skysight-inc/HackerNews huggingface dataset:
I'd love to get feedback on pricing etc, to see how far off I am, if you have a second to email me? If not, nbd.

http://blog.pagerduty.com/2011/03/on-call-best-practices-par...

This is a series of posts that have pretty sane defaults; I personally would not do a daily rotation, but rather rotations of 5 days, and alternating weekends (one guy does M-F, one guy does Sat/Sund) and you switch off.
Camping is pretty inexpensive and fun if you approach it with the right attitude.
Man, talk about rubbing salt in an (old) open wound. I was SO excited when they announced that, and was really hoping that we'd get cheap, widely available Power based motherboards in a standard form-factor, capable of running Linux or BSD or whatever, etc.

Yeah, no.

Some more competition for Intel x86 and some widespread availability of Power machines (that don't cost a bazillion dollars) has felt like a pipe dream for years, and I'm not optimistic now...
I'm getting to this point in my life right now. Realising and trying to accept happiness is a state of mind. It's rather new to me and it's a struggle most days. Any advice?
reminds me of this tweet:

"happiness is a choice," insists able-bodied, healthy, beautiful millionaire jennifer aniston in the new edition of some shit magazine

https://twitter.com/plume__/status/362631201388892160
You're assuming your users will go to that place, see their passwords are showing and say to themselves, 'ok, this stuff isn't secure, I better be careful'. But that doesn't happen. People don't generally go there. They don't know about it. But someone else, using their computer, might know about it, or might stumble upon it. If you stop this happening, people aren't going to be lulled into a false sense of security, as you suggest. They aren't even going to know it happened. But their passwords will be more secure against casual discovery.
Old repost but a good one. Reminds us that every customer has a potential story which can be pivotal to your business.
Dockerfile mode for emacs
I can't imagine why a startup would lock themselves into Microsoft's ecosystem knowing that the more you grow the more those licenses are going to bite.
Here's one:
http://www.hoart.cam.ac.uk/graduates/gradstudents/fa272@cam....

(From the Bio)
Frank Albo is a PhD student under the supervision of David Watkin and James Stevens Curl. His doctoral research focuses on the influence of Freemasonry in the Nineteenth Century British Gothic Revival. His publications explore Masonic interactions and networks in British and French architecture and garden design, including recent work on the architect Charles Robert Cockerell for Le Monde Maçonnique à l'époque des Lumières (2012). He is presently a Wingate and Canada Council Award scholar at Peterhouse.

Ask him about bilderberg sometime, if you have an hour and a half to listen.
Isn't this how the AI in The Moon is a Harsh Mistress gets started?
Can you back up "complex"? I did extensive work on caching with 2u.fm on Rails and found it exceedingly simple, especially coming from Java or PHP.

Plug in the dalli gem, and pass in the updated_at timestamp as part of the key.

Edit: Perhaps if you had to re-write an app to support caching you'd run into trouble, but thats outside of the scope of this article. If you build a rails app, you plan for caching from the start.
I'm not quite sure where the news is here. IBM has been licensing the architecture and cores for years (2007 is mentioned[1]).

All I see in the actual announcement[2] is marketing hype (not news) about software that already exists ("open firmware" == U-Boot, "open software" == linux) and hardware that has been licensable for years.

[1] http://en.wikipedia.or/wiki/Power_Architecture#Licensing

[2] http://www-03.ibm.com/press/us/en/pressrelease/41684.wss
It really depends on whether your counting number of chips or dollars in sales. POWER chips sell at a premium inside high end enterprise systems, while MIPS is embedded in lots of places like handheld consoles and routers for more chips sold but for less money.
I immediately disregard anyone advocating Node.JS as always being a better alternative to Rails
I really like the model parent idea. Will definitely contact some friends of our who we think are great parents and make sure to take them out to dinner and pick their brains.
"2. The trusted sources should provide checksums so you can verify the package before installing it."

If the checksum is published to another trusted location, in addition to where you download the files, that would help in the case that an attacker compromises both the checksum and the package on the download site.

