skysight-inc/HackerNews huggingface dataset:
But the argument to println is evaluated before println is called! Whatever synchronization it's doing internally therefore can't affect what it prints.

Seems to me, either there's something synchronized in Integer.toString (which seems undesirable and therefore unlikely) or, statistically, in the rare cases that the writes don't take effect in time for the 'if' predicate, they do take effect a few nanoseconds later, in time for the conversions involved in the string construction. (Actually p.x is the only one at risk here, statistically speaking; the conversion of its value to a string will take plenty long enough for the write of p.y to take effect. Combine that with the fact that the write of p.x probably still precedes that of p.y, so that the one that's wrong in the 'if' statement is probably p.y, and you see that the odds of the wrong values being printed are vanishingly small.)
Get active on social media (it may be hard, but is necessary). To get started read this: http://www.quicksprout.com/2013/08/15/7-simple-yet-effective...
Introducing Yascade
Security through obscurity is generally frowned upon.
> There is no room in the Amazon interview process to "try out" a candidate for a week or two in a real world setting to see how they perform.

When looking for work, I have no room for companies that want to do this: I already have a job and commitments. Also, I might not even be in the same state as the company I am talking to.
So basically this is a synopsis of the relevant chapter from Introduction to Algorithms by CLRS.
Very true. In HS or college, how much you'll enjoy it depends on your perspective and what you expect from the crowd as well. I never mingled with the shallow crowd (boy, that really sounds pompous; but it's true) because I knew I wouldn't get much out of that experience.

But like HS and college, Facebook has its own variety of groups you mingle with and those you avoid with a 10 foot pole.

That said, I avoid all of Facebook with a 10 foot pole except for the occasional cross post with my blog.
Sort of maybe at an intersection of what the NaCL hopes to achieve? Mini sort-of-virtualization of x86?
7 Simple Yet Effective Social Media Tactics You Should Leverage Today
How We Shaved 200+ Milliseconds Off Our Response Times
I can see why Brendan Eich is excited to get ES6 out there. It's finally coming back around to parity with Scheme. I'm looking forward to seeing more.
>And if you really want it, it can probably be contracted, in a way the first two roles never can.

HN (rightly) bashes "idea guys", but there is really only one thing in a startup that cannot be contracted: what the startup is trying to do or achieve.

Design for a startup can be contracted in the same way software engineering can be contracted. That is to say: you will get reasonably good results if you find a good contractor who is a good fit for the project, but it will not be the same as having an employee fully dedicated to create a great product, analyze the market's reaction to the product as it is developed and marketed and adjust the design/the technology to the market's needs and expectations.

If you can contract a designer (and not hire one), you can contract a developer too. Results will be mixed.
Thanks for that. It's been a while since I used Go. That is quite nice.
The solution to this is for California to allow municipal income taxes. Then the city of San Francisco would be able to afford the services it needs to deal with the influx of citizens.
Here's some good recent data on how many exits and for how much in the past few years: http://tomtunguz.com/the-3-different-strategies-of-venture-f...
This little open source project helps anyone manage huge document projects in a pretty quick way. Warehouse your info inside spreadsheets you can quickly navigate and then later export into HTML formatted documents that are ISO-friendly. Perfect for safety systems, legal contracts, documentation... etc. There is a tutorial video uploading right now so you might want to wait for that before playing around with this.
On lunch break I usually peruse vine and no longer login to facebook. I do use facebook as a login shortcut to some service.
Heartburn safe recipes
Why are people so interested in recreating a 'more open X' (where X is something like dropbox, skype etc...)? When these people could actually be iterating on these ideas and creating something different. Is it because there is lots of money/publicity surrounding this new found interest in "openness" or do these people actually believe that this is the most important thing to be working on? I am just trying to imagine what kind of new openness we could create if we began thinking outside of the framework that current applications provide already.

