skysight-inc/HackerNews huggingface dataset:
I mentioned this about the Apple Mac Pro page when it came up on this site, and I'll say the same thing about this page:

It's very well done, but it's just a slide show.

It's a good presentation, but it has very little to do with UX if the only user interactivity involved is clicking a button to go forward.

EDIT: The title of this story has been changed since I and others made this and similar comments. The previous title said something to the effect of "Story Telling: Some of the best UX I've seen."
I'm guessing you weren't trying to convince people to learn to speak Spanish.

Edit: Spaniard is indeed a lovely word: http://www.thefreedictionary.com/Spaniard.
A start screen for Vim
You don't understand economics if you think that's what would happen. If women actually make 18% less purely because they're women, companies who realize this will be able to hire well by paying women only 15% less. More people will catch on and see they can hire qualified women for only 12% less. And so on until the prevailing price represents something other than "just because they're women".
Not only idiots, it seems everyone is so obsessed with creating ajax navigation, rich controls, and one page apps. The one apt reason why I never open Google Plus is because every things takes years to load with their fucking javascript in everything.

Why can't sites be like StackOverflow, it only uses JS where necessary.
The Gmail iPhone app has very reliable push functionalities and is way more extensive than its apple general mail counterpart.
or the persona he was given by the coverage...

For example, President Ford was probably the most athletic President in the 1900's (he played LB). He is "known" more as clumsy and un-athletic from a set of comedy sketches[1].

1) the real lesson is shoe choice is important as a politician
I agree totally its not real!
Pretty cool idea, the no jailbreak thing, while true, is a bit disingenuous though, since you need your own developer account.

What are the chances that Apple would just revoke all the keys used to build this app? Surely it's against their TOS?
I've been using them for a few months as well. It's the most decent one out there. Apparently they have a new blueprint coming soon.
Dual gigabit, wi-fi and the ability to run Ubuntu makes this very interesting for a "home router / hub" type device. Video output makes it interesting for a media player device. Putting both in one low-powered box is awesome...
This is solving the wrong problem (for Autodidacts, at least). Kind of no different than Khan's discussion boards, coursera's forums, and what have you.

You must realize, for a very human experience (learning and social/peer bonding around the topics) - technology is only an enabler and not whole pony show.

What's lacking is a platform for genuine collaboration and discussion on the topic of learning qua learning for people that are creating their own formal process of learning.

I have a feeling that this will manifest as a conference or weeklong retreat - rather than an app or discussion forums.
Or maybe they are just changing their browser windows size by hand, which would lead to a lot of different resolutions.
Congress can very easily act to define the terms of the debate on these legal questions by defining "due process" (and similar factors). The courts are obliged to show reasonable deference to Congress.

Congress chooses not to, and that is implicit acceptance by the majority and minority leadership in both houses of Congress.
"Look on my works, ye Mighty, and despair!"
More like radically covering-their-ass-ist. HR departments are paid to prevent potential lawsuits and it's cheaper/less risky to fire someone at the first hint of controversy than it is to face the chance of a lawsuit, no matter how small.
Although Merkel is just being opportunistic, I'm optimistic that, like with ACTA, we are slowly seeing that the complete sell-out of European civil rights to US interests is no longer politically sustainable.

Whether they mean it or not, the fact that the staunchest supporters of the US feel the political need to speak out is significant in itself.

The US has gone a bridge to far by treating the citizens of a friendly nations as the enemy.
Exactly -- the tests may have been done on different populations. In an extreme case, imagine both treatments are randomized trials for an otherwise terminal illness, but Drug A was tested on the elderly and Drug B was tested on youths. When cured, those on Drug B will live longer, if only because they are young.
Google could only provide push to iOS through Exchange, something they have to license from Microsoft. So, they're not doing that any more. As far as I can see, there actually aren't any license-free options available.