The developer could post the checksum to Twitter at the same time as making the package available for download. An attacker would need to compromise both Twitter and the download site.
Hey, the original parent poster: (I figure I'd weigh in)

I'm not strongly against gay marriage. I simply don't support it. Sorry if my explanation is a little disjointed. There isn't one particular issue that explains it all.

I see the whole issue as completely artificial. It was almost entirely created and started by Gavin Newsom (former mayor of SF). It was a demogogic move on his part to try to get support for his run for governor several years later.

Aside: Ironic it backfired and ended up pigeon holeing him as a far left politician.

No one talked about or wanted gay marriage before he brought it up.

A more nebulous reason is that society is moving away from marriage. People are more and more living in civil unions. Marriage has become a religious/traditional thing. So revising/redefining antiquated traditions to appease a group of people seems unnecessary.

I think the idea of redefining a term like marriage is also rather problematic for me. It's always described a union between a man and a woman, since like the times of Hammurabi - and now we're just redefining it? It seems a little absurd.

The address the issue, we created a new term. "Civil Unions". But for some reason this isn't good enough - and I don't know why. Seems like the real goal is to redefine a several thousand year old term - which kinda seems revisionist to me.

Another argument I've seen and that I've never seen addressed is: why do gay couples get to marry and not polyamorous people? Seems like there is a double standard here.I personally feel like if they're going to go through all of this, they might as well allow all marriage.

At the end of the day I wouldn't really care if gay marriage passed. What bothers me the most is that so much time, effort and money is spent on something that is a rather insignificant issue.

The right to visit loved ones at a hospital and the tax benefits are more symptomatic of broken hospital/tax laws than a huge national issue on par with the civil rights movement. I think calling gay marriage a civil rights issue is hyperbolic and disingenuous (and is polyamorous marriage a civil rights issue too?). I think there are way way way more important issues currently to deal. Thousands of people are rotting in jails for non violent crimes, thousands of people have their lives ruined by medical bills, thousands of people are forced into plea bargains for crimes they never committed. There is so much suffering happening around us, and we spend out time arguing about redefining marriage. It's just really frustrating for me to see this artificial debate occupy so much of the collective unconscious of the country (and now the world).
http://blog.wiemann.name/rails-server

It was 200req/sec on $5, most of the SQL issues are going to be HTTP framework independent. Russian doll caching is not that complex to setup at all on rails 4 which removes most of the HTML/caching issues.
Show HN: Python library to read and manage your Gmail
My Comments on the EU Cookie law
The EU cookie law is bad for internet based businesses, and wrongfully targets webmasters and developers.
For those wondering what the hell truth() is, I think they're talking about this phenomenon:

python -m timeit "if bool(1): x = 1"
1000000 loops, best of 3: 0.187 usec per loop

python -m timeit "if 1: x = 1"
10000000 loops, best of 3: 0.0266 usec per loop
Yeah, because we in the States really love to make a big thing and encourage the abuses that can happen in prison.

Wow...
The photocopy that really is a fake: Machines have been altering numbers
I would recommend adding ipv6 support.
Should be fairly easy to do in socket.{c,h} and in your configuration parser.
The computer in the #1 spot was recently announced in China and sports Intel's Xeon Phi coprocessors, which include many cores per unit. The system in the #3 spot uses all cpu's and is completely homogenous. I worked in HPC at LLNL last year and saw the POWER processors. They are very small units and don't draw nearly as much power as Intel Xeon series.

Here's a picture of the Sequoia machine: http://imgur.com/6UrZndM

Each of those cards is a single node in the cluster.
That's really just the standard Innovator's Dilemma effect where low-cost, high-volume products often tend to eat their way up the market. Now that the semi-RISC ARM processor is attacking Intel from the low end it's having the same sort of success as x86 did over MIPS, etc.
Err, I'm not sure how your brain works but it's obviously different to mine. Fear not, in heterogeneity lies strength!
> ... received more than $2.6 million ...

> ... forced to pay $1 million ...

