skysight-inc/HackerNews huggingface dataset:
AFAIK, there was nothing vulnerable in the widget itself: the hackers accessed Outbrain's admin panel, and changed the content of their recommended links to point to their website instead.

The hackers posted screenshots of accessing the admin panel: http://mashable.com/2013/08/15/outbrain-hacked/
I'm under the impression that the supervisor wants to stop the worker as soon as its doing something wrong; not do something like check every so often, and stop only when the supervisor notices.

Anyway, what you're describing is pretty easy too. Basically all you do is make a channel of Point, and have the supervisor read on that. The worker just does some work, and tries to send his value down the channel. If someone's listening, send the value. This is pretty straightforward, but probably not safe in the real world, because the worker just keeps on working; it doesn't wait for a confirmation that its work is ok. http://play.golang.org/p/J8Xgh8S18b

If you want to structure it such that the supervisor can stop the worker, ask the worker what it's doing, look at the data, and then reply with "ok, you can continue now", there's a handful of ways to do it. Now we're getting pretty real-world, and things get a little bit more intricate, but you can do it like this: http://play.golang.org/p/hXYNmCm8lg

the trick being that you send a channel over another channel. There's a handful of ways you could structure this; there may be a cleaner way.
I was hoping it used http://www.paulgraham.com/arc.html
What do you like about Clojure's system?
Perhaps I should phrase it as "all good names"...
Some good alternatives are openDNS - 208.67.222.222 or 4.2.2.2
The mutual frustration imposed in PRDs is due to how it cools and the mechanics of a bulk state (tension on the surface and positive pressure in the core).

What they're talking about in this paper is a chemically reactive state which is avoided due to an energy barrier. They're totally different situations, but I can understand why you'd think they might be similar from the wording of the article.
But how is authentication and authorisation mapped and passed around and shared between the app server cluster and the db cluster?
What are the levels of competency, scarcity, and bargaining power? How do you place a particular candidate in her appropriate levels?
Simply because they are idiots.
It really does provide a much better way to find and share the best places. Whenever I go to a restaurant, I don't think "Oh this place deserves 4.2 stars" - I think "this is my favorite places for pizza!". myfab5 does a really good job of streamlining a user's thinking process
"Do the exact opposite. Don’t spend money acquiring users, instead build your product to go viral, and then monetize through selling access to users (and their data) to advertisers."

This idea that viral=free is pretty dangerous. "Viral" can be a very expensive way to acquire customers. Who develops these viral features? free developers? Who tests them, deploys them, scales systems to handle viral growth? Viral is only free if you aren't paying your development, testing, and ops staff.
On an orthogonal note. Seeing an image of a man smoking a cigarette and drinking a beer next to the post-mortem doesn't exactly inspire confidence. This really seems to be pushing the limits of professionalism.
To those who disagree with me. Testing was needed, and is reliable, not saying there is something in place that would have solved this particular instance but saying "not particularly reliable" means that you haven't properly addressed the problem. If you can't write a test that tells you your code works, then how can you as a human verify it passes all required cases manually reliably.

YES, I have written tests in multi-threaded situations before. Your aversion to trying it doesn't make my statement wrong.
Less about needing money and more about being ambitious. Hungry for success I should say.
But "Arc" as a name is widely known and used, at least among the HN sort of community, and although it's a niche language it's actively used within that niche. I think you're overstating things; the name "Arc" was not ready for garbage collection.
Yes, but in combination with good practice, it doesn't hurt.
"$25,000 every month in hosting costs". Wow, is that right?
I did a small project so maybe someone that did something larger can weigh in, but I worked with RethinkDB back in the 1.4 era, so a bit has changed, but the biggest difference IMO is that you have to be prepared to fall back to the RQL syntax to do queries more complex than simple get etc. vs. in Mongo everything was in JSON, and when I was using Mogno you couldn't join tables at all, don't know if that's changed and here you can. Otherwise it is pretty similar, since I didn't do any clustering.
why isn't the iteration/improvement part making it open? i don't see the dichotomy.
As I recall, Dirpy had hundreds of thousands of users. That's a lot of video transcoding.
Yes, I've read that before and it's extremely unconvincing I'm afraid. I'd go into details but you've already expressed a desire to refrain from such so I'll respect that.
When is that coming to users in the Irish beta?
No one stops you from doing polling as an enhancement to a working HTML-only version. However, "single-page" has absolutely nothing to do with this, and neither do client-side MVC frameworks. I mean, there are not a prerequisite to do polling, merely your choice.
I'd be hard-pressed to call Javascript a "functional programming language" (whatever that means). Common Lisp also suffers from the same misguided label. In truth we love to mutate state in CL and find lattices of type hierarchies to be burdensome (but a great pool of research for your post-doc).