But you can use their Gmail app and still get push notifications.
Anatomy of a floating point number
Someone finally created a page with that. Thank you.
This runs ubuntu AND android. I have a netflix app on my android tablet and phone. This should hypothetically support all streaming video services.
I became interested of finding the answer. It seems that answer is no.

http://serverfault.com/questions/433221/does-amazon-ec2-and-...

>AWS does not comment on this question. The general consensus (based on seeing this question asked on SO, HackerNews, Reddit and so on) is that, unless AWS specifically tells you the instance type is running ECC memory, you should assume it is not.

>Although unscientific and inconclusive I suppose this makes sense - ECC is a selling point, and the fact that AWS does not plaster "all our instances run ECC" on their info pages certainly suggests that they are not.
FST-I Think We're All Bozos on This Bus 1971-early popculture hacker reference
Considering most voters (57%) disapprove of the high-speed rail project, it sounds like he'd be doing Californians a favor.

http://www.wnyc.org/blogs/transportation-nation/2013/mar/28/...
The way I see it, it's a nice set of slides -- barely any UX though. I also think the UX is flawed because there is no visible way to go back to the previous slide or to the beginning (other than the browser's back button so it's not _terrible_, but many people associate the back button to the previous site).

If you are instead trying to spread the word about this in an indirect manner, I understand, smooth move.
There's a drug on the market that's taken by patients who had prostate cancer. It grows back your hair and is being bought off - label for it.
I forgot the name.
A database to prevent the resale of stolen cameras, lenses & video equipment.
Microsoft Faculty Summit 2013
I am not sure why they have a big blue button to go to next slide. I expect some kind of in page action for a button. As Centigonal said its just a slideshow. The message is good and everything but the design is not very.
Just why isn't key distribution an SMTP extention? I'd expect there to be an RFC for it, but I couldn't find anything. (I'm not talking about DomainKeys. I'm asking why an SMTP client can't ask for a recipient's public key, and if it exists do the encryption.) Here is a blog post about it:

http://www.illuminatedcomputing.com/posts/2013/07/public-key...
I still think that it's a good idea to change the default port for sshd, even if you don't let root to login and use public key auth and fail2ban. Why? Because this "obscurity" helps keeping false possitives to a reasonable low number, so you can actually see if there's a tageted attack or not.

If I see a auth failure "root"-"123456" I instantly know that's not a targeted attack, it will unnecessary fill my log files that will add with time and become a burden to audit my systems, which at some point I either don't do it thoroughly or any at all.

SELinux takes care of controling which application could open outbound ports, so if your box is properly configured, there are other ways to reduce the impact if the box is exploited
You wouldn't pay them less. You would simply put up a job ad that had salary 17% less than the market rate for men. Then, men wouldn't apply for the job, but equally efficient women would.

It's a thought experiment that suggests that the wage gap doesn't exist.
Yes, I'm sure the license costs were killing them.
When these things come up on HN I pipe up a bit.

I wrote several implementations of passive device fingerprinting for fraud/security firms and they are implemented across a broad range of industries and companies. I know quite a bit about the shortcomings of these and the challenges faced, in case someone is interested.

Also, just FYI, the big use these days is actually NOT in security or fraud, though most of the companies selling these still say that is the case. The use is in advertising. Most of the companies selling these still call themselves "security" or "fraud" companies, but the revenues from advertising are far outpacing the former categories.
> If you get to the top rank of any government agency, you have a moral responsibility to understand and respect constitutional law.

Sure. But you don't have a moral responsibility to take the broadest possible view on Constitutional protections. It's one thing to ignore the 4th amendment. That's bad. It's another thing to reasonably conclude that the 4th amendment was intended to keep police from breaking into peoples' houses, not to keep the government from collecting information that people voluntarily handed over to third parties.
That is a very detailed review based on first-principles reasoning. Thanks.

I think the second author is van de Geijn. Here's a link to the PDF: http://www.cs.utexas.edu/users/pingali/CS378/2008sp/papers/g...
I disagree with this. Only speaking at women-only events is a bad thing, but refusing to speak at women-only events is just as bad. It seems like women act more passive around men (at least in engineering). If there are only women in an audience, they might be encouraged to speak their mind more and feel less awkward about it.