Moral: crime pays.
Disclaimer: I worked on the solar magnetic field for two summers.

Whether the sun is chaotic in the technical sense (i.e. the butterfly effect) is still open to question [1]. The solar magnetic field is poorly understood. In the 1980s, everybody thought that a particular model (mean-field dynamos IIRC) had it all figured out, but new observations from helioseismology showed them wrong. Wikipedia has a good article on the solar cycle: https://en.wikipedia.org/wiki/Solar_cycle My advisor wrote a more technical overview: http://solarphysics.livingreviews.org/Articles/lrsp-2010-3/a...

[1] See: https://en.wikipedia.org/wiki/Chaos_theory#Distinguishing_ra...
RoR doesn't "encourage" unit testing, it forces you to write thousands of meaningless unit tests which just make up for the lack of strong type system. Unit tests should test code logic, not parameter types.
I heard a great quote about this some time ago that I'll have to paraphrase. I'm not sure if it was about Valve, or from a Dilbert comic:

"Managers exist to protect the company from their poor hiring decisions."
Openresty is a good option for this - Lua in nginx.
Man, you are insane.
Another excellent reason. I concur.
Awesome links! Thanks!

sleepycity has the best noscript I've ever seen:

While sleepycity will (mostly) function without javascript, your experience will be improved by enabling JS for this site. Only google analytics is embedded, which you're already blocking anyway if you value your privacy. Suggested firefox add-ons: Adblock edge, noscript, request policy, betterprivacy. Save money, time, CPU cycles, electricity and tell advertisers to fuck themselves.
At 63, 28 years is very likely to be a life sentence. If he makes it, he'll be 91 when he gets out.
"Privatization" where the government contracts to third parties, is not privatization. When the decision is centrally-managed, and the revenue raised by force (taxes), you haven't addressed the central problem. So calling it privatization is misdirection. It's a confusion of terms that is meant to keep people arguing in circles.

Actual privatization removes centralized decision-making. We should be able to opt-out of governments and opt-in to alternative sovereigns. The fact that governments are allowed to claim authority on the basis of geography is why they're still in business, and it's why these messed up situations occur.
Random padding can be averaged out. It increases the work factor of the attack, but not by much.
There are limited shopping options in prison.
Until Rails 4, the core framework didn’t even support concurrent request handling.

Rails has supported multithreaded operation since 2.2: http://guides.rubyonrails.org/2_2_release_notes.html

It never gained widespread adoption because it was off by default. Rails 4 turns it on by default on multithreaded web servers like Puma.

And even in Rails 4, concurrent request handling is multiplexed on a single CPU core, leaving Rails unable to take advantage of the parallelism of modern architectures.

This isn't true on JRuby, where Ruby threads are 1:1 with JVM threads (which are in turn 1:1 with native threads) that execute in parallel on multiple cores.

At my employer (Square) we run many of our Rails apps in thread safe mode on top of JRuby, providing parallel request processing across multiple cores on a single JRuby/JVM instance.
The RTL source was released under the GPLv2, GPL and hardware is a bit iffy since synthesis isn't the same as compilation, but depending on who owns the IP (in this case Oracle) they could make the case you need to open source your RTL source as well. I personally wouldn't invest the high hundreds of thousands to millions of dollars needed to produce a chip without getting a license agreement first with the ambiguity of the license, and which point I would probably consider the POWER architectures (like many FPGAs vendors used to) or ARM. In the case of pushing it to FPGAs, the OpenSPARC would use a ton of resources to the point where I'd rather have a dedicated off chip processor, or a FPGA with a built in processor.

I know people have put the OpenSPARC code on FPGAs, but I don't know of any use in industry in FPGAs or ASICS. I'd be interested if anybody knows any.
Social Media Automation
Well, I don't want to misrepresent the point of view too much by trying to interpret it. Here is the discussion I am thinking of: https://news.ycombinator.com/item?id=5310421

It isn't a viewpoint I particularly understood during that discussion, or now, so it is probably best to read it for yourself.
OK, Shortfin is just trying to be an efficient HTTP server, without a radical differentiating feature or implementation approach.

