skysight-inc/HackerNews huggingface dataset:
> In each instance they've always classed themselves as "Web Designer and Developer" and never as either.

I've had independent jobs as a designer (including one that was not related to software at all) and as a developer. Though I do bill myself as a designer and developer because I enjoy both and prefer to have a job that is the mix of both.

> I'd never hire one person to do everything

I think that's fair for a number of reasons, but why not hire two people who are great at both aspects? Then they can collaborate on both sides of the project, which is surely better than having someone who can only design and someone who can only develop.
Consider an ASCII password of unknown length.

Now you just show your mark each symbol to check if it's a part of the password, which would drastically and usefully reduce your search space (unless it a password that uses almost all ASCII characters, but those are extremely rare...).
> "Worker control of the means of production" sounds an awful lot like classical marxist communism and all the associated implications.

Marxism is form of socialism (as are its descendants Leninism, et al.), so, yes, they include at least reference to "worker control of the means of production". The difference between authoritarian socialisms like Leninism (I'm going to leave out "Marxism" because there are problems with categorizing it -- libertarian socialist often see the roots of libertarian socialism in Marx and see Lenin, et al., as diverging from Marx in important ways -- which make it non-helpful in this context) and libertarian socialism is that authoritarian socialism uses the state as the vehicle for worker control of the means of production in a top down manner, and libertarian socialism prefers more direct, decentralized worker control (different strands of libertarian socialism have different particular programs, but one form is worker control by "worker's councils" or labor cooperatives controlling the particular factories or firms.)

Libertarian socialists often criticize authoritarian "socialist" regimes, particularly Leninist-style Communist ones, as creating state capitalism, because you end up with a party elite that controls the means of production which ends up with the same kind of oppressive power relationship with the powerless common worker that socialist critics of traditional capitalism criticized in capital, stemming from the same source (narrow control of power over the means of production.)
Announcing the Ink mobile framework
With modern tools like Fully Automatic Install and Ansible/Puppet it shouldn't be any more than for a Cloud service.
> Software Engineer / Programmer - This has come to mean "programming, but not for the web."

...whaaat?!
Just a thought, but it would be interesting if there was a DDoS attack on the github status page. Then what would we do?
This happens every other week. Does it really need to be posted on Hacker News every time? If you happen to be using Github at the time of the outage, you're going to notice. If you don't happen to be using Github at that time then it doesn't affect you.

This doesn't qualify for the news part of Hacker News.
Appears to be loading fine now.
Perhaps because of how they replied to Coca Cola is why the company did not pursue it further? There is a lot to say about politeness between responsible organizations. Not all big companies are staffed by hordes of idiots.
The article isn't about drones vs piloted aircraft, it's about one type of piloted aircraft vs another.
My only problem with such philosophies is that they tend to ignore human nature. Really nice in theory, but in practice, some thugs will always organize to control the masses. That's a lesson in History, not a dumb statement.

One might argue that now it's different, people have access to much more information than before, and that given enough time to educate the public enough on these matters of government, the Anarchist or Libertarian movements could gain critical mass and truly work.

I think not, simply because that would do nothing to change human nature. Most people, no matter how rational they can be in their everyday life, have emotions and desires, which aren't rational. Thus my impression that organized groups of people would always strive to control the masses.
Strange that DemocracyNow.org is auto-banned.

Just yesterday, they had a video interview with Ladar Levison, the CEO of Lavabit. Excellent interviewed, yet banned at HN.
Or "git grep".
iPad Text Editor with Python Embedded for Automation
The error code for censorship is the reference. I guess not everyone would recognize that, but I immediately noticed.
TLDR; Get "Cryptography Engineering"[0] instead.

0: http://www.amazon.com/Cryptography-Engineering-Principles-Pr...
Who made the make maker?
IMO, if you're schema design would pass a Billion laughs style attack as being a valid file, you're probably doing something wrong.

SAX style streaming/pull parsers tend to deal better with this kind of thing as well.
find out from @github
This is true but it misses the point of Github.

Nobody denies your blobs are safe and available elsewhere when Github goes down.

It's the infrastructure around those blobs that makes Github so popular. It's your issues and pull requests, your wiki, your connection to Travis-CI that are gone when Github goes down.

