skysight-inc/HackerNews huggingface dataset:
Do you consider lexing only "reading the file, finding out if the sequence of characters is the keyword of the literal or the comment" or something more? I admit I lex the source which is already in memory, and there lexing takes less than all other processing (in CPU use). Also in my case the source is always smaller in memory than any AST.
When will Apache's OpenOffice be ready? I hate it when mean corporations like Oracle set out to crush community projects, but I hate the GPL more.
هدى الحسيني تكتب : حتى لا تتحول سيناء إلى تورا بورا أخرى | التيار
I'm not an Apple user so I haven't paid close attention to it. I'm of the opinion that if customers are being affected, giving a generic "we're investigating a security incident but no cause for alarm yet" message with more info to come is better than "we're down for scheduled maintenance". The attackers already know they've been discovered either way.
gprof gives the "fan in" and "fan out". As important as knowing how much time each function takes is who is calling it. One may be able to prune away the need to call it.
Ask HN: what are the good places to find a web graphic designer?
I just release my MVP beta bamrang.com. Everyone tells me it looks terrible (and I agree ;P). I need to find a designer.

I can't pay big bucks for it and have no experience working with a graphic designer before. But where to find one that is "good enough"? One that is willing to customize instead of giving me a standard template like those on Themeforest. What is the ballpark figure I should be looking at? Is it normal for a designer to keep all the IPs of a design, even if it is done for a customer? How these things work?
You can, pretty trivially, import your private CA's public key into your keychain, and boom, no more warnings.

I do think that the average joe, doesn't know what a certificate or CA is, should be protected from automatically trusting an unknown CA.
Why is it only available for Windows 8.1 and Windows 7 but not Windows 8 RTM?
JP Morgan to Eurozone periphery: “Get rid of your pinko constitutions”
So use uint32_t?
A TODO.txt file shared over dropbox has worked for me for the lsst 4 years (yes, i keep the whole history in a DONE.txt file!)
The dimensions would vary depending on the form factor needed for the particular application, but a spool with a 9 inch by 9 inch spool with a 2 inch hub (which works for 1310nm applications) would hold about 120km
It works both ways you know. Nobody here cares that you're not impressed.

The point is valid though that due to falling component prices it is expected that Linode will either increase resources or decrease price.
Hosting bitcoins on any vps is not a good idea. I'd be hesitant to store just a few, but trying to run an exchange on one is like trying to run a bank on a vps.

I agree linode's response was not ideal and they should learn from that and be far more transparent (see recent twilio billing issues for a good example of the way they should have responded), but hosting digital money which can be stolen on a shared vps is not a good example of a failure solely down to linode - those bitcoins wouldn't be safe on any vps long term, and their presence sounds like it caused this targetted hack in the first place.
Yep. That's exactly what Striiv does: tracks your activity and lets you donate to a variety of projects around the world for clean water, reforestation, and preventing polio via GlobalGiving.org.

http://www.striiv.com/
I'm more irritated by waiting 6 months to approve an Siri competitor app:

http://www.geek.com/apple/google-now-for-ios-is-ready-but-ap...

It's the same as censorship... Apple can copy the Google Now features, update their app.

And 2 months later they approve Google Now... Tell me where something like that isn't anti-competitive behaviour.
pg's original article was great, and it's nice that 37signals are along for the ride - but let's be clear, Jason's article is about "artisanal high-touch", not the real deal.

The real-deal looks like email lists, cron jobs, Google Docs, throwaway Ruby scripts, Access databases. It's operational and technical debt that's the least worst option. Artisanal high-touch has a bevelled drop-shadowed button saying "They paid us! Enter the transaction manually..." and full Campfire integration.
Yeah, that sounds about reasonable. I mean, think of it this way -- as a freelancer, you'd spend about 20% of your time finding clients, sitting with them, getting coffee, landing some of them. By the time you know it, you've used up ~8 hours of your ~40 hour work week. So he's doing 8 of the 40 hours of work, so 20%. Sounds reasonable to me.

This is all just an estimate by the way. Mileage may vary.
I'm guessing they're doing a re-write.
Bitcoin trading platforms do not need bitcoins accessible by remote servers. They should have a huge portion of the coins in cold storage (not available from remote servers). Also, the storage and attribution of coins to accounts should be done by a server under physical possession/control, so that authentication cannot even be forged in the event of a frontend breach.

