?id=5951290

[2] http://www.time.com/time/health/article/0,8599,1926160,00.ht...
The release was announced here: http://pastebin.com/f7jYf5Wd

See also: http://venturebeat.com/2011/12/30/stratfor-data-dump/

"It's time to dump the full 75,000 names, addresses, CCs and md5 hashed passwords to every customer that has ever paid Stratfor."

That is followed by a request for other people to make use of that credit card information.

I don't know enough to make a judgement on whether he can be expected to have known that the data dump contained credit card information.
My dad once said to me: "There will always be someone better than you".

It really pissed me off for ages, because I was like, what's the point then? What's the point if I can't be the best at something? But then I realised that if someone's always going to be the best and beat you, you don't have to strive in life to be the best at something. It kills the ego for me, which is a big battle for a lot of us. Being good at it and enjoying the journey is enough. I try to be excellent at what I do, but It doesn't matter if I'm not the best. Even if I am, It's unlikely I always will be and that's fine. For most of us that are average, it's unlikely we're going to be the next "Big thing". But who cares.

On a side note, this article seemed kind of nothingy, I don't think I learnt anything new from it so i'm wondering why it's so high on HN?
Microsoft has a 90% desktop monopoly, which they've maintained for about 2 decades. When 9 out of 10 computers run your software, you're pretty darn powerful.
How about pulling people's nails out? Isn't that both?
> it would be trivial to trace anybody putting money into the mixing service

Not really; you can't tell which bitcoin addresses belong to a mixing service and which ones don't; it's all just transactions from one address to another. You may know the owner of the originating address, but not the receiver. There are also mixing service that run as Tor hidden services just like the illegal marketplaces themselves, so you can't really prosecute those.
Also in case you have dev-environment setup on multiple computers, it eliminates the need to keep them in sync.

Also good for hobby projects where you just want to try out a technology without spending time on setting up the environment
Sure. I'm not arguing against "it could easily be construed" and "it may even be arguable" (though I think you're seriously stretching there). If this was a regular nightclub with no prior agreement/requirement about exit policy, you'd be completely unarguably right.

My questions are: Are there circumstances in which it would be considered appropriate? And what sort of notification do you have to give in advance before it could be widely considered appropriate?

Where I come from, the government considers it appropriate to "lock up" journalists for 6hrs on a voluntary basis in return for privileged early access to information about the federal budget: http://ministers.treasury.gov.au/DisplayDocs.aspx?doc=pressr... I'm not sure how the exemption for "except in case of emergency" is applied, but I reasonably sure it's closer to the "OK, divert the flight from San Francisco to Honolulu" grade "emergencies" rather than claustrophobia or panic attacks.

If I, as a competent adult of sound mind, wish to _choose_ to put myself in a situation where someone will "trap me inside a building by force, when otherwise I would be physically capable of leaving" - what steps does an event organiser have to go to to not be accused of wrongdoing when they do exactly that?

While I'm happy enough that I'd agree to be "bound" by an event invitation instruction saying "To remind you, this is an event with some legal and physical risks. If you are uncomfortable with these risks you should not attend. Really. Once the event begins you cannot leave for two hours." - I can understand that some people might think that's not "enough".

If there are any people reading who disagree that statement is sufficient to justify the actions on the part of the event staff in the article - what would you consider "sufficient notification/agreement"? (Or do you think restricting my ability to choose to be able to go to that sort of event is "right"?)
Were I to hazard a guess, I'd say I was better informed than 95% of my fellow US Citizens. Yet though I'd heard of the HBGary incident, the fact that a journalist reporting about it was facing a criminal inquiry completely escaped my radar.

Perhaps this is a reflection on my own ignorance, but if so I fear it's a worse reflection on the ignorance of the average well-informed citizen.

It goes beyond saying that any sentence counted in "years" for making an online threat against an individual is beyond ridiculous, and clearly sought for politics and in this case for the purposes of retribution and precedent .. don't you dare oppose the FBI or we will destroy you.

I can't exactly express why, but having an administration with such an attitude (that of a bully) makes me sick. Sick to the point that I would sacrifice all common ground I may have had with them in order to kick them out of office.
Being Present
> What DI should make possible is you modify only componentA, to state that it now depends on serviceB, and as long as you have a serviceB available then you don't need to change your "wire up my application" code at all

So... instead of modifying just the "wire up my application" code, you modify just the componentA code. In return you get to fill your code with magic so nobody can see where serviceB is created.
I sense an opportunity for an upcoming YCombinator round...
> SR claims to have suffered from ‘DDoS’ attacks, which is very unlikely due to the way Tor hidden services are designed.

This is wrong; Tor hidden services are quite easy to DDoS for someone familiar with Tor. In fact, the attack was described on the Tor blog [1] shortly before it was executed against Silk Road, so this is likely where the attacker got the idea.

[1] https://blog.torproject.org/blog/hidden-services-need-some-l...
The risk not taken
A very inspiring blog post about entrepreneurship and on taking the first step.
Upvoted for a very good post. Just a small note - it's "heroin". "Heroine" means something entirely different :)
Ow. That's really, really bad.

Opera is already a pretty small actor so stuff like this probably hurts them more than the bigger guys. This incident will probably show in the bottom-line later on.

Hope they get their things sorted out, and I really hope they learn enough to avoid having anything like this happening in the future. Things like this are never OK if there is a second time around.