That is why people get angry when it goes down.
Entirely possible. But part of my reaction is due to my not entirely buying that this woman is a "sociopath" and not just an "asshole." As noted elsewhere in this thread, sociopathy is weirdly trendy right now.
Time to read up on `git send-email`, I suppose.
Why is the Mill CPU good for Lisp? The Mill requires the compiler to schedule for cache and memory latency, but I would expect this to be difficult to predict for Lisp programs.
The Similarities Between Building and Scaling a Product and a Company
This this this. And what is the turnaround time on getting new servers provisioned for development? Are they using Docker, or are they stuck in Windows land where there's no open source private PaaS solution that makes any sense? How many of those servers have virtual machines provisioned and then those virtual machines sit idle? How long until the cruft virtual machines are so populous that they take up an ever increasing amount of your internal infrastucture and it's a nightmare to manage?
The one element no one ever accounts for is the interviewers. You're never going to have a perfect technical interview because you're an imperfect human. You're incapable of judging whether someone is a perfect cultural fit, and someone who doesn't fit the culture might help the company more than someone who does.

That isn't even getting into the the conflict between whats good for the company and whats good for you.
Random and urandom are interfaces to the same kernel CSPRNG. The difference is that reads from random block until an internal counter that estimates the entropy in the CSPRNG crosses a threshold, and reads from urandom don't do that.

In practice, this is a distinction without a meaningful difference. In more modern implementations (like OS X) the CSPRNG works the same way with both interfaces.

You should generally prefer urandom.

There is a wellspring of urban legands about the security difference between these two interfaces because the Linux man page is misleading.
A Product Manager is absolutely not similar to a Project Manager. These are two completely different jobs and skill sets.

While a common misconception, Product managers are charged with knowing the market/users/competition and driving the product to commercial success, as much as a development success.

Project/program managers focus on specific delivery.
There are a lot of companies out there who do not have a system administrator capable of setting up or maintaining (the latter is more difficult and time consuming) its own server. GitHub is a solution to that and is quite cheap.
Anything that the end user sees counts as "design".

As such, electrical circuits and the internals of software don't really count. They're hidden from the user.
I said "almost".
Re Wall Street: It's unfortunate that some of our brightest are tempted into playing multi-million dollar poker, rather than focusing their energy on producing any significant long-term value.

I believe software engineering wages will continue to rise over time, and will eventually reflect the true value the industry produces.
She's probably very charming, but on a very superficial level.

I've met many people like this, and some of my friends date women like this. They can be fun and exciting at first. But their charm usually wears off very quickly, once their personal motivations (i.e., a singular focus on their personal gain) becomes clear, and it transforms into something quite repellent.

The sociopath usually doesn't care once you catch onto them. They're already working new people, or focusing their attention on those who are easiest to manipulate.
The "producing valid documents" issue is solved by running the output through the schema before, or immediately after it's saved, and throwing an error if the code has generated an invalid document.
Until you get to know her, and then you realise that she is manipulative and unable to make real friends.
These are pretty handy:

http://www.readability.com/bookmarklets

http://readable.tastefulwords.com/ is nice too, but doesn't properly wrap <pre> lines.
So many media sites have a ton of javascript widgets: ad networks serving third-party ads serving third-party tracking scripts, recommendation tools, analytics, etc. It really increases the attack surface.

How do publishers know that the scripts that go on their pages are safe?
I think the fundamental difference is that designers are good at optimizing a problem, whereas founders need to be good at picking problems.
It glorifies extracting diminishing results from being an asshole. Winning small while risking to lose big.
A quote: "One of the reasons why I dread working with WordPress is the process involved to copy an existing site to another environment and have all the same content."

I hate to state the obvious, but that's a problem that HTML was designed to solve. The problem with HTML is that no one owns it and can't enrich themselves with it, but that's also its advantage.

I find it incredibly annoying when people voluntarily adopt a proprietary document protocol, then complain that it's not portable.
If it's confusing to parse, let me expand it: Neil Roseman strenuously objects to that assertion.
AWS abstracts IT infrastructure and as programmers , we have to love it for that. A server becomes an object that you can play with instead of a scary Linux baremetal box; you don't worry about configuring NGINX as a Loadbalancer or setting up IPTables. YOu don't worry about configuring SAS drives and H/W RAID cards -- which is hairy scary stuff. With Cloud, you can be up and running with an IT insfrastructure with having a specialized/dedicated admin.
edit- typos
> I think regulation of pharmaceutical industry falls primarily under the purview of the FDA, not the DEA.

Different aspects of the operation of the pharmaceutical industry are regulated by the FDA (under the Food and Drug Act) and the DEA (under the Controlled Substances Act).

(Very loosely, the FDA regulates the manufacture/labeling of all drugs, the DEA regulates the distribution of controlled drugs.)
Drop me an email : tsl.hacker@gmail.com I might help you
I find it safe to say that if someone classes themselves as a designer, they design. Writing mark-up is not design.

Writing markup absolutely is part of design, just as putting pencil to paper can also form part of a designer's job. I say this as a designer who uses both. It is of course not the most important part of design, but I'd argue it's essential to understand your medium, and on the web HTML and pixels is the medium, just as paper and the four colour process was for a previous generation of designers.

