skysight-inc/HackerNews huggingface dataset:
Well, you certainly set your sights high.
Heya, I've used the D+Q layout (I'm the original author of the blog, btw) on Windows. It works well and I have no major complaints, though sometimes you'll need to do some custom setup in games (eg, change key bindings, since games frequently don't respect D+Q).
Doctor Believes Resurrection Is A Medical Possibility
yes, please do post a link here, thanks!
This is really exciting, I've been waiting for someone to combine all of the various deployment technologies like this for a while.

However... If I set up my servers manually, or even through chef, I have pretty intimate knowledge of how my apps are being deployed. I know the various pipes data goes through, software versions, what services are running, etc. In other words, I have a pretty reasonable mental model of my deployment architecture. This is especially helpful when troubleshooting. However while the magic of Deis looks like a godsend, I am very caution about upgrading my technical debt from "managing my app servers, load balancer, and db servers" to "managing a PaaS that I happen to run my app on". I'm not trying to do ops for a Heroku clone, I'm just looking for an easier way to streamline my deployment process. What happens when I run "git push deis master" on a new release and everything breaks? The last thing I want to be doing is searching through the Deis github repo for error strings while my site is down.

Can anyone from the project assuage my fears? I realize this is kind of an open ended question, but a little assurance can go a long way.

Related: What are the planned price ranges for support on this?
OSS Demo of Zillow U.S. GIS Neighborhood Boundary Data and HTML5 Geolocation
Did you read my whole post? With the salt attribute, a level based system can be implemented -- effectively a different hash would be required for more critical user-actions. That is, you'd need to re-type your password in the website to perform certain actions - but it would be the same password - just a different salt.
FYI, for years there have been electronic billboard displays on highways that will display AMBER alerts.
Exactly what I was thinking. Just bought a barebones desktop unit with the GMA3600 and it can only run Ubuntu 12.04! Sounds unlikely it'll run 13.04 with graphics support: https://bugs.launchpad.net/ubuntu/+source/cedarview-drm-driv...

I'm surprised the screenshots show Ubuntu 13.04 though. Anyone know more about which version of Ubuntu is running?

I do understand they're trying to cut costs to meet the $300 price - I do hope Intel puts out some drivers for this chipset.
You'd need four pictures - two of each side, to capture enough information to generate a 3d-model, instead of just the one.

Better, but still vulnerable.
It has existed in the past, but was attached to a very odd key/lock mechanism that didn't take off. It's a good idea, no idea of patent issues related to making it happen, but perhaps with all of these recent stories on duplication the time is right to reintroduce the concept.
If the goal of the iPhone Amber Alert feature was to wake people up, induce panic, then get them to turn alerts off...it's working.

A good example of the law of unintended consequences.
In my experience, sticky sessions open a whole new can of worms. With proxies and VLAN, it's very easy to have an extremely unbalanced load if you use naive IP-based balancing. If one of the servers becomes a "hot spot", adding more servers won't immediately remove the load from that. And when a server dies, the sessions in that server are lost. These problems can be mitigated with an in-memory distributed database overlaid on top of your cluster, but that opens its own can of worms...
Amazon Seller Central Down all Day
Yeah, I know it's their PR event so their format, but reddit is really perfect for these, why not use it?
Sounds like there might still be some process stuff to figure out but overall this is the least annoying version of two factor auth i've ever heard of. Unfortunately all it can protect is my twitter account.
I admit to not knowing how effective Amber Alerts are. Perhaps the cell phone alerts are overkill and should be opt-in. However, are the commenters here really claiming the abduction of two children after their mother was slain to be 'mundane' or 'trivial?'
I wonder if this can turn into a payment gateway solution for SaaS startups. Gumroad has a pretty decent track record of functional yet pretty(as in not boring) payment pages... Interesting update
Lesson one in the "business of software" (or, in "business"), is price things according to value, not cost-plus! Of course you can get lunch in a hotel and someone to talk to you for less than $2500, but what value can you derive from these particular speakers on these particular topics? Plus, free lunch!