Here is an example of women being passive in engineering:
An engineering club at my college had 30% to 50% women at almost every meeting. Most of the time, the women didn't do anything for the club's project - they stood nearby, talked, and sometimes cut foam or got something for a guy. This was in a machine shop.

If they had put themselves forward and tried to get involved, they would have learned a lot and had more respect from the guys in the process . As it is, I'm afraid their behavior only reinforced the stereotype of "women engineering majors aren't serious" and left them with fewer practical skills than the guys.

---

I don't know how effective having a women-only audience and speaker would be at reversing situations like this. If the talk was on "be more assertive" and "here are the potential problems you might face", it might be helpful. men-are-evil and similar lines are not.

In the example given, having women-only clubs might help more - if the focus is primarily on building things, learning new tools, or completing some major project. It would increase womens' confidence and their assertiveness, as well as giving them an opportunitity to learn stuff a lot of the guys in the regular engineering club already know - without feeling awkward/stupid/embarassed.

Regardless, though, any women-only group opens up the door to women who might be uncomfortable speaking out and asking questions otherwise.

Edit: fixing some italics :/
For what it's worth, the multi-process architecture is designed to customize from one-process-for-all-tabs (plus one for the ui and one for Flash) to one-process-per-tab. I don't know whether this will be a released feature, though.
Personally I believe him but I also believe that the powerpoint is far from enough. It contains nearly no information about what's Prism except that it exist and keep information from different companies.

A good evidence would be an actual use of the system. If I remember correctly, he said in an interview that he could go as far as getting informations about Obama. That is the best evidence you could show.
Compared to the amount of work that needs to be done for this project to function.
> Build your product and talk to your customers.

That is indeed excellent advice.
Forcing a comparison to existing drugs sounds good, but things that are less effective but have fewer side effects are often far more useful than the most potent option aka Tylonol vs Morphine. The problem is you still need the placebo baseline or saline would pass as the safe but less effective alternative. Now, adding competing drugs to a trial is great information the problem is they are already really expencive so adding even more cost is generally a hard sell.
What is the inherent value of a listen (as in, of a song)? I assume the music industry has been trying to prop that up but with the democratization of musical content creation that price has to have been driven down. I've heard new music from new bands that I wouldn't have had a chance to in the 90's.

There are so many songs to listen to on Spotify that I can generally find something to listen to nowadays. If some artist I like withholds their catalog that does hurt me initially. I adapt and move on and listen to something else. Their loss.
Yes, Chrome is very sensitive to swapping, performance-wise.
I would be able to use it if there was a way to just keep the data only in my computer.
No?

If that were to happen, it would be a problem with the programmers more than anyone else.
Smart Bedding – Never Make Your Bed Again
I was hoping to see an article about some neat new utilities specifically tailored for doing advanced data analysis.

Instead this is a set of basic examples of bog-standard tools that every newbie *nix user should be already familiar with: cat, awk, head, tail, wc, grep, sed, sort, uniq
Read the article, then reread your comments. You're plenty smart, and it's pretty obvious.
If you have some valuable secret to keep (classified documents, trade secrets, whatever), you'd be stupid if you didn't compile all the software that touch it yourself.

"We" get pre-built packages from repositories, but only because "we" don't value our privacy enough.
Reinventing the School
Sell HN: Do you have a side project you want to sell? (#2, July Edition)
I loved the old Sell HN thread at https://news.ycombinator.com/item?id=5803374

Are there any new/other projects up for sale? Also feel free to post updates on projects you've posted in the previous thread.
I don't disagree, but after reading the OP I feel like you might be feeding the wrong wolf! :D
Does anyone know if the "two RS232 serial ports" is a typo?