This is not not to say that they're not doing enough, but it's just a question that's been bouncing around in my head lately.
Today we rely on the TPM to measure the state of the system using Intel TXT. These measurements are stored in platform configuration registers (PCRs) on the TPM device.

There are known TPM and LPC bus vulnerabilities. That is why long-term we will move away from that dependency by utilizing upcoming CPU features.
82 participants.
3 participants did not complete.
1 person excluded as inconsistent > 4SD.

Study comes down to:
Participants were text-messaged 5 times per day between 10am and midnight over 14-days.

"""
Each text-message contained a link to an online survey, which asked participants to answer five questions using a slider scale: (1) How do you feel right now? (very positive [0] to very negative [100]; M = 37.47, SD = 25.88); (2) How worried are you right now? (not at all [0] to a lot [100]; M = 44.04, SD = 30.42); (3) How lonely do you feel right now? (not at all [0] to a lot [100]; M = 27.61, SD = 26.13); (4) How much have you used Facebook since the last time we asked? (not at all [0] to a lot [100]; M = 33.90, SD = 30.48); (5) How much have you interacted with other people “directly” since the last time we asked? (not at all [0]to a lot [100]; M = 64.26, SD = 31.11)
"""

So we have a shaky self-reported study with low (and relatively homogeneous) sample size where it is fairly clear what the researchers are after, spun into an article with link bait title about how Facebook makes you sad. This is news now.
Well, the glowing plant group claimed "radical openness" - "will be sharing online all of the work we are doing - the ups as well as the downs."

http://www.kickstarter.com/projects/antonyevans/glowing-plan...

It's been backed for two months so far, and not much progress has been posted on the glowingplant website

So either they are failing in their promise to be open, or not actually doing any work.
The comment about println being synchronized is indeed incorrect. See my reply to Eiwatah4.
> 'Front End' if you're good with JS, MV*, HTML/CSS.... and 'Back End' if you understand DB concepts & scalability or architecture stuff

It's been my experience as a front-end developer that you need to understand the entire stack. From the wireframes to the database. Perhaps this is a "full-stack" developer to some, but there's been an increase in the amount of "front-end developer" job postings that require you understand every aspect of the application.

If the user will eventually see that data, then it's the responsibility of the front-end developer, this includes all information stored in the database and the ability to store, manipulate, and create that data.
You might want to change the name from Arc to something else. Arc is the name of a lisp dialect written by Paul Graham, and is the language Hacker News is written in. http://en.wikipedia.org/wiki/Arc_%28programming_language%29
Is anyone aware of a well-articulated reasoning published by Kickstarter for this decision? It really does seem quite silly to arbitrarily disallow GMOs as something not worth funding, especially given that we've been doing it in one form or another for millenia.

EDIT: Clarified by a response, apparently they're only disallowing GMO rewards, not projects.
Marc, you and Mark seem to disagree on at least one thing:

You:

if you're considering a cofounder who you don't want to give equal stock to, do you really have the right cofounder?

Mark:

I meet far more second or third time entrepreneurs who wouldn’t do a 50/50 (or 33/33/33) partnership ever again than you would image.

I am one of them.

Based on my experience, I'd recommend finding a co-founder you want to split equity evenly with before you start up as you recommend.
Kudos to the team; some great releases this summer! (10x insert performance, regex queries, and now date/time and better disk space--all in ~90 days!)

I had never looked in to how rdb used disk space and off the cuff attributed its high usage to something similar to Mongo and allocating blocks ahead of usage.

This was something that went in to the negative column for me when I evaluated using rdb vs Postgres for a JSON dump. 12k somewhat light (but still larger than 250b) records ate up over 70MB of disk space in just over a couple days and I've not looked back. Time to give it another spin!
From the post:

"Arc is only packaged for OS X right now. It will be packaged and available for Ubuntu and Windows soon."
There are some interesting interviews with people working on re-decentralising the web at http://redecentralize.org/ - and there are more lined up for the coming weeks. Definitely worth a watch if you have the time.
Try koding.com which already did it. http://d.pr/i/8Y1u
Facebook to test Paypal competitor
Trsst Is A Secure Twitter For The Post-Snowden Internet
> From an end-user POV, what will using an Arc app entail?