We can be shocked and complain about the price, or we can say, hmm, maybe there's something to this "provide demonstrably great value and charge an appropriate price for it" idea... ;)
I'd definately recommend adding in some other variety, since DDG is basically a wrapper+intelligence already. I do like the concept of the "meta search" but this sorta reminds me of Cuil...
Segment.io is hiring Support Engineers, iOS Devs
"We do not normally see a character substitution issue with the factory default settings..."

It shouldn't be seen with any setting. Nothing you can do to the device (short of involving a hammer) should change the content in any way. Compress, resize, zoom, do whatever, but it simply must not change the content at any time at any resolution/quality.

I'm just flabbergasted that such a compression scheme was ever implemented in the first place. Surely, there are alternative OCR based methods do compression that don't introduce these artifacts (that's putting it mildly) at lower resolutions.
So if you want to help your business succeed, some great low-hanging fruit would be to teach your employees how to counteract status biases when making decisions.
The last time automated joke generation was discussed on HN, I learned that a large, or at least vocal, amount of people consider it to the be responsibility of anybody running automatic joke generation software to supervise the software to ensure that no truly offensive jokes are inadvertently generated.

I don't agree that such a responsibility exists, but it is probably worth keeping in mind that others do if you are interested in surfacing computer generated content like this. I would be wary of surfacing it without some form of auditing.
Interesting; I looked more into this system, and it does sound like the weather service is supposed to use it for things, although even though there were many hours of aftershock on a recent earthquake here, there was no mention of it (but maybe earthquake aftershocks are considered "obvious" ;p).

I still take issue with the implication my the original comment that it is being misused for this purpose due to some "misunderstanding of scale": people demanded tons of things after Amber, and they got them. Even the sex offender registry was caused as a reaction to Amber (with initial designs for it being parts of bills named after her). The general "zeitgeist" considers "think of the children" much more important than war.

So, this new EAS was being conceived of only a couple years before AMBER, was only really documented a few years ago, and had an implementation deadline of last year. All the FCC's documents on it currently list "such as AMBER Alerts" as either a primary use or an example. The protocol was even modified in 2002 to add an AMBER-specific event code (but if not implemented they use "civil emergency".

> What alerts will WEA deliver?

> Alerts from WEA cover only critical emergency situations. Consumers will receive only three types of alerts:

> Alerts issued by the President
> Alerts involving imminent threats to safety or life
> Amber Alerts

> Participating carriers may allow subscribers to block all but Presidential alerts.
Isn't this just The J. Peterman story re-told? http://37signals.com/svn/posts/1677-j-peterman-selling-stori...

Yes, putting nice, long-form copy around regular objects will get them to sell better. I'm pretty sure this phenomenon has been around for a long, long time.

The big thing is a) you can't lie (like some of those stories do) and b) coming up with a consistent voice and narrative is actually quite difficult.

(Disclaimer: I used to be the CTO of J. Peterman)
Does the emails/second take into account spam?
What is going on, this is the longest I have ever seen. With security on high alert and many other server updates causing down time, something is up.
That sounds intense. Maybe this was one mass psychological experiment.
i like this is more "private cloud" oriented and "not a whole os"
i think thats a better move than attempting to "capture market" like quite a few other projects.

Now for unshare() to become more secure... ;-)
"Linda, guess what you’re not going to do today — write tickets."

That isn't harassment. That is hilarious.

This just boils down to a municipality relying on parking tickets rather than meter fees for revenue. Fuck them.

The solution is simple: raise the fee.
I find it very hard to trust any C code without tests. Is this a thing for C code? Why most of the new projects in C lack tests?
Ask HN: Best practices for DevOps pager/on-call schedule?
At my company, we do not have the luxury to hire many full-time ops guys and the engineers are part of the pager/on-call schedule. We've experimented with doing a daily rotating schedule (i.e. one person per day) and have been discussing other schedule options (such as weekly rotating).