There are a lot of things you can do to protect your bitcoins. Having them all on linode servers is the worst thing possible.

http://en.wikipedia.org/wiki/Air_gap_%28networking%29
Watsi (YC W13) is hiring a front-end developer
There is a market in the UK for good technical writers. It's not as sexy as development (whoever heard of a technical writer making the cut as a YC founder?) but it pays the bills. My own problem is that around 10 years ago, I veered off into business development and sales, and have been struggling to get back into the technical side of things ever since. I was OK at bizdev and sales, but I worked for fantasists unfortunately and it's left me with a bad taste.

Where do I get contracts from? The usual suspects - jobserve, networking, and various other places. I think it's probably worth pointing out that having had a well-completed LinkedIn profile for over 10 years, it's never brought me anything.

Edit: drop me a line - happy to help, heck, this might be the beginning of a technical writing dynasty! ropley at gmail dot com.
When you're just writing, it's hard to tell where the audience will get confused, or grasp a concept quickly and you can move on (or risk boring them). If a lecturer can interact with an audience, he's more likely to be clear.
I moved locally. I don't run a business from Linode, I just need access to a Linux box that I can destroy without hurting anything. I have a test lab set up at home that I can SSH to and when I moved off Linode I set up a box in my company's data center that I can use when I'm in the office. I haven't found anything that matched the quality of Linode, but I can't take the risks of a security breech, either.
I guess I meant valuable enough for me to work on it right now :P But I am so I guess that is moot.

Thanks for this idea, it is really awesome, and I hope I can get something up functioning soon.

Edit: Ok, it seems like we cannot create .ics file to download. We're using github pages so we're limited to front end things. But I'm looking to see if there are any work arounds.
I think it's uncommon because most people just aren't very good at programming, but more importantly, most people can't imagine work not working for The Man. I probably work a lot more than most people, once my personal projects are taken into account, but most people wouldn't count that work as legitimate because--for some reason--they only see work-for-pay as legitimate.

Maybe it's a vestige of a pseudofeudalistic time in which one measured their worth relative to the worth of their master. "You plow the fields owned by IBM? Well! My lord and master is GOOGLE. He makes your puny duchy look like PeopleSoft. FOR THE EMPIRE!!!"
Time to stop guessing where the speed problems were, and start instrumenting. Time to trot out gprof, the Gnu profiler. I fired it up on the slow example, and waited. And waited, and waited, and waited. I waited overnight. It pole-axed my Ubuntu box, I had to cold boot it. The test case was so big that it plus gprof was too much. gprof slows things down a lot, so I had to cut things way down to get it to work.

It's been a long time since I've used gprof. I switched to Valgrind and OProfile about 10 years ago, and more recently to 'perf' and 'likwid'. If the goal is finding hot-spots, these last might be more convenient since they run with minimal overhead --- a couple percent rather than 100x.

Are there benefits to gprof that I've forgotten?

Are there newer and better profiling tools I don't know about?
Hmmmmmmmmm Debian (the sensible choice) or Arch (the slightly more interesting one)?
Looks like they used SQL injection to get passwords and then used those passwords to access the servers.
I think CouchDB is vastly underrated as a hacker database for toy projects. We're talking about an incredibly simple database, with powerful replication abilities, with brain-dead administration, and one-click offsite backup and synchronization, that requires no real client libraries to work with. It makes it comically easy for me to hack on toy projects on the road, then sync them right back up afterwards when I'm done.

I know CouchDB sometimes gets some flak for not performing as well as other NoSQLs. Anecdotally, that feels as if it's gotten a lot better over time, and this BigCouch merge may improve things further, but sometimes there's a case to be made for using something just because it's fun and easy to work with.
The issue of binary drivers and the general mix of proprietary software has come up previously. Mark has consistently stated that he believes that relevance drives change in the industry.
Kicked Out from TechCrunch Disrupt SF 2013
Superfluid turbulence through the lens of black holes
Heh, based on a hint by zsombor below that the author of this item has written 3 books the general subject, I discovered that she's the first author of Mendel in the Kitchen: http://www.amazon.com/Mendel-Kitchen-Scientists-Genetically-...
Use iSCSI to do away with the clutter caused by storage devices
What's with this obsession the FSF has with 'free' software? Canonical is ultimately a business and without making money that business will eventually have to close. Will the FSF hire those developers when that happens?
The benefit of having such a business behind a free OS is too great to fuss about what component of that OS or device is free. That approach is baffling. Who cares if a device driver on my phone is open for me to tinker with? I understand that they take the extreme side very seriously but it feels like they are taking the extreme side for the sake of being extreme. A little pragmatism never hurt anyone.
Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack
The other responses to this have been woefully speculative at best, plain wrong in others. The short answer is to rent one for a month and benchmark your particular application.