Scheme is about as close as I'll get to pure-FP languages. I don't seem ES6 going down the "purity," route. And I hope it stays far from the border.

What I was originally referring to though is (if I recall the history of the language) the roots of Javascript -- that it purportedly was a Scheme-like language before becoming what it is today. And by being what it is now has lagged behind in feature-parity to what programmers are used to in other languages whose history isn't tied to the venerable web browser. It just seems to me from the interviews that skirt the topic that Mr. Eich is finally coming back around to introduce what should have been there from the start.

(Updated for clarity)
If I can't see your work - you're crap
This is right: outsourcing design is just like outsourcing development; do it if its not at the core contempancy of your startup. Game startups almost always have design talent in founder roles for this reason. A lot of novel app companies have at the very least design-gineers in founding roles, if not full time designers.
Why is it better to modify for taste than resistance?
Spoofing it in a client's browser is not possible but it's trivial to spoof referrer headers (or anything else) from a stand alone program. Beyond checking for referrer headers the server should give the client a signed token (returned back by the client to the server) to verify the request is valid. Otherwise if the client is arbitrarily sending requests to the server to "install X, run Y, ..." it'd be very easy to hijack the server for other processing.

As usual this goes back to one of the standard rules of server security: Don't trust anything that comes from the client.
You're going to pay for those anyway if you are growing. The point is that those are fixed costs and not costs per costumer.
I'm curious how the inter-device communication will work. Will I be able to send data from my iPad to my Android phone, for example? That would be pretty slick if so.
It was a bit hard to read from a technical aspect and then I got to the "Events" section. I think I'm going to put myself in the "I choose not to work on things that can kill people" column.
Being a heavy PostgreSQL user I really would appreciate a "How RethinkDB compares to PostgreSQL" FAQ entry.
New benchmarks of NaCl (crypto lib) and scrypt in the browser
Strange. I see people subscribing fine (a little over 500 so far). Try once more and if it doesn't work, e-mail me at nico@howtocode.io and I'll add you manually.
Well I'm calling Poe's law on the one before. I had no idea that was joking.
A worthwhile read in the same vein

http://www.theatlantic.com/magazine/archive/2012/05/is-faceb...
That number is a bit disingenuous, since some of the individual bullet points are pretty catch-all. For instance,

No bath, beauty, and cosmetic products; electronic surveillance equipment; eyewear (sunglasses, prescription glasses, and others); firearms, weapons, knives, weapon accessories, and replicas of weapons; medical, health, safety, and personal care products; or infomercial-type products.

That's a lot of mostly unrelated things.
Destructuring assignment long predates Coffeescript. According to the Coffeescript docs, they took the syntax from earlier drafts of ES6. Destructuring assignment long predates ES6. Common Lisp had a destructuring-bind macro back in the early 90s, and I'd bet it wasn't a novel invention back then.
That is true. I think date was more of an example on how to use threads. But yeah, Beautifulsoup bit might actually run a bit slower if it is only doing parsing. (!unless there is a C extension underneath that does release the GIL!)

Any discussion of Python and threads is always confusing and it seems to me there aren't many people who understand how it works (I know you do, not talking about your comment, just in general).