What DevOps pager/on-call schedule works best for your team? And are there any best practices that are noteworthy?
My interpretation is the story helps find the end user's need. It isn't just, "Go Bla Bla Bla to everyone" Rather, it's find the story that appeals to the one person you want to pay up.
If you're somewhere where a loud notification will irritate you, it's highly unlikely that you will be in a position to spot a vehicle that might be carrying an abducted child.
fair point. I think corporations live on a spectrum of authoritarianism, and these are "far out in the distribution" but they aren't perfect, and I don't think in reality a perfectly flat corporation can exist because all employees have a natural range of skillsets. But by "dramatic" I meant dramatic relative to the parent post's claim about organizational size relative to success of the model.
O-SubC-R then perhaps. Still is recognizing shapes/symbols which is the very basis of OCR.

This seems a bit hair splitty when the end result is the same as invalid OCR dictionaries.
Our firm can ensure your computers are free of SMR-related effects for a modest fee. Please call 1-800-SUNWANTSTOKILLME
I'll look them up, thanks for noticing!
The OFF Pocket is a signal-blocking smartphone case for our paranoid times
Drilling into Big Data with Apache Drill
Day Job and Working on a Startup? Modify this Sample Letter to Protect Your IP
Why you should be using Gmail's new inbox actions
If I have difficulty getting a written agreement, I send a brief (my memorandum of what I think we've agreed) by email and follow-up with a phone call asking if that is what we've agreed. I can then immediately summarise the phone call in an email message that forwards the brief together with something like "great to hear that's OK, I'll be starting this afternoon", or some such.

Not that I have had to put this to the legal test, but there is then this sort of written documentation, accessible to both parties, of what has been agreed and when. Having everything in an email folder is easier for me than keeping a log book.
Open source firmware is a thing; check out U-Boot and Coreboot. I hear Google loves Coreboot.
Um... I received that this morning but my phone was on silent so I didn't hear a damn thing. I did see it on my phone when I looked at it, but no big deal. Android was nice enough to say 'You just received an emergency alert. Do you want to continue receiving these? Yes/No'.
It does. A little over 60% of that pile is spam.
Chrome for Windows installs to a user's own app directory. It doesn't require admin privileges.
Similar to http://www.marco.org/bugshot, nice done.
My biggest issue with Firefox is that it is hard to copy the html of a form or table, using the developer tools.
Twitter's Killer New Two-Factor Solution Kicks SMS to the Curb
I'm surprised the <blink> tag was removed, just for historical reasons.
I understand the concern about potential black box on the deployment side. Few points 1) this is an open-source project with a relatively small code-base and few moving parts 2) Chef does most of the heavy lifting on the deployment side using Databags and traditional Chef runs and 3) the build/release/run workflow is described here:
http://docs.deis.io/en/latest/gettingstarted/concepts/#build...

With regard to support, OpDemand (creator/maintainer of Deis) will be launching paid support and professional services once the project stabilizes. Price points are not set yet. How would you like to see it priced?
I'm also missing out on the karma awards program. Where do I sign up?
I'm not trying to nitpick, but I am really not crazy about that image on your homepage. It's just too reminiscent of shots/scenes from ads by pharmaceutical companies. I suspect there's a healthy segment of your users who are sick of being told their problems will go away if they just talk to their doctor about the latest-and-greatest pill. There has to be a way of conveying tranquility & peace without so heavily reminding us all of those horrible, borderline-abusive television commercials.
21.1 mm x 11.9 mm? So a 24.2 mm diagonal.

Micro Four Thirds (and the non-Micro type) uses a sensor which is 18 mm x 13.5 mm, with a 22.5 mm diagonal. And MFT has no mirror, so the rear element can get as close to the sensor as it likes. Perfect match if you ask me!
http://www.boston.com/bostonglobe/ideas/articles/2008/07/20/...
The default approach for people who don't want to market themselves or their wares is to get a salaried job that doesn't deal with customers. A perfectly acceptable option for those who want to just hack/just write/just do their thing.