I was surprised to discover that with a workload composed entirely of XML parsing using Python+lxml, an OVH 1.8ghz Atom N2800 beat hands down my mid-2010 2.4ghz Macbook Pro. This isn't a crazy result either. For instance, while the Macbook is equipped with dual cores, each core supports only one hardware thread, and thus is blocked while waiting to complete a load from RAM (a common occurrence when dealing with giant cache-unfriendly DOM trees that don't benefit from the Core 2's much increased L2).

In contrast the N2800 has 2 cores with 2 hardware threads each (hyperthreading), so each core can progress while its buddy thread is stalled. In my particular workload this was enough to beat by a significant margin a much faster, expensive and power-hungry processor.
Why? You lose nothing if it's compromised. That's the bank's worry.
Well, perhaps you could integrate over the outstanding order book (maybe even on both the buy and sell side). I'm not saying it could be answered perfectly, but it might hug the truth better than spot market cap.
people might get more serious about current activity with effects far in the future.
Nasdaq, Others, Targeted by Hackers
Svbtle is opening up soon.
Another google employee. You're just contributing to the mutual admiration society that's all over that answer and its comments.
Google spends way more money than Facebook on infrastructure
The answer was made by a Google employee? Never knew.
I'm using IE11 on windows 8.1 to prep our product for it.

The developer tools are a piece of shit still. The JavaScript debugger is hideous, it's clunky as hell and actually changes the page behaviour resulting in all sorts of impossible heisenbugs.
For ex, What if someone wants to do a "Watsi for education related projects", then your code base can be helpful.
The research may show that the mice are responding to stimuli, but how can anyone honestly claim to know what the experience is like, or whether the "memories" are truly recalled as negative and induce actual "fear".

I mean, it's not like mice can verbalize their experience. They don't use words to tell us how they "feel" about these memories on the inside.

And in the article, it states that no new memories were actually created. Only the nature of existing memories were augmented to be negative.

From the article:

...whether they could create a new, negative association
by flipping the switch on an old, neutral memory while
giving the mouse a negative experience.

So they took an existing memory of a location, and made the mice scared of the location. That's a lot different from the claim in the headline.
Okay, this is just utter BS:

> "Windows Internet Explorer 9 lets your websites shine and perform just like native applications on your PC."
Ahh, that would be hilarious. Urbanspoon should open up a co-location server rack and charge people a monthly fee to set up their servers there.
A few reasons:

1. I lived in Toronto when I started writing, plus the graphic designer currently lives there.

2. It's nice to see a Canadian connection ;)

3. The results of Bayesian inference sorta look like a skyline, see http://i.imgur.com/bF4YrBQ.png
An outsider was brought in who knew nothing about X-Ray. I was later told the new manger was hired based on management experience. She spent her first week being trained by one of the temps who had been deemed unqualified for the product manager position. After spending a week training the manager, and being her go-to person for the next three weeks whenever there was a problem, he was let go because he reached the maximum of eleven months on his contract.

I fail to see how it would be worse to make a commitment and provide some employees with benefits and some sort of job security. This HR policy is pathologically dysfunctional, and seemingly widespread, not just in the tech sector. I really wonder how long CEOs and management people in general think this party can go on.
Directly beneath the announcement is a list of the most popular IE downloads:

#1 - IE 8

#3 - IE 10

#4 - IE 7...

#5 - IE 9
>Someone said in a HN discussion earlier this week that he was not able to find providers significantly cheaper than Amazon

Yes but EC2 is a cloud provider and these are dedicated machines which are harder to scale without setting up a complex cluster.
As I mentioned elsewhere, I like gprof because it reports on fan-in and fan-out. This gives a picture of how the tree is executing, rather than just the functions.
It's amazing what charisma can do. Apple has acted like an evil censor/gatekeeper since the iPhone was released. Microsoft didn't act anywhere close to this bad in the 90s. And Microsoft is looked down on and Apple is still cool.
John Gruber on Chromecast (and why he is wrong)
This is because windows 8 is a leper that will be replaced with 8.1, probably via windows update. I think there will be an upgrade path which means you'll have to upgrade to 8.1 before you can have it.

They can't loss on their loyal 7 customers either.
Actually, no, the person who wrote the so-called "answer" which is more like an essay (and therefore not a proper Stack Overflow response) isn't a google employee. I didn't mean to imply that.
We spend how many hundreds of billions on the NSA so they can slurp all the worlds data? Why not force them to secure all networks?
Plug-in sales far ahead of where hybrid sales were 31 months after introduction
I do tend to agree with the blog author that shadowing is far preferable to what CS does. I believe the fork that led to Livescript grew partly out of this concern.
I honestly believe eastern Europe and possibly Israel are years ahead of the United States when it comes to the Internet - not with regard to adaptivity, but with regard to raw hacking ability.