If they are real serial ports it sounds too good to be true. They would make great S1 ntp boxes with GPSDOs. I have a sneaking suspicion that line is a typo and/or they have some whacky interdependence on USB and the lines will be riddled with jitter.
Going on the MX6 specs[1] and GFLOPS alone[2], it should be a bit faster than Ouya's Tegra for the cheapest option and handily beat it on the more expensive models. Bitcoin mining is out of the question - it's basically a tablet-class GPU.

GFLOPS isn't the whole picture of course, but my Google-fu is failing me at the moment.

[1]: http://en.wikipedia.org/wiki/I.MX#i.MX6x_series
[2]: http://www.cnx-software.com/2013/01/19/gpus-comparison-arm-m...
I have heard reports of considerable performance improvement from users clicking on "Firefox Reset" button. Have you tried it? You can find it in about:support (or somewhere in the Help menu, I can't remember where).
$10,000 bounty to integrate Netflix Asgard with Apache CloudStack
I agree that changing the port is not a great security measure in theory and I think it should be last of a large number of things a person does to secure SSH.

BUT- I worked at a company a while back that had fail2ban notify us when by E-mail when it banned people. Changing the SSH ports dropped the bans per 6 month from 80-60 to 1-2. So while its certainly not the only thing you should do, there is something to be said for obscurity (in addition to existing real security of course).
He didn't say it's unusable, he said it's a bad tool...and it is. That's why a whole industry was born to work around it by transpiling to it.

It's a bit ridiculous to say that anyone who complains about JS doesn't know it.
> I'm hoping for some kind of global blanket surveillance ban treaty.

That would depend on trusting the people that are spying on us in the first place to adhere to the treaty. I'm hoping that talented coders will continue to produce possible defenses to the obvious infringements of our basic right to be left alone.
I suspect it's based upon this SBC (given it's from the same company and this SBC is marked as a new product): http://compulab.co.il/products/computer-on-modules/cm-fx6/#o...

This should give some rough indication of the options available and the price increments.
If you use it in the right way, there would be no problems.
Are you sure you need a dev account? I haven't tried it (yet), but the page claims:
"No jailbreak OR developer account required :)"
Musician, Spotify user, and Radiohead fan here. Spotify fulfills my dream of working in a record store so I can spend all day discovering music. This argument is behind the scenes paperwork between the service and the content owners. They should figure it out without bothering me the end user. If they can't, then they're both at fault.
> There is a treaty between the United States and Switzerland to avoid double taxation on income, which means that taxes paid to Switzerland by a resident of this country must not necessarily be paid to the United States.
In general, an American employed in Switzerland can expect to pay at least as much tax to the various Swiss government levels as he would have to if he were paying tax in the United States.

http://bern.usembassy.gov/general_information.html
Or http://timingapp.com which does track what files you work on, and can be grouped into projects?
> So when sending a message to an object multiple times you only pay for the cache lookup - which is pretty fast by itself and a cached call is faster than a C++ virtual method call.

This is not true. The code in Mike's test for "IMP-cached message send" doesn't match the cached path of objc_msgSend. It matches what you would get by doing IMP-caching yourself, which is common in some Objective-C frameworks, especially older ones. The cached path of objc_msgSend is what is measured by the "Objective-C message send" row, which is a lot slower.

The fast path of objc_msgSend roughly goes like this: you dereference the isa of the object to get to a class description, then you dereference a pointer to the cache, and after finding the selector in the cache, perform a tail indirect call to the IMP. Even if the cache lookup is free this is two dependent pointer dereferences followed by a dependent indirect branch.

A C++ virtual call just dereferences a vptr and makes an indirect call to a function at a static index in the vtable, which will always be more efficient than objc_msgSend. It's true that manually caching the IMP yourself and calling it will be faster than a C++ virtual call, but there's nothing stopping you from caching the implementation of a C++ virtual call in exactly the same way.