Probably all of us struggle to see where on the continuum of [stereotypical hacker who fears sunlight] to [real estate agent that also writes code] we lie, and what sort of job/career/ambition we best fit into.
if the crypto library is Nacl or keyczar, then yes, maybe, but there are still a hundred ways to fuck up. If one is calling the aes function from openssh directly then no, I am bound to get it wrong.

And the whole argument about having magically independant servers that do not need to do any secure callbacks is totally blown away by the standard approach to CSRF protection - you send a nonce to the client. If it comes back to an "independant" server, the nonce still has to be looked up and confirmed. maybe you can use cycled hashes but at some point, we need to get a server make a security callback. It just has to happen to keep things simple.
NSA Prism scandal could cost US cloud computing industry $35 billion
Soo ... I have to unsolder the microphone on my brand new 600$ phone and use blootooth hands free? This industry has gone crazy ...
$watch how the $apply runs a $digest
From my understanding (which may be wrong...), the requirement of "Reflect user-input in HTTP response bodies" is actually pretty important. If the application only does this on POST requests, then it should probably be fine. Since an attacker cannot formulate a valid POST without the CSRF token (assuming the app is using CSRF tokens correctly), then there is no way for an attacker to get this attack bootstrapped.

If the application reflects GET request input in the response (eg `https://domain.tld?q=ASDF` results in some `value="ASDF"` being included somewhere in the response), then it is indeed likely vulnerable. This allows the attacker to simply continually change the value of `ASDF` as they guess and check for some secret on the page.

Of course, if your application is allowing untrusted POSTs to be made, then you will still have to worry about POST requests...
I was not aware of the distinction till now.
For me it has been the same, happy to be back in Firefox.
A link to the original post would be interesting, since you're cluttering up my eye balls anyhow. :)
I hate all of these pretentious claims about new ways of working when they all do exactly the same thing:

1) Set up a straw man in the form of "traditional management", whilst there are hundreds of forms of management and managers, most of which don't "look at reports as resources", or even look at people as "reports". As a manager, I find this insulting.

2) These shiny new methods are the way many small companies have worked for fucking decades. They just weren't so fucking pretentious about it.

It's the same shit as with shiny new technology, frameworks and methods in our business: everyone thinks they've invented the wheel, and nobody bothers to look around them (and especially behind them) to see if the same thing hasn't been done countless times before.

Excuse the language, but this attitude is just pathetic. Nothing new is being invented here.
Telepath Logger Now Open Source
[Study] External hires start slow, but eventually outperform internal hires.
The citation should include a caveat that the benchmarks are from 1998 and that they were ran on a Pentium 100Mhz.
Why do you oppose gay marriage? I'm not looking to start a debate, I won't even respond if you'd prefer (tho I'm sure others will...). I'm genuinely curious about the reasoning from someone who has given it critical thought and can articulate their viewpoint well.
not being a chip engineer, i wonder while 3D chip layer stacking isn't in the wide use. For high powered chips it is understandable because of heat dissipation requirements. Whereis for lower powered it may seem that additional layers of heat transfer material between working layers would do the trick. For CPUs the 3D stacking would decrease distances between various parts for example and would allow something like cluster (of low powered chips) in a cube.
I'm an anarchist at heart so I love these types of stories but I'm also very pragmatic. I work for a very large multi-national concern and I know that eventually you're going to get employees who are more concerned with things at home than their job.

For these people the job is just a meal ticket, something to feed their kids and put a roof over their heads. When the passion goes out of frame like that, what's left is apathy.

No "operating system" in the world has a cure for that.

Personally I know I would thrive in a management-free environment, if anything has been positive in my reviews it has been that I am self managing and do not need any guidance to find things to do. But people around me do their best to avoid hard work all day long. They have what we in Sweden call "tillsvidareanställning" and that means it's practically impossible to fire them.

Seems to me that Holacracy is great if you manage to find driven employees who care about your business. I'm not saying they should dedicate their lives to it but they should feel pride in what they do and a sense of responsibility for their company.