If you work in places where roles are specialised, you won't see anyone crossing the boundaries because they've all been kept in their box by the organisation they work for. That doesn't mean that people don't cross the boundaries elsewhere.

If you'd worked in several startups I'm quite sure you'd find designers who were also proficient in development, and certainly designers who like to produce HTML so that they can control the final styling and tweak it as necessary when it is in production, without having to go through a gatekeeper to do so. I'm not sure why you're so insistent that web designers cannot use HTML? Many designers use HTML to produce their mockups, and also to produce final designs, and some even do some programming too. There are many parallels between designing in code and designing in graphics - both are problem solving at heart.

The site you are writing this on was created by the author of Hackers and Painters after all :)
Silicon Valley Bank (www.svb.com) might well do
Some people who can do a wider range of tasks are useful, and at some companies necessary, but division of labour was set up for a reason.
yes you can pull from another node. you can also push to another node.
What I took away from chasing post was a distast for articles like the linked that describe sociopathy more often in terms considered positive. Traits such as charming, compared to the negative traits such as anti-social, harder to form personal relationships, harder time learning from experience or the other negative traits often found attached to sociopathy in a dictionary.

I find this distast understandable because it leads to two or more populations that have desperate definitions of sociopathy and the resultant definition based arguments and disagreements.
https://blueseed.co/
I think the people who get #1 for "buy viagra" and the like would disagree. But yes, the snake oil stuff works only temporarily.
Eg, I can start putting <haiku> tags in my HTML if I want. The issue is whether anyone else will expect this tag or code and do anything meaningful with it.

You mean like this? https://dvcs.w3.org/hg/webcomponents/raw-file/tip/spec/custo...
Probably for all the "sugar" around git: code reviews and all the other collaborative tools they provide.
Please consider whether your "woo radar" is maybe not something to take entirely seriously when evaluating stuff. Sometimes it's just an emotional reaction. It's something to be mindful of...
1) Developer Familiarity
2) They have one of the first (and best) pull request workflows and people again are familiar with it.
3) They are a big name that you can be sure wont be going anywhere anytime soon
4) For a business spending a little extra to not have the headache of managing it yourself is worth it

That all being said I use CodeBaseHQ for my company's repos as they have a better model of projects with repos in them than just repos.
Very good point there! Sadly we (as usual) have found our own way of doing things :-/
> I've had independent jobs as a designer (including one that was not related to software at all) and as a developer. Though I do bill myself as a designer and developer because I enjoy both and prefer to have a job that is the mix of both.

This is the way I've always found it to be in reality. I too have worked in both areas, and although I am good with Photoshop I've worked with too many good designers to ever want to classify myself as one of them.

> I think that's fair for a number of reasons, but why not hire two people who are great at both aspects? Then they can collaborate on both sides of the project, which is surely better than having someone who can only design and someone who can only develop.

Because I'd want someone who is both a great coder, and someone that knows design inside and out. I'm yet to see a single person that can boast impressive (senior-level) skills in both fields.

Sure, there are plenty of developers that can design a good site, but the best designers do FAR more than this. Their skills lie in the process, rather than the ability to design. In similar vein, a great developer is far more than a code monkey. They have considered opinions on the functionality of a site, they are at home with JavaScript, understand cross-browser constraints, and are expected to work alongside designers to help with the process.
You need insight into how these kind of sites are run to understand how attacks typically work on them.

Backend: lots of technology feeding them content and sending their content out other places. App servers, content sinks, message buses, databases, FTP'd stories, etc etc. Nobody ever attacks these because you have to have some kind of basic reconnaissance on what they do and how they do it. And they're not very secure because of the low visibility. But if you do know how most news sites get their content, there's some fun holes to play with.

Frontend: SQL injection, misconfigured services, bad firewalls, shared or easily-guessed accounts. You don't need anything fancy most of the time. There is no Security Czar making sure everything is secure on the frontend. There's supposed to be, but their lack of authority or motivation prevents them from really trying to secure everything in a big-picture way.

Development: The site is constantly being developed, and not always by the same staff. Sometimes a new guy who writes really shitty code will push something to production which is clearly hazardous to security. It gets through code review and policies and procedures because everyone's busy trying to get real work done. Often these holes go unnoticed for years.

Third-party content: There is nothing ensuring content you're getting from a 3rd party is what you expect it to be. If it's not being served by your servers, it's subject to attack. Often sites get taken down not because of attack, but because an ad network is timing out, causing the page to stop being loaded, effectively DoSing the page. SLAs mitigate this to a small extent by encouraging the 3rd party not to lose money to their customers by being hacked.