If Arc is installed, you're good to go. Everything just works. If Arc isn't
installed

1) arc.js transparently falls back to the cloud and runs the Arc app on a
server. The user doesn't know the difference.

and/or

2) Upsell the user to install Arc.

I haven't built the transparent cloud fallback yet.

> What is to prevent other websites from being malicious and connecting to your
> locally-installed Peggo VM and trashing it or otherwise exploiting it?

The web server running in the Arc app can check the Referer header to verify the
request came from a permissible domain.
Well done guys,I'm especially happy for the Date Object! That was a easy but annoying thing to have to work-around.
I have a design background, I agree with mjolk's point as well.
I doubt this is the internal audit of the outage event. At least I hope it isn't, but I could be wrong. The template from Google isn't super uncommon and I bet most organizations that really want to drill in and understand root causes and prevent recurrence use something very similar to it (if the organization is serious about uptime and if they're successful at reducing recurrence).

It doesn't seem crazy to me that Facebook's publicly facing summary of this is as casual as this seems to be. They owned up to breaking their platform and indicate they're taking measures to not do it again. But if the person who's internally accountable for analyzing this and preventing recurrence told me "we're building better tools" without any specifics about those tools, who's got accountability, or the timeline they anticipate putting those in place, I'd say they should pack their bags, so I bet there's a more detailed plan internally. I'm also not a facebook app developer, though, and if I had any revenue depending on not being shut down like this, I might be more frustrated with this either a) poor level of transparency (giving them the benefit of the doubt) or b) poor depth of analysis.
"Day 55: Spent time in lab running gels--again. No results--again. FML."
The stereotypical example of something that "couldn't possibly go wrong" for our electrical division was the interconnecting wiring embedded in the case that simply connected point A to point B.

Sure enough, we once had a motor controller break where the problem was interconnecting wiring...
what about businesses without users?
When Google pushed out their interview-results data this year, one of the big findings was that there is NO SUCH THING as a good interviewer.

To quote the NY Times interview with Laszlo Black of Google - "Years ago, we did a study to determine whether anyone at Google is particularly good at hiring. We looked at tens of thousands of interviews, and everyone who had done the interviews and what they scored the candidate, and how that person ultimately performed in their job. We found zero relationship. It’s a complete random mess, except for one guy who was highly predictive because he only interviewed people for a very specialized area, where he happened to be the world’s leading expert."

That being said, there are a lot of very disorganized interviewers out there, especially among seed stage companies. I've been amazed about how many people grumble about the "talent shortage", yet regularly miss interviews with "hot" candidates because of meetings, forget them altogether, or just lack a sense of urgency & speed when it comes to running an effective hiring process.

A large part of having a hiring culture is about decisiveness. Loosing a fantastic Engineer because you spent 4 weeks making up your mind, or you didn't want to pay an extra $10K/year is just silly when it means that you won't hit your product roadmap goals.
I don't think it's necessary on Android. I started out using the original Filepicker.io library (and actually tried to improve it a bit: https://github.com/Ink/filepicker-android/graphs/contributor...), but had better results using native Intents.

In my case I had to build a system where it pulls from particular services (Dropbox, Box, Google Drive, Gallery, etc) or takes a picture from the camera. That is pretty straightforward with intents and you can either show every available app or specify exactly what other apps to allow. Also, we added an intent receiver so any app can share into ours. I have tested it across about 20 devices and have had 0 issues with the inter-app intents. The camera took more work but there are lots of libraries out there to solve the problems (mainly: where to store the file generated by the camera cleanly in all cases). Gallery also causes some issues because various vendors have re-implemented the gallery in non-standard ways, and remote URLs for Picassa or Google+ need to be dealt with, but it's not too bad.

