skysight-inc/HackerNews huggingface dataset:
The largest reason why I would hesitate to use Perl in my startup would be the core philosophy of TIMTOWTDI (there is more than one way to do it). Being able to write something multiple different ways leads to Perl being a lot easier to write than it is to read. As a result code maintenance can become a huge headache due to someone not understanding the idioms used by the person who originally wrote the code.

I've seen this happen on a number of projects that I've worked with using Perl. Typically a person wouldn't be familiar with "silver ball" (Effective Perl Programming), would go off an write a large body of code which would be difficult to wade through. This gets exacerbated by new coders not understanding how perl expects you to understand some of its idioms (like $_, @_, etc.) implicitly. Because reading other people's code is a great way to learn a language, this makes Perl a lot less approachable.

I think Ruby suffers from some of these problems to a certain degree as well. I haven't worked with Ruby professionally, but in the few times I've played around with it I've found myself spending a lot of time trying to figure out which looping construct I should use over another.

Python does have a leg up in this department. The language tends to be fairly succinct and things like Pep8 and flake8 really help in making most code fairly digestible.
Where's the difference? Admittedly I don't know that function in jQuery very well, but I though it would register a 'click' handler for every tr, just with the difference that it passes the parent tbody instead of the tr in 'this' to the handler. What else does it do?
Pea.rs - Common Patterns of Markup and Style
Hologram - Style Documentation Build System
Whether my DOM manipulation library consumes 4kB of that or 35kB isn't especially important to me.

Now that jQuery 2.x drops IE 8- support, a credible question is whether such libraries (which are more in the 95KB range, minified) are even necessary at all.

Quite outside of the time to download, there is a measurable cost to parse all of that boilerplate code as well. This has more of an impact on mobile, obviously.
KSS | Knyle Style Sheets
As serious as all this is (very), and how much of a hero he is (great), I do still wish someone would buy him a horizontal striped red and white t-shirt and cap. He even _looks_ like Waldo.
Depends what you are going for. If the point of type declarations is speed, I think most high-quality CL implementations will take advantage of a type declaration. If the point is compile-time type safety, yeah, that's a more obscure feature. Of course you can always use check-type for run-time type safety though.
Agreed. This article (the inspiration for OP's github) is what triggered it for me.

http://stevelosh.com/blog/2012/10/a-modern-space-cadet/
I know it's awfully tempting to obsess on something that is easy to measure, like file size. I also know it's tempting to imply things like "twice the file size means twice the page load time". But it's not true. It's NOT true.

Look at this video at 6m30s: http://channel9.msdn.com/Events/Build/2012/3-132

Productively optimizing a web page is no different than optimizing any other code. If you want to know why a web site is slow, profile it or run it through a tool like webpagetest.org. Don't just set off to rewrite all your loops to run backwards, or eliminate function calls, or reduce the amount of this or that without any understanding of the result.
What about the CTRL-Left Amiga-Right Amiga on the Amiga systems?!
Things Most Americans Don’t Know About America
By the way, I read your site more - and I really think you're on to something. Partner with SEO Moz
Incredible! What did you find was the best way to access the decision makers in your niche? Sounds like you contacted them directly and met with them, but what type of marketing/promo did you do? Seems like your SaaS hit a tipping point somewhere between year 1 and 2 and really caught fire?
What about losing your device? How is that handled with something like Google Authenticator? Don't you then have to fall back to some sort of manual verification?

If you lose your SMS authenticated Phone, you can get a new one and transfer your number to it.
Call forwarding doesn't forward SMS. I don't think you can do SMS forwarding (at least for any carrier I'm aware of). You'd need to social engineer the carrier to port your target's number to a different phone -- in which case the target is going to be exposed to a ton of trouble...
Hasn't been updated in a month. I hope the guys are OK and are coming back.
Ha, I'm glad I'm not the only one who has this problem with XSLT processors.
My biggest problem with 2FA that relies on a phone is that I can lose my phone. If I do, the system can then do one of two things:

a) it locks me out forever. I'm screwed.

b) it has a way to reset my auth. Meaning an attacker doesn't actually need my phone.