I have yet to understand why and I only have anecdotal evidence (including living in Ukraine), but there's something to those places that make them breed hackers.
Interesting. I wonder how that reconciles with having multiple gravitational bodies then.
That's interesting! Is this indeed what the thinking is?
If you want tons of disk space, just get a cheap dedicated server.

OVH has a 2TB one for $39/month.

Hetzner has auctioned dedicated servers with 160GB space for 21 euro ($27.8) and 640GB for 23 euro ($30.4).
The matching engine and the ring of servers around it are not accessible via internet. You can only connect to them if you have a server collocated in Carteret, and even then the NASDAQ machines only expose the ports relevant to order entry and feed data.

They could have hacked a customer (say, citigroup) and entered that way, but all they really could do is incur losses for the customer.
>increased freezing in the original context, in which a foot shock was never delivered

seems like an effective way to train things like correct reaction for the "Attention" command in soldiers, schoolchildren, employees during all-hands,...

On the other side, some decades later we will be appalled by the modern practice of electrical shocking of mice the same ways some of us are already appalled by medieval torture.
Yeah, and that's from the application layer down to the DB layer. I wonder how they were able to pass through the other layers of the stack. I heck of a work, no wonder they'd spent "months" on it.
This analysis of steal time is not entirely correct.

Steal time exists to fix a problem. When a hypervisor needs to pre-empt a running guest, without steal time, when the hypervisor eventually resumes that guest, as far as the guest can tell, the process that was running when the whole guest was pre-empted had run the entire time.

This means that if a guest is pre-empted, then CPU usage reporting in the guest becomes horribly wrong with some processes having much higher reported usage than they actually got. This affects fairness and can cause lots of bad things.

Steal time is simply a way to tell a guest that it was pre-empted. The guest OS can then use that information to correct its usage information and preserve fairness.

However, it is not a general indication of overcommit. When a guest idles a VCPU, that VCPU will be put on the scheduler queue. It may receive an event that would normally cause it to awaken the VCPU however if the system is overcommitted, it may take much longer for the VCPU to be woken up.

Most clouds are designed to allow multiple VCPUs per physical CPU too and there certainly is capping in place. You can still see steal time even though you are getting your full share.

Let me give an example:

1) You are capped at 50%. You run for your full 50%, go idle, the hypervisor realizes you've exhausted your slice, and doesn't schedule you until the next slice. No steal time is reported.

2) You are capped at 50%. You have a neighbor attempting to use his full time slice. Instead of getting to run for the first half of your slice with the neighbor running for the second half, the hypervisor carves up the slice into 10 slots and schedules you both in alternative slots. Both guests see 50% steal time.

You will get the same performance in both scenarios even though the steal time is reported differently.
Personally I had an idea of what it was, but it wasn't until yesterday that I was linked to gnu.org and read some of their pages. I'm sure most people on HN have an idea of what Free Software(TM) entails, but not actual quantifiable terms. Again, this is a personal opinion and I'm trying hard to avoid making inaccurate broad-sweeping and baseless generalizations.
I submitted an app 1 week ago. This morning a received an e-mail stating the approval process is delayed. No other details.
Is there any life story about Ilya? I want to write an article in Chinese about his life and contribution to technology community.
While they are free to do whatever they want with their platform, it is interesting to see Apple returning to the old (pre-Mac OS X) behaviors, now that Apple managed to achieve a considerable market share.
Tesla Versus the Luxury Automakers
Long delayed echo
did you read my comment?
This is rather strange if it is accurate. Everywhere I've worked where they hired contractors as developers, the company always preferred contract-to-hire, assuming the person worked out well. I've had two jobs that way, 6-12 month contract to full-time regular employee. The only time people didn't transition to full-time is if they sucked, basically a 6-month interview. And sometimes they would go full-time even if they did suck.
I volunteer to take part in an experiment for false memory implantation on humans. Sounds like fun.
There are still too many computer illiterate people, it's a matter of how people view things.

Blaming the existing systems instead of blaming the hackers, it's like being an astronomer in the middle age. Deciders and business owners will scream and tell their systems are fine, and that the ones who think differently and prove otherwise are at fault.
First off: cool!

A few thoughts:

* This only works with Git. It doesn't look it'd be much work to make it work for all 4.

* This only pins deps you've declared; that set may or may not contain transitive deps. If it's not complete, the transitive deps will be frozen, forever, until you blow them out of your GOPATH.

* Issue #3 looks fun.