In one camp you have people who like to write how Python is no good and threads are just broken. Never use them. In the other camp are people who say threads are fine, they work great, I never had any issues with them. A lot of time people in this camp are just reacting to the ones in the first camp but also without understanding the underlying mechanism.

I think the first thing that should be mentioned in any introductory article on Python threads is that Python threads work great for IO concurrency but they won't help with CPU concurrency. Things like downloading files, sending data over a socket will work nicely. Thing like computing determinants won't. You can still structure your code in a threaded fashion so can use multiprocessing module in the future but you won't get a speed up. So threads are not completely unusable and broken but they also have a surprising limitation.

Overall in Python in my career I probably deal more with IO concurrency and threads helped there quite a bit. Others will have a different experience depending on their area of expertise.

Also it is worth mentioning that libraries like Numpy and C extensions in general have the option of releasing the GIL if they want to they can get a speedup. I have done this once by hand and it did help (with a hand written extension). Didn't personally test numpy's speedup.

ADDITION:

It is also worth mentioning that even though you not get a speedup for CPU related concurrency, you still have to deal with synchronization issues. So you get the worse of both worlds. Just something to keep in mind.
The fast hardware lie
This is really cool.

It's completely backwards from my personal usage of the Internet; I get away with browsing online using a Penryn-era Pentium, a ARM-based Chromebook, and/or my Galaxy Nexus precisely because the majority of processing costs are offloaded on "traditional" websites rather than on the browser doing the rendering.

But if this means that application developers won't have to recompile every application under the sun (like, say, ffmpeg or Audacity) to run under asm.js or PNaCl, then I think it could mean that we could skip a decade or two of having to reinvent the wheel.

On the other hand, this feels suspiciously reminiscent of ActiveX, so I suspect you're going to have a hard time convincing people to adopt it if the security diehards warn you of running arbitrary code on your machine (even if it is in a sandbox).
I'm so glad we're going back to the days of hosting a blog on your ADSL connection. Yay, freedom for my dat...! Shit, connection went out again.

A little black box with a big hard drive and a web server on it? It's called a NAS, they've been around for a while. Can someone explain to me how such talented people can come up with such stupid ideas?
This is an actual linux virtual machine... Not a language runtime.

It's too bad that "Virtual Machine" means so many things. Maybe someone has more info on this, but I understand that it was Java who first called their language runtime a "Virtual Machine". Partly motivated because they wanted to create an actual physical machine that ran Java (kind of like Lisp machines). Nowadays with type 1, type 2 hypervisors, and jails/containers/zones, and every programming language on the planet calling their runtime a VM, I'm not surprised that people are getting confused.
I only picked the first name that came to mind that sounded older. I didnt choose a womens name on purpose. Albert in accounting, etc... would have done just fine.
Dirpy had three million monthly users.
I'm an engineer at Braintree. The way I see it when you compare Braintree and Stripe in the UK:

- Stripe has instant signup. Braintree does not (yet). You have to send us a few documents; the signup process takes a few days.

- Stripe multicurrency support is limited to USD, EUR, and GBP. Braintree can accept payments in 130 currencies and settle in the following currencies:

AUD - Australian dollar
CAD - Canadian dollar
DKK - Danish krone
CHF - Switzerland francs
EUR - European Union euro
GBP - British pound
HKD - Hong Kong dollar
JPY - Japanese yen
NOK - Norwegian krone
NZD - New Zealand dollar
SEK - Swedish krona
USD - US dollar
ZAR - South African rand

Being able to settle in DKK, CHF, NOK or SEK might make a big difference to merchants with large customer bases in Northern Europe.

- Stripe charges a 2% currency conversion fee if you settle in a different currency than you present. Braintree does not.

- The pricing structures are different. Stripe charges 2.4% + 20p per charge; Braintree charges on an interchange plus model: IC + 0.9% + 10p, with a 100 GBP monthly minimum.