Well, let a hundred flowers blossom.
That is interesting.

As a side note, I'll bet you could have actually observed the difference via timing at the time, assuming you knew what hardware you were working on. On an early Pentium, a floating point add would have taken up to 3 times as long as an integer add (depending on implementation), so by comparing in a loop, you might be able to tell if a given value was being treated as an integer or a double.
This article doesn't actually answer the question posed by the title, FYI.
Tiny SBC runs Linux on Xilinx ARM+FPGA SoC
>Or are Windows sysadmins simply dumber/less paranoid than Linux sysadmins?

cough
Latvia Will Extradite Suspected Hacker to U.S., Minister Says
You can still download Compuserve software for free.

http://free.compuserve.com/trycsfree/

However, I think it's only a 30-day free trial of their dial-up service; and you'll have to pay afterwards for it.

I think Prodigy was bought out a long time ago.
Why the hell is Twitter more secure than my bank? I don't actually give a crap if someone steals my twitter account, and I can't imagine why anyone would
If you're new and haven't become enculturated, there may be value in your reading jacquesm's unofficial FAQ:

http://www.jacquesmattheij.com/The+Unofficial+HN+FAQ

Bits of it are a little out-of-date, and there are some things it hasn't caught up with, but it's mostly right, and some people find it useful.
Yeah! Take a look, it's interesting. http://en.wikipedia.org/wiki/Prodigy_(online_service)#Curren... They're now the #1 ISP in Mexico. The section about things Prodigy pioneered is interesting, too.
Tornado is using MongoDB while Rails is using MySQL. For a test that's essentially about responding to a query with a database access, I can't figure out what I'm supposed to take from this.
Still too soon.
There's no mention if there were any repercussions for the private juvenile facilities.
Uncommon to see such a linkbaitish title for a programming post. The reason truth() (from operator) is faster than bool() is that

* bool() takes one optional and named argument, and

* truth() takes one argument.
I understand the concerns brought up in this thread as I experienced some of them myself in the past; but what good open source/free software can you recommend to replace OpenX?
Last I checked, tptacek is actually a big fan of Rails.
It's broken. Instead of sending web login requests to the app "login requests" area, they're still sending SMS messages. The SMS messages used to include a 6-character token to login but it's been replaced by the 256-character signature. This can't be used to login with and nothing shows up in the app "login request" area. It looks like the old SMS system and the new 2-factor auth system are conflicting with each other.
Ask HN: Someone is trying to break into my Facebook account, what should I do?
For the last six and a half hours I have been receiving regular emails and SMS messages from Facebook stating that I have requested a password reset when in fact I have not.

It seems like some sort of an attack so I am looking for security advice. I don't believe I have any sensitive information accessible through my Facebook account but my concern is anyone using my email to try to break into one of my accounts online may try to break into others. And while the attack does not appear to be sophisticated on the surface, any attack is alarming.

Any ideas as to what the source of the attack could be? And what I can do from here?
better quality: http://grooveshark.com/s/Don+t+Worry/450UFD?src=5
The full SIGCOMM'13 paper is here:

http://people.csail.mit.edu/fadel/papers/wivi-paper.pdf
So about $250 per family, that seems fair...
This assertion is, categorically and empirically, ridiculous. Yes, the runtime and framework are slow compared to something like go and Revel, but that is not the principal benefit of Rails. Rails' principal benefit is taking care of Maslow's Hierarchy of Needs, or whatever its analogue is for developers. The most recent Rails app I wrote has average render times of 7ms (excluding network latency) on dedicated hardware largely because most views can be rendered with just 3 memcached hits. What's more, implementing the nested caching strategy necessary to achieve this was pretty simple with the out-of-the-box capabilities of Rails 4. If I'm busy worrying about lower-level concerns it doesn't matter if my runtime and framework are blazing fast - I don't have the confidence or time to implement strategies like this, or at least not with nearly as little effort. The proof is in the pudding. Anecdotes to the contrary are welcome.
You mean the bits that are already made in china?
At least his kids' futures are secured. Good job, dad.
Ask HN: Services you or your startup needs most?
I'm doing a small market research and would love to know what kind of services your startup generally pays to get on a regular basis or the services that are needed most- be it logistical or administrative. These can be from the common develop/design jobs, as well as other less common (and offline) services like legal (corp/patent lawyers), maintenance (maid/cleaning ladies/laundry pickup), or like services.
Holacracy constitution on Github
Why Nobody Should Read Hackernews
how in hell a child can get charged, let alone sent to do actual time, with crime for a mocking page? ok, judge is corrupt. Fine. Happens. Nevertheless, the judge wasn't the one who complained, arrested, charged the child. A lot of adults were involved and they actively facilitated this travesty happening.