So far I've only seen this in small startups, and even then it wasn't prominent.
Very interesting site, but I got bored of manually scrolling around dropbox. Why not stick in a button that autoscrolls to the next anchor?
>This Anarcho-Capitalist ideal has never come to pass in any scenario where it could have happened: That is, there have been multiple scenarios where the established government has broken down entirely, and nobody's ever created this system with government-by-contract or anything like it.

A collapsed society isn't really a good example of anything. There are some good examples of private law systems here http://youtu.be/o0TBE-pcEi0.

>Only if everyone starts from the same premises.

Only if you are talking about subjective things like values or definitions of words or something like that.

If you are debating actual facts like "I expect X to happen tomorrow with 30% probability" or "if I do this experiment I will get this result" or even "this event happened in the past" (like debating whether someone is guilty of a crime for example.)

Given all the same information and arguments, 2 perfectly rational agents should always come to the same conclusion on these things.
As long as they tell you about it when you buy the phone, and there's an easy way to opt out, I don't see the problem. And after some time, people will just know that it is turned on by default on new phones.
Yesterday, thousands of people probably disabled the alerts on their phone. Classic boy who cried wolf problem. Now these people may not get alerts for legitimate warnings like floods, Tsunamis, war, etc.

This system should also be far more targeted. Sending a blanket message to the whole state is absurd. They should selectively send it to people based on GPS location. Who knows where that kid was abducted, but I'm certain that people on the other side of the state didn't need to know about it.
Consumers of child pornography are probably inclined to save the images. TAILS would be a lot more invconvenient since it doesn't save anything. With TBB you can save things you download to your desktop. Combine this with Windows being a dominant platform.

I guess you could do this with TAILS and a usb stick though.
Of course, but those aren't CPU firmware. With MIT and LMI's Lisp Machines (and probably the Symbolics LM-2 repackaging of MIT's, don't know about their own architectures), depending on how much microcode SRAM you had you could add your own microcoded instructions to the machine. There was even a compiler to make it easier, although I don't know how widely that was used.

ADDED: the elReg article in this item, https://news.ycombinator.com/item?id=6168144, based on talking to an IBM guy, implies it is that level of BIOS/chipset firmware that's being talking about. Ah well.
The Ultimate Guide to Speeding Up a WordPress Site
My O1 Visa Story And How It Almost Killed My Startup Mobtest
Indeed.

> if you're working with a company with a formal payments process and you don't follow that process to the 't', you're going to get paid late no matter what you tell them.

There is a class of clients for whom I allow 6 months to be paid, namely where the money comes from an academic funding agency's grant that is administered by a university. Just have a day each month where you make sure that there is progress being made on your slow invoices, and don't be afraid to use the 'phone.
There's an argument that a lot of branding is simply an attempt to "de-commoditize" a product and thereby justify a far higher margin due to its perceived uniqueness. This seems like a particular case of that strategy.

It's not necessarily a sham, either: if the story you're telling convinces the right customers that this is the right product for them, it may be providing real value over the root product.
No I wrote a library that stored a UUID as a cookie, then wrote that as a keypair with the user details to a backend dbase.

No crypto, just a lookup. Yes it introduces latency. But it is as secure as my servers are.
VigLink is already there.
Since Amazon is such a low margin business

Even as a public company, I wouldn't be surprised if they're playing some accounting tricks in order to maintain this as a facade.
There is a button for me, maybe they just implemented it.
If we can hit that bullseye the rest of the dominoes will fall like a house of cards. Checkmate!
it's on the left side, the circled down arrow?
Facebook Insights $4000 Graph API bug
I'm not an art purist, but I'd speculate that you run into issues with sheen and shadowing with medium like oil paints, which have a 3D shape on the canvas. It would be difficult to accurately capture & faithfully reproduce.
How did people share cat photos 30 years ago?
Does the Qubes Tor container egress filter non-Tor traffic? If it does not, it would still be susceptible to a linux-specific version of this same attack.