Finally, of course, our products are different as well. Braintree.js and Stripe.js don't work the same way, and our APIs have different capabilities.
I achieved two milestones today, one of which was a cock joke on Hacker News
keep in mind openDNS does nasty things like replacing NXDOMAIN replies with adservers, which breaks tons of things.
Also, every participant was an undergrad at a single university - not that that's an uncommon thing for psych studies!
It's certainly a great project, but i can't help thinking : so now we're not satisfied anymore with running virtual machines to execute some code, we need the whole OS on top, along with the shell, and the preinstalled programs...

That story reminds me of the last time I tried to compile a blackberry app on my mac a few years ago :
Java VM running my code within a blackberry simulator running inside of a windows XP VM on top on my mac OS.

Where will it end ?
It will. If you just tweak some things in the examples like urllib2 imports and print-as-a-statement usage, the threading API is the same so it's still generally relevant.
Are there projects like this that let me embed a third-party URL instead of direct code?

So if a publisher provides me with a link to widget.js, I could just run some sort of Adsafe.executeInWrapper(http://example.com/widget.js)

Most providers in my experience don't want you to embed their actual JS code, because then they lose the ability to do updates and fix bugs without contacting every single customer to upgrade.
Should have named it red pill. :)

Seriously though, I was more excited when I thought it was about running Linux inside the browser. Personally, I have no interest in installing an extra VM on my system just to make your development easier.
Deep Work and the Good Life
I was not planning on submitting anything - but I had an epiphany of sorts, and wanted to share. Mostly though its sharing a joke.

Please do not flame.
Safari Flow - A new product from Safari Books Online
/dev/urandom is usually pseudo random, so as an initialization for SHA1PRNG random number generator it is not good enough.

OpenSSL on most Unix-alike platforms has been seeding its default CSPRNG (which uses SHA-1 internally unless you've built OpenSSL without SHA-1 support) from /dev/urandom for over a decade. I don't understand why has everyone suddenly started framing /dev/urandom as a gigantic crypto bogeyman to be avoided at all costs. It just isn't so.
but it is extremely hard (perhaps impossible) to accurately determine leadership potential in an interview
What was reported[1] was that certain stories were redirecting users to the SEA's site. This implies that they weren't just rewriting recommended links, but were changing the code of the widgets, which resulted in that behavior.

[1]: http://www.politico.com/blogs/media/2013/08/washington-post-...
Maybe a way to avoid being exploited like that would be to avoid using such a common expression which is actually the origin of the problem.
Good to see, this is one thing I have really missed from Erlang when writing Javascript.
3. Amazon considers all SDEs to be fungible but internal politics determines which group gets to interview a new candidate. Have an advanced degree and strong interest in machine learning? Too bad, US Retail needs someone to work on front-end development and they'll ask you lots of questions about javascript.

Yeah, this is pretty painful. I've phone interviewed with Amazon twice. At the time my resume was pure front-end developer with just a smattering of server-side experience. From the Amazon recruiter everything was smiles and 'perfect'.

The interview was for a server-side & database developer position with warehouse software. WTF?! Did you look at my resume for even twenty seconds? I got database design and management questions mostly.

That interview was brutal. What a waste of time for both parties.
> a chemically reactive state which is avoided do to an energy barrier.

So sort of like how gunpowder is stable unless you introduce enough energy to get it over the hump?
Seems like a similar concept to www.musicboss.fm (not my site)
Be yourself, everyone else is already taken. ~Oscar Wilde
I haven't got the funds to not take a paycheck for a couple of years.
You are very much mistaken, and are making a fool of yourself.
I used to have the same sort of plan (there's something inherently attractive about it, prob something related to human psychology, not sure). Looking back though, I wish I had done more exploration while I had steady money coming in. Are you opposed to starting part-time on an idea right now?
Why do you think they would list every single employee and contractor in their funding campaign? Why do you think I know their names? They say those people exist, there is no reason to believe otherwise, you contradict them with no evidence.