If you are writing good quality code, fragmentation is completely overblown.
Please note that any use of python threads (in cpython, at least) will still use only one core at a time. So things datetime stuff, using Beautifulsoup, etc, will not be done in parallel.

To do stuff on more than one core, look at the multiprocessing module.
"And just as Steve loved ideas, and loved making stuff, he treated the process of creativity with a rare and a wonderful reverence. You see, I think he better than anyone understood that while ideas ultimately can be so powerful, they begin as fragile, barely formed thoughts, so easily missed, so easily compromised, so easily just squished."

http://tech.fortune.cnn.com/2011/10/24/jonathan-ive-on-steve...
I'd think you'd use a service like Firebase in much the same way people outsource IT infrastructure to the cloud. Eventually you reach a scale that it pays to bring the infrastructure in house. That might/might not happen with your product. Also, there's a lot of products where you're not going to care about 95% of the data in a few years anyway - trendy games maybe?

Anyway, I'm intrigued about the idea around Firefbase for allowing people to quickly start executing on their ideas and focus on what seems to matter a lot these days, the front-end.

I'm also appreciative of the AngularJS bindings....will definitely make me check this out...
Yet another great feature heavily inspired from CoffeeScript (and tastefully expanded upon). Well done!

The surprising thing for me is that destructuring _almost_ allows defining default values for function arguments.
That's a _really_ tough thing to solve. If your opponent has rooted the box of someone with credentials, they're going to get those credentials. If you want any kind of remote work productivity though, you're going to have to let them access your system from networks you don't control and can't lock down.

It's one thing to lock everyone out if you're Booz Allen, but another if you've got journalists on the ground in Cairo competing with Twitter to break news.

The easiest way is to IP limit any services with user privileges.

IP's can be spoofed though, and then you're severely limiting your ability to work flexibly, which doesn't go well for journalists.

Two Factor Auth is another technique that's really coming into it's own now among web systems, but again not super great if someone loses their smartphone or RSA dongle while running from a gunfight and needs to access the system NOW.

I work on the assumption that any password can be compromised at any time, so the system should be able to lock out and roll back a user's edits ASAP, and content-creating users shouldn't be able to get any code executing on the server. Easier said than done with most CMS's though...
There are a number of "how to make the front page of HN" that you can google for, but it's as much art as science. Definitely a luck factor too; your post may go viral, or be bogged down in a flame war about bitcoins.

But given that it sounds like you just want to promote your projects, you may want to google (or search HN) for general advice on marketing, and how to reach your intended audience.

You can also go for the meta approach, and Ask HN how to get the word out about your new site $AIRBNB_FOR_DOGS, then use any advice you find to post a Show HN later. :)
Somewhat related: http://blog.regehr.org/archives/140
Facebook has some of the best uptime in the industry, so they're a company that I'm inclined to believe when they post stuff like this.
Yeah i thought the same thing for a while.
I've seen worse on the internet :)

To answer your questions:

1. We put our code in escrow for very large customers. We are thinking about the best way to address the concerns of everyone else. Stay tuned.

2. This is coming. It'll be a little while.

Thanks again for your comments. Criticism helps us figure out where we need to improve.
Very nice! Games such as Runescape were built into the browser stored data on users computers to track botting. So many of the first gold farming companies developed technologies like this to implement into Botting clients (which were very sophisticated web browsers).

There was a very interesting tech scene that many don't know about around MMO cheating, especially Runescape.
They should have written a browser plugin.

They might not have gotten the results they were looking for, though.
Actually I was asking about what you do when they ask how much you were PAID at your last/current job, not what to say when they ask why there's a GAP in your history. What do you say to that?
Something has to go first.
He shouldn't be required to fight that battle as well; he's done more than we could possibly ask of somebody already. Russia is providing him with a certain degree of safety, he shouldn't be obligated to reject that.
Publishers should use AdSafe[1], which is a system for sandboxing widgets. AdSafe provides widget authors an API for access object properties and the DOM, as well as a static check to ensure that widgets are using this API properly. Given that the static check passes, and the library implementing the API is correct, then your widget is properly sandboxed and attacks like that can't happen. Check out the AdSafety paper[2] for more details about the extent to which AdSafe has been verified.