People like to blame evil for evil things, yet evil would be able to do much less without reasonable, supposedly good, people actively helping evil things to happen.
Currently, the Django templating tag:

{% csrf_token %}

...results in an insert like...

<input type="hidden" name="csrfmiddlewaretoken"
value="566e4606b2094c7c48e5d04b58236f51">

I suspect that the particular mitigation strategy the BREACH authors' describe as "Randomizing secrets per request" could be implemented by having {% csrf_token %} instead emit:

<input type="hidden" name="random_data"
value="91178a84e0bc6e08a2fda853eef2d2c8">
<input type="hidden" name="csrfmiddlewaretoken_xor"
value="e0b594e902c7fe6b1748d13aefaf63aa">

...where the random_data changes every response, the emitted csrfmiddlewaretoken_xor is the real token XORed with the random_data, and upon submission the server will again XOR the two values together to get the real CSRF token.

There may be other secrets that need protection in other ways, and maybe this would make any random-source issues more exploitable... but this would seem to protect the CSRF token, in a cheap and minimal way.

UPDATE: Thinking further, though, maybe the attacker can probe for both values at the same time, and thus determine the probability of certain pairs, and thus this only slows the attack? I'd appreciate an expert opinion, as this was the first mitigation that came to mind, and if it's wrong-headed I'd like to bash my intuition into better shape with a clue-hammer.
Static typing and unit testing are complementary tools. It seems to me that proponents of dynamic languages tend to treat unit testing as the one tool that makes everything look like a nail.
Should Your Startup Persevere, Pivot, or Shut down?
The problem is not Rails or Ruby, it's the community. There's this vibe that "Ruby is fast enough", which rubs into Rails. It manifests in many ways, not the least "developer time is more important".

Well, it sure is. But one shouldn't have to make such a big tradeoff.
In my personal experience I did 40 pushups every other day for months and my fitness level and happiness did not noticeably increase. Also did curls, tricep moves with 25 lb dumbbell. And crunches.

Then I got a weight set where I could progressively add weight every week. And ate more and had appetite. That finally made a difference in fitness level and mood.
Extensive discussion:

Main story: https://news.ycombinator.com/item?id=6156238

Xerox reply: https://news.ycombinator.com/item?id=6168096
Having spent a lot of time in both Rails and Node, the author's unequivocal endorsement of Node as better than Rails is just silly.

Building a non-trivial app on Node requires that you do an awful lot of plumbing. Yes, the performance is very nice. And it's going to be great when the community grows up a bit and things start to Just Work with each other. But that day is not here yet.

A lot of the components that people depend on are still really buggy. In the last three days I've had to debug and fix four bugs in other people's npm modules. The community's attention is spread all over the place, because there isn't one dominant way of doing things.

People can't even agree on sane interoperable packaging for code that needs to work on both browsers and in node. It's a mess.
Djangocon 2013 | The Schedule is Published
Content like this is what makes HN great. Very interesting read.
as long as direct use of dpkg or make is considered a felony.
I thought it was weird that all the contractors I met with Infosys were of South Asian decent.
Usually in IT, teams are a mix of different nationalities.
Radioactive water emergency at Fukushima ‘beyond Tepco’s control’
Webflow: Creating Beautiful, Responsive Websites Without Any Code