So getting the phone involved is either a huge risk or a pointless feel-good factor that can be bypassed. Either way, I'm not on board.
Whatever happened to that keyboard with LCD keys (I've completely forgotten it's name, otherwise I'd surely answer my own question). Did it ever become available or is it still vapourware?

That seemed like a good idea at the time.. I mean, muscle memory is fine if all you do is programming (which I do a fair amount of), but sometimes one moves into different domains that have their own keyboard layouts, for which type of keyboard would be a boon.

EDIT: Of course, actually googling beforehand would have brought up 'The Optimus'.. And of course the Optimus Maximus is "unavailable", though I fail to see why except that perhaps it was horribly expensive?
It'd be really nice if there was a more centralized place to submit and discuss recent work. I usually end up posting my stuff to visualizing.org, visual.ly, and sometimes hn.

There generally isn't too much commenting going on though, despite generating a decent number of views. This makes sense - I only give feedback to a small percentage of things I see on the internet. I would like to interact with other designers more, but sending unsolicited comments/criticism via a tweet or an email doesn't seem appropriate most of the time.

I included a small note on the bottom of my last project "Have an idea for another graphic? Think I did something wrong? Hit me up! adam.r.pearce@gmail.com | @adamrpearce" which resulted in a couple of interesting email threads. None of those conversations really need to be private though.
>I would also like to believe open source makes software more secure, but I'm not sure if there is any research that confirms it.

OSS is more secure because it's easier to verify than machine code. The fact that it is still not easy to verify is simply a flaw in the choice of PL/build system. Obviously if you try to verify a project in C, you're not going to get far, as the behaviour of most of the code will be undefined. Code written in the E programming language (http://erights.org) for example, is orders of magnitudes more easy to verify, simply due to forced encapsulation and that the semantics of it are much more obvious.
The video stated there will be a forum set up for discussions with the students where you can get answers to questions and insight into the industry. Also said the site will be ever growing and content will be determined by questions people ask.

Don't really understand how it sounded like a scam, you just have to submit your email address to get updates.
I see. Makes perfect sense. Congrats on your recent success, best wishes for the future!
The only remote attack is DoS. You'd need physical access to steal data with that.
It's not easily exploitable, but it can be done. Elias Yarrkov's page on this: https://cipherdev.org/rc4_2013-03-13.html
Neil Rajah : A nice side-scrolling platform game
What the Mean Really Means (visualization)
Speaking as somebody born in 1986, PC Magazine and Ziff Davis ignited my interest in software and computers as a child.

It will always have a special place in my heart, even as a relic of print media (Ars Technica and AnandTech have replaced or obsoleted many aspects of the magazine even in its ironic non-computer print death throes of trying to modernize to the Web).
Compute was awesome. Probably the only magazine that actually made me a better programmer.
Hmm, it's a very long time ago that I pressed that key combination. I tried it out, and apparently it is wired to the Logout function of KDE...
Byte was amazing. In the mid-80s I was into the Atari ST platform, and I probably have in storage their "home computing" issue that had an awesome top-down view of the ST [1].

[1] http://archive.org/stream/byte-magazine-1986-03/1986_03_BYTE...
That was bone-headed stupidity. RSA could easily have used more expensive HSM hardware, and the rest of us can spend a grand on two YubiHSMs or equivalent hardware. (Or trust Google's....)

There's little excuse to poor secret management if you run your own hardware.
Dropping out of high school, especially if you are interested in and want to work in computing, will be the worst mistake you ever make.