Another major factor in the performance difference between C++ and Objective-C is that C++ allows you to have non-virtual member functions, which can be inlined, whereas Objective-C requires all method calls to go through the same mechanism.
There is bug on the windows when I changed file terminal window popup.
Android with Netflix/Hulu/Amazon plus XBMC ought to make a very satisfying set top box. If you're doing that though, you might be better off buying an Ouya for the same price, and getting the controller + games as well.
Graff the web: imagining a new class of browser extensions
Microsoft Drops Surface RT Prices
Is anyone still thinking it might be a launch loop?
Competition is Often a Good Thing
This was/is a tough issue.

The easiest way, tbh, is to look at patterns for that fingerprint(s) rather than assume they are all unique. This is where a rules engine comes into play.

The "real" way to do this is to track upgrading components (like plugins etc) and create new fingerprints as they evolve, associate them with the old ones and over time sunset old fingerprints. This is harder to do in practice, though.

Also, some fingerprinting approaches track things like monitor resolution, which is tough b/c a docked laptop has a different fingerprint than the same undocked laptop. So the approach differs based on what you track.
Feels similar to Tonido, but fancier looking. Having been using the Tonido for a few weeks as a development web-server and it has been pretty good so far.
Ask HN: Time to change my job?
I work at a startup in SF, and it's been almost three years. I like this company and like what I'm doing but my manager often makes me frustrated.

Reasons:
- He has some temper, whenever I do mistake often yells at me saying 'why is that', instead he could give me clear reason that what I've done is wrong where I can learn in positive way. He is very talented but his management just don't fit to me.
- Often IM me in the middle of the night or weekend for job request.
- Not fun at all, all he does is work so nothing to talk about + doesn't drink beer or coffee at all.

I'm trying to stay till this Winter for stock options but these kind of frustration happens too often, makes me want to quit.

This is my first job, so I don't have experience quitting or changing my job.
Doesn't bother me in the least.

Bootstrap offers sane defaults and presents users with a familiar experience.

If my choices are color/design decisions made by someone who's specialty is something else, or just vanilla bootstrap, I'd encourage the latter.
I'm currently making use of Codeivate - http://codeivate.com/ - it's pretty awesome!

You can check my progress here, http://www.codeivate.com/users/jbrooksuk
What sane person exposes SSH externally?

- OpenVPN takes only minutes to set up

- There are easy to use GUI clients for all major desktops (Windows, Mac OS X, Linux) and phones (Android, iOS)

- It supports running with zero privileges (chroot+setuid) since it only needs to forward packets to /dev/(tun|tap), which does not require privileges after the device has been opened.

- It limits your compromise exposure to only one edge gateway (you can put any number of machines behind a single dedicated gateway). If the gateway is pwned, you still have the defense-in-depth of internal SSH, internal encrypted comms, etc.

- Supports HMAC validation of incoming data to avoid any complex processing (and thus exposure of bugs) of packets from users that don't have the shared HMAC key. This means that only the HMAC code is exposed to untrusted users.

- Supports public key +/ password authentication.

There's no reason to expose SSH to the public internet when you can run a gateway that handles only VPN traffic and greatly limits your attack surface. Defense in depth!
"As for protecting your self against these, you need to use strong and good passwords..."

I went back to the top to see when this was posted...today. I'm no expert on securing a server, but I thought the common thinking now was to just turn off password auth. The post itself says that all it takes is one weak password to be compromised.

Using keys is ever-so-slightly less convenient at setup, but negligibly so. Works on any device I have. Is there a reason one would continue to use passwords?
(1) "No wonder so many languages are derived from it."
>Not sure what he is referring to exactly, but Sanskrit itself is a descendent of proto Indo-European, from which many other Western languages were derived. So it is a near cousin to the original language of the Indo-European people, but not the direct ancestor of Western languages (this was a misconception of the 19th century linguists that "discovered" Sanskrit).

This misconception is very much like that of creationists when propose that evolution means "people came from monkeys"; when in fact we simply share increasingly recent common ancestors as you move from primitive primates to the other great apes.
>Pick one.