Disclosure: I'm an author on the paper.

EDIT: Here's a great talk by Arjun on AdSafety: https://www.usenix.org/conference/usenix-security-11/adsafet...

[1]: http://www.adsafe.org/

[2]: http://cs.brown.edu/research/plt/dl/adsafety/v1
Basically, it's a new way to find music. You sign-up, and can upload and leap/vote up songs similar to HackerNews. The songs at the top are ranked highest/hence the songs you might want to hear!
I feel like most people don't consider that the content people post on Facebook is posted because the person wants everyone to see it... They wouldn't post about the absolutely mundane stuff that we all go though every day unless it's significant in someway. This is why it can be depressing, because you're looking at the best moments of hundreds of your friends' lives and you're just sitting there at the computer.

But when you post something interesting others feel the exact same way you did when they posted something interesting. Sort of a weird situation.
You must first remotely attest the hypervisor using TXT before deploying a VM to run on it.

Today, that attestation process relies on a TPM and a signed certificate chain baked in by the TPM manufacturer. This is standard stuff out of the Trusted Computing Group.

One more thing to add, this isn't just a personal side project. We're a company and have a beta product deployed to early adopters.
It may infact be, unsure if its ever been tried as a defense.
I'm not entirely convinced this was misogynist.

Right now, I'm trying to think of jobs for a news provider that wouldn't require tech savvy. "Secretary" is the only one that comes to mind. Secretaries are stereotypically women.
Gotta learn to love yourself, hombre, because you're stuck with you
Phishing System Profiles without Phone Calls
> Would the difference here be that instead of running Java, you could run
> almost any language?

More than just any language - any Linux software.
One of the big complaints about GMO plants is that the first generation were designed to meet the needs of industrial agriculture rather than consumers. Pesticide-resistance was added, not better taste. Now along comes a consumer-focused GMO plant and that is attacked too. It's very frustrating for those of us in the field.
Can the Referrer header not be spoofed?
suggestion: instead of enabling/disabling print mode, just use an additional media=print stylesheet.
I was hoping it was a finished version of http://bellard.org/jslinux/
Default parameter values are also part of ES6.
These changes make sense, but I'm actually more surprised that you couldn't do that before than that you can now. That seems like a pretty obvious feature.
And what are the dependencies? What is the lifetime of the VM? It says that Arc uses VirtualBox, does that mean I would need a full install of VirtualBox to use this?
good point :) will add that to our roadmap.
Interesting, but dependencies are a long-term killer. You should check this project:

http://bellard.org/jslinux/

It creates a VM in javascript and can boot Linux.
(P)NaCl already solves this problem, without such hacks as transparently spinning up a virtual machine.

I don't trust Virtualbox to be especially resilient to attacks from malicious VMs. Chrome's sandbox is well-audited and (overall) is sound. A virtual machine host has a much larger attack surface, and generally doesn't assume malicious guests.
Is Javascript's const head-const or tail-const?
It's their choice... It's one out of ten-odd prohibitions on their website. In the end people working on GMOs are free to use other crowdfunders or roll their own (like I will). Kick starter isn't an entitlement
> Ah China, Like religion, a topic about which people who have no idea about are comfortable making grand, utterly wrong statements.

Careful, that sword has two edges.

I was referring to its potential - population, territory, resources.
Title is wrong. Virtual Machines are not in the browser, they are in your computer bridged to the browser.
How is trying out a practical for anything other than unemployed new grads? I see this constantly suggested but I don't know a single person who would even consider quitting or taking vacation time to go work for a prospective company.
SF already has a payroll tax to capture some of the revenue from financial and tech firms, which is a rather unique situation.