Whatever is making school unbearable for you, fix that problem instead (or ask for help to fix it) of trying to get away from it.
I'd rather say it's was the crashy software running on top of Windows that made it famous. Can't even remember last time I needed to use it for a Windows component itself.
In the real world preformance matters my friend.
Personally I care more about that than 4kb vs 32 or 69 :P
047 Styleguide | Build PodcastBuild Podcast
Bradley -- Dr. Bradley -- taught my section of Digital Logic Design at NC State. Ace the final and he'd autograph your keyboard.
If you lose your device then you restore it from a backup. For Google apps's 2FA setup they also have one time use codes. It s a special list of 10 codes that you're supposed to save somewhere safe offline (eg. wallet, deposit box, trusted neighbor, ...). If you lose your device you can use one of the codes to login and configure (or disable) 2FA.
> And I'm pretty sure it's faster to parse / run a 4KB script than a 30KB script.

That's always a dangerous assumption to make. I can guarantee you that size has nothing to do with parsing and running times. As others have already pointed out, this library is already less performant than jQuery for their needs.
What Is Codenvy?
As I mentiond, I'm certainly not a `Google hater.' I just don't want all of my services in one basket because I want ot be less dependant on one provider and the integrations between their services.
Asylum for Snowden won't stop Greenwald from publishing more leaks
Rude VC: Europe’s leading countries for venture capital
> Now that jQuery 2.x drops IE 8- support, a credible question is whether such libraries (which are more in the 95KB range, minified) are even necessary at all.

Well my answer to the credible question is that jQuery has to normalize and fix bugs for just about all the browsers it supports, it's not just an oldIE problem. Plus, jQuery provides abstractions above the basic DOM operations which are pretty low level. So if you don't want to use jQuery you'd probably want some other library to provide equal or greater abstraction.

> Quite outside of the time to download, there is a measurable cost to parse all of that boilerplate code as well. This has more of an impact on mobile, obviously.

Measurable of course. Significant as a portion of the page load time for most pages? Well that's a different thing. And of course if you want it, jQuery 1.8+ provides the ability to create custom builds if you know you don't need parts of it.
In general, it could be enforced as a random identifier generated with each electronic application; this just burdens employers with implementing an electronic applications system, which is too high a regulatory burden (and would make dropping off a CV in person impossible/illegal, which is stupid.)

It could be a hash of the persons name, too, but then the public would have to learn what a hash was...

NI number works well in the UK, because it's convenient (and the original suggestion was specifically for the UK.) A similar system could be used anywhere.
"Python isn't half as good of a language as Ruby."

"C# isn't quite as good as Java"

Can anyone who truly believes these things be taken seriously, really?
CTRL+SHIFT+ESC does what CTRL+ALT+DEL used to do -- goes straight to the task manager.

CMD+ALT+ESC on mac, btw.
PGP and S/MIME work perfectly well. Personally, I'd be wary of any new crypto solution until it had been extensively independantly verified and burned in for several years.
> The father determines the gender in a sense that he provides both X and Y. The woman only provides X.

That's not a meaningful sense. Obviously it's a question of whether a sperm cell carrying an X or Y chromosome gets into the egg, but both parties have a lot of biology involved between meiosis and fertilization that might impact that.

> Now I haven't studied seriously biology but to change the meiosis of sperm cells to skew the odds seems more effective (and simple) than to have the egg cell select the sperm with the X or Y chromosome during the fertilization that is messy as it is. And if X and Y sperm cells were somehow different I think we may have found out.

X and Y sperm cells are different - one is carrying an X and the other is carrying a Y and these will therefore have different masses and probably some other characteristics will differ. As female mammals tend to invest hugely more resources in the individual child, it's more likely to be worthwhile to them to sacrifice some chance of conception to favor a particular gender. Furthermore, if the child is more likely to stay with the female, the female is a better predictor of the environment the child will be raised in. Since meiosis produces an X and Y cell inherently (it splits a cell with an X+Y in half, with one chromosome going each way) and furthermore happens well in advance of mating when the partner may not even be determined, it seems less likely that the cause for any pattern in SR would be manipulation of the ratio of X vs Y cells during meiosis. Of course, biology surprises on occasion, I just think you're making entirely unwarranted assumptions.
Fixed. Turns out to be a bug in Raphaël (the graphic library).
Delegated events let you handle events for child elements that aren't even in the DOM at the time you attach the handler. The jQuery docs explain it:

api.jquery.com/on/#direct-and-delegated-events

> Delegated events have the advantage that they can process events from descendant elements that are added to the document at a later time. By picking an element that is guaranteed to be present at the time the delegated event handler is attached, you can use delegated events to avoid the need to frequently attach and remove event handlers. This element could be the container element of a view in a Model-View-Controller design, for example, or document if the event handler wants to monitor all bubbling events in the document. The document element is available in the head of the document before loading any other HTML, so it is safe to attach events there without waiting for the document to be ready. ... In addition to their ability to handle events on descendant elements not yet created, another advantage of delegated events is their potential for much lower overhead when many elements must be monitored.
DuckDuckGo's pretty great — I started using it several months ago as an experiment and once I got used to it realized I actually preferred it to Google. The instant answers are fantastic and when they don't have what I want I can just write it and submit a pull request on GitHub. Love it. Results still aren't quite as good but they work 90% of the time (and I don't have any problem going back and trying Google during the other 10%)
The problem with that story is two-fold:

1) It's too abstract and distant. It feels like it screwed around with people in weird ways in a different world to ours. Communist Germany does not seem like a reasonable parallel to our society for most people. "It wouldn't happen here" is a natural reaction.

2) Even though it's not that far off the reality of what could happen, it sounds like an exaggeration, a bit like a Godwin Law condition. The fact that it sounds like "Nazi" (and that probably some sizeable percentage of americans have never heard of the Stasi and so will hear "Nazi" and repeat that) really doesn't help.

What we need is a more immediate and tangible human story, something that arouses sympathy and at the same time a clear realisation that "this could happen to me".
All carrier locked phones, including Android and Firefox OS, can receive ota updates without knowledge or consent. Any open source phone OS can and will be modified to benefit the carrier before reaching consumers.
For revenue specifically - we built it to sell from the outset (A book called "Built to sell" where the author speaks on Mixergy is a good primer). Specifically, we priced high (base package was $150/mo), recurring revenue (SaaS), focused on a few pains until we found the biggest one, only contacted clients that had large bases (eg: 1 decision maker could purchase it for 30 franchises), and marketed and spoke directly with the decision makers. (Getting in front of them in their offices and at conferences,and doing "gratis" learning sessions at one of their locations.) For meeting the decision makers - we found one influential person at a well known industry client, and give it to them for 80% off for few months and worked out the bugs. Then we leveraged them as social proof to go to the larger clients. Then the smaller guys will see the larger players using it, and follow suit.
That annuity case is batshit-crazy, IMO. Sad that we've gone so far in the chase for fairness that we demand equality in the name of fairness in cases where it makes no sense.

I'm all for fairness. Equal is not fair in all cases, nor is fair equal in all cases...
Seven years in hell
Thanks! I haven't heard of most of these.

> There is plenty of evidence.

What are good sources for this kind of evidence? I'm actually interested; I find it hard to find good information on audio quality, because there's so much audiophile garbage out there.
This is solved by using an operative lisp - fexprs (or 'vau'/'$vau' in kernel and wat) are non-applicative combiners that execute at runtime, so you can have a first class combiner that chooses when/how/how many times to evaluate its arguments.

I've been having a lot of fun recently writing code in wat-pl (my perl port of Manuel Simonyi's wat-js interpreter)
Yes, the summary of the full Patterson/Bernstein paper says the attacks on the Fluhrer-McGrew biases are easier in practice to exploit than the first 256 bytes --- which also were known for over ten years but weren't taken seriously until last year.
Fantastic! Congrats, I think I'll pick up that read as well!
This had very little to do with Google being `evil', the NSA, or any of that (despite the title, I realize now it's a bit misleading).