http://www.vice.com/en_uk/read/rob-rhinehart-interview-soyle...
So much more than the Hyperloop
I spoke with a professor ( http://en.wikipedia.org/wiki/Walt_de_Heer ) once about a question somewhat related to this topic, specifically in cluster physics, regarding the formation of stable condensates of atomic clusters. An atomic cluster is sort of a jelly ball of atoms, where the orbitals, rather than being organized into nice molecular bonds, have become nonlocal and the whole thing acts as a sort of "superatom". They can carry a charge, as in the Zintl clusters e.g. Pb_9(4-): nine lead atoms with four extra electrons. In some very rare cases the clusters form metastable compounds.

When I asked de Heer's opinion on producing condensates of clusters, he said quickly "it's a bomb!". Apparently there is so much energy in these unfavorable molecular configurations that you would never want to try to isolate a substantial amount of them. I imagine a similar principle applies to carbyne.
A Look at Facebook's React
It comes from the failed assumption that those you know are those you can be more honest with, since they want to see you succeed. Otherwise, why are you friends?

That ends up not being the case, since most people aren't very discerning with whom they accept friend requests from, and facebook encourages making as many connections as possible as well.

As a result, the only current way to be honest online is through anonymity. I'm not sure if Path App has made any headway in this regard.
Designers that spend time learning both to design and code well aren't great designers. Programming isn't the only core activity in a company, design is intense and none of the designers I know would have time to code even if they knew how; they just have so many things on their plate.

This applies to a small company of < 10 people. Do you really want your only designer writing crappy code while they have a huge backlog of design work to get done?

HN seems to be obsessed the designers are somehow broken because they can't code, that programming is to be worshiped and other essential activities devalued. Maybe this is a problem with the industry as a whole, but lately I have noticed that hiring good designers has become harder than hiring good coders.
A major complaint about produce from mega farms is that they aren't grown for taste but pest-resistance or size or color. Since humans have tastebuds, taste is a pretty important factor and isn't considered.
Just in case you didn't see it before - github.com/rossjones/alternative-internet has a list of platforms,protocols and suchlike that are in this sort of area.
An early adopter for life
10 Tools That Simplify Startup Collaboration
This isn't quite as powerful as full blown pattern matching (which in turn isn't quite as powerful as full blown unification) because you can't branch logic based on whether a pattern matches or not.
'Rebelling' in psychology happens so an individual can become an independant person. They rebel (males do at a younger age than females) to become something a bit different than the parents. We all do. The persons this article refers to just keep that mentality when it comes to other things.

"This works, but I see another way to look at it, witch removes something I don't like about the idea" Call it rebelling, call it out of the box thinking. It's what happens with us all, so we are not clones of our parents.
It's possible, but you'll have to structure your data slightly differently. There's a blog post detailing one possible approach: https://www.firebase.com/blog/2013-04-12-denormalizing-is-no...

We're working hard in regards to adding more powerful query support to Firebase though and would love your feedback so we can improve the API (just email support@firebase.com).
This is cool. I actually did something similar for a Zappos/Twilio API contest where we had people playing a price comparison game (similar to what you would see on the Price Is Right), with the data being used by brands to check which product images worked the best or to test what price points people are expecting of certain products. Seems like an area you all could get into also.
Isn't this a problem that the market will correct? If Arc the language has a significant enough following, then "Arc" in common use will refer to the language. I'm not saying people should go around picking names others have used, but it seems a little heavy-handed to assume that because a few thousand people have an attachment to a name it is now off limits for everyone else. Moreover, at what point does it become ok? There's also Ark the YC company: http://ark.com/ is that fine because it uses a k?

Taking a look at it from a different angle, even in the case of the legal framework for names - trademark - having Arc the language and Arc the VM thing would be fine.

The truth is, if you don't want people to collide with your name, picking a 3 letter common word probably isn't the way to do it.
Motion Perfection