Phishing: This will work 90% of the time. Professional pen-testers have agreements not to phish or social engineer their targets more than a certain amount, because it almost always works; there's not much need to test it. But keep in mind that if this were Syrians, their lack of mastery of English could present a problem. Maybe it'd only work 60% of the time in this case.

"I just feel like these sites should be getting scanned daily": Nope. The vast majority of sites don't get constantly hammered by attackers looking for a way in, because 99% of the attacks seen on large-traffic sites are trivial automated things like botnets, which try one or two common holes across millions of sites. Even the most basic security measures prevent these.

Real, targeted attacks are rare, and often get lost in the noise of constant botnet barrage. There just aren't a whole lot of SEA's out there trying to take over every single website. Usually when they do try, they succeed, in some fashion or another; if they were to do this to every popular website on the internet, it would take them months or years to get around to it all. And they probably have day jobs.

The very last attack that works is a 0-day. It's called a 0-day because (typically) it is patched a day or two after it's announced, and they are rare. If you have one, you don't use it just to attack one news site.
We don't know anything about the attack, but in general:

1. All of this requires that you have more bandwidth than the attacker.

2. ACL drop everything but the ports/protocols you use on your frontend IP. For github.com that would be TCP 80 and 443. (ACLs are cheap, can be done at wire-rate on any capable edge router, so they're a good "first step." In this case it would have the bonus of dropping DNS amplification attacks which are increasingly common.)

3. If it's a TCP SYN flood (probably from spoofed IPs) enable SYN cookies. (Of course now the bottleneck is their load balancer.)

4. If it's an L7 attack, they'll need to identify patterns in the requests to identify and drop the traffic. For example, the attacker may be requesting a single URL only. If it's an L7 attack on a TCP service, they can also automatically add a drop rule for that source address, because at this point the client IP will have been validated (via the SYN challenge).

They may also be able to identify certain patterns in the traffic that can be ACL'd at the edge. For example, IP TTL being identical.
You can give yourself to others and contribute to the world at large without physically being around other people.
Interesting, that would be a different type of capture - partial capture, you could call it - and both potentially more insidious and far more difficult to prove. One: to the public the DEA still appears to be doing its job (and in a sense, it is), whereas the SEC often appears totally ineffectual in the face of massive and obvious fraud. Two: it would be far more difficult to trace any murky connections between the financiers of drug operations (who are presumably carefully laundering their money) and DEA officials, whereas the SEC regularly openly hires wall street execs and lawyers and vice versa, so the potential for conflicts of interest is obvious.

I wouldn't be too surprised if this was happening at some level in the DEA, but is there any information pointing to it or is it pure conjecture?
It's not about git, it's about the addons. The inline code review is amazing. Issue tracker is decent, and with things like huboard easily sufficient for project management. Email notifications are useful, the ability to work from anywhere as long as you have your ssh key invaluable.

The downtimes are... regrettble. But our company moved to github a while ago, and everyone is mostly happy.
Ask HN: What reddit community intersects HN?
I appreciate HN and have been a part of the community here for several years. However, I'm uncertain about the policies currently being employed and I'd like to use another, similar, community news site as a comparison point to see an alternate view of headlines, etc.

Is there a subreddit, or other community I'm unaware of, that is most closely aligned with Hacker News?
Just a PSA Git is distributed, fire up a quick instance with git daemon.

git daemon --verbose --export-all --base-path=.git --reuseaddr --strict-paths .git/
Presumably you are referring to the former Sun Microsystems. The amusing thing to me about this story is that it's such a convoluted name that their own potential customers apparently can't remember it. And so, attempting to locate the computer company, they type the closest approximation they can manage, 'Sun Computer', into Google, which likely didn't rank as highly as yours precisely because that verbatim phrase, being technically incorrect, is unlikely to appear directly on their own web site or in anyone else's links to their web site.

Names matter.
Even without Doug Lea's extensions (though they did help making it more efficient and/or easier to understand), it's been possible to do this safely in Java from v1.0 -- just synchronize and notify() or notifyAll() as needed.

I think the chief problem is that the developer hadn't learned the basics of multithreaded programming yet, and didn't realize s/he needed to know them.

That's an extremely harsh way to learn a little lesson, regardless.
According to the description in the article, it's essentially a prerequisite.
> Sure, lets. It would be a waste of time to just spin definitions in a way that makes us inherently right about whatever it is we're talking about without reference to a common agreed set of terms.

Cool, this is not going to be productive, I will respectfully bow out. Thanks!
I found a few of their examples had errors in them. Plus a general dislike towards the Samwer brothers. (I know that this shouldn't affect business)
man git daemon