Rather, it has to do with me not keeping all of my services in the same basket and not being dependant on the integrations between services run by the same company. I would have happily switched my services to Microsoft or Amazon if they provided something better and am still happy to go back to Google for things that I can't find a good alternative too (I still search with Google on occasion, still use Google Books, Google Patent search, etc.)
There was never any plan to restrict anything else (although if your github URL is your name, like mine, I guess it would defeat the purpose.) The point was that people often put their name (like in the article) in a large font at the top - replacing this with a faceless number just reduces the initial "put the girls and people called 'Singh' in that pile over there" nonsense, at makes people actually read the CVs.
A problem for security geeks is they frequently forget about 2 things: 1) the balance between usability and security, and 2) The risk acceptance/appetite of the person for the security they want/need to use.

The two are intertwined closely. For something that isn't that important, a user isn't going to jump through complex hoops every time they have to login. What they will end up doing is finding workarounds (Hello Mr. Post-It).

For most folks, they don't really need complex solutions to reset their email password. What needs to be asked is "What am I protecting, and what is it worth to me?"

Oh, and I'd suggest certificate-based auth is way better than complex passwords.

Daniel's been around for a while (I've loved OSSEC for years) so I suspect this post just wasn't meant to be a complete essay on the topic...
Bah... ;-)
IIRC, GSM has been cracked. I'm not an expert, so I'm not sure how this affects SMS, but as SMS is done via a control channel (that was not originally intended to be used for text messaging), I'm assuming that there are no extra protections there.

Granted, this requires physical proximity though, which definitely raises the bar for any attacker.
6 Links on Saturday - Orbit App is Live, Why I Stayed, When Things Go Wrong
Yah, this argument always strikes me as hollow (or really sad). I have a lot of good friends. They are mostly on Facebook. I am not.

The worst that happens is that every now and then I get asked why I wasn't at the movies last night or something because they didn't realize that I couldn't see the invite.
Your lawyerly response notwithstanding (it's not illegal if they're under 40!), you don't fire someone because they are old. You fire them because they are underperforming, whether they are old or young.

This philosophy is just another extension of the fetishization of youth. Just because someone is young doesn't mean they'll be better than an older employee (and vice versa, of course).

Judge people on their merits and what they actually achieve, not on what their birthday happens to be.
"Computer Shopper was like Vogue or Vanity Fair for nerds. You read it for the ads."

Someone clearly has never opened up a Vanity Fair in his entire life.
> Bill made it famous with his crashy software that made knowing it needed...

And he doesn't seem too proud of it ;-)

http://www.youtube.com/watch?v=WdGQsBDSEpk
My Life in the Canyon of Heroes
Ever heard of Komodo? I've been using it for years for Perl development, plus it supports Python, Ruby, and a host of other languages.

I wouldn't consider doing any serious Perl dev without it.
The feedback from other dataviz people is such an important part of it, and it's hard because we are all so separated geographically and in different companies.

When I make a new project, I'm lucky enough to have a small group of people who are in the business who I can trust to give me feedback. But I've spent years cultivating that group, and it's not really fair to newcomers who want feedback on their first work, or just want to lurk and listen to the experts debate things (which is what I usually do on HN). That's all private or hard-to-find now, which is a problem.
Obama's DoJ has just announced the new policies saying they won't consider journalists as "co-conspirators" of whistleblowers anymore (why was that ever the case?!).

How long do you think that will last if Greenwald will keep publishing ever more embarrassing leaks for the administration. Weeks?
That's mostly because its a library, and so most of the optimizations you're getting are purely local in-method and no dead-code pruning.

Where Closure shines is building an app whole-world, compiling both the client code, and library code together, then it can prune away all unused methods in the library.
> But for most of the industry it is a cost of doing business.

That's the part that is disconcerting. It's a despicable way to conduct your business.