skysight-inc/HackerNews huggingface dataset:
This is a major pet peeve of mine with new web services. A lot of them are trying so hard to optimize the sign up that you can't even figure out what the service is and how it works without giving up your contact info.

So instead of giving the user a chance to be sold on what you're selling, you've just turned them away before they can even learn what your pitch is. You've killed an opportunity for word of mouth as well.

Maybe the idea is to select for users who are so eager to learn about your service that they'll give you their email first. Maybe that kind of customer is worth a lot more money.

But I think many people have marketing fatigue at this point, and are only going to sign up for things they know they're interested in. I mean, I wouldn't give my contact info to a store that doesn't even let me into the door until I fork over some info.
Its more like

ls /bin/ls

you can simply cat cat or ls ls by cd-ing to /bin first... with the caveat that some distros have moved them to /usr/bin or somewhere, hence the 'which'
Oh, this is rich.

I bet everything I own, most of these idiots taking Linus to the fire use proprietary software and have mocked RMS for years.

"But you can't trust code because Ken Thompson says so!" Really, dipshit? You don't think every compiler writer and OS developer knows about Thompson's essay by now? Did everyone seriously just discover this ancient essay?

Amazingly, the peanut gallery--on a dime--has gone from trusting proprietary software to scrutinizing open source code.
All bullying is based on traits that set you apart. People don't bully "one of the crowd". They bully the outliers, the different ones, the ones who are female, or fat, or thin, or clever, or stupid, or black, or white, or old, or young, or even the kid that wears last season's "cool clothes".

It's not about gender. It's about ostracism. You don't have to be female to be ostracised. You just have to have something, anything, that sets you apart from the crowd.

This is the societal control mechanism we have culturally evolved to ensure conformity and "strength" in groups. It is really, really, really fucking dangerous, and leads to fun shit like Nazism. It's also really powerful, and is the basis of nation states.

Ergo, the problem needs treating at its cause, which is a cultural illness, and is far from simple to treat. You cannot simply resolve one emergent aspect of it and then expect to treat each aspect the same way. You do not cut down a tree by plucking at its leaves.
Or make sure that they have full-disk encryption and are cold shutdown when you cross the border.

While jurisprudence is still a bit fuzzy on this (it has flipped back and forth on a few appeals in a few separate cases, and never been conclusively decided by the Supreme Court), there have been ruling upholding the fact that you can't be forced to hand over your password due to the fifth amendment, unless the Government can already show that they know via other means that you have incriminating files on there.[1]

On the border, you would probably be safe from mandatory disclosure of your password without the border patrol getting a court order, and of course the whole point of this complaint is that the government is using border crossing as an end-run around the courts, being able to do searches that a court wouldn't otherwise approve.

So, using full-disk encryption that you trust, on all electronic devices that you carry, and making sure that they are cold shutdown, is probably sufficient. You should of course have a backup as well, as the border patrol may impound your devices while they try to decrypt them.

All in all, how much effort we have to do to defend ourselves from our own government is getting ridiculous. I don't know how to convince the American public of this, but we are not only violating the privacy of tons of people, but killing people who choose to drive rather than fly[2] due to the excess hassle that our "security" systems provide.

1: https://en.wikipedia.org/wiki/Key_disclosure_law#United_Stat...
2: https://www.schneier.com/blog/archives/2013/09/excess_automo...
> with each day lasting a maximum of about 7 hours, including about a 40 minute lunch period.

HAHAHA

My girlfriend is a second year high school teacher. You are technically right that she is required to be on campus for the required 7 or 8 hours. But, there is nowhere near enough time to grade, plan, prepare, work individually with kids (makeup work mostly), etc, in that time. She puts in 12+ hour days. Everyday. Including weekends.

And over the summer, you are right that it is mostly free, except for several weeks you give up to do professional development, AP course training, and any schoolwork to move up the salary schedule a bit.

Her salary schedules are here [1]. With a masters degree, she would top out at $58k/year after 20 years on the job (assuming the masters track). Starting salaries are in the $35k range.

Meanwhile, I am a computer programmer, working a legit 8 hour a day job, making much more than she is now.

What annoys me more than just teacher pay though is the other spending in the school. She was pulled in to teach english this year. When the english department met to work out the plan, they had to blow their whole budget for the year on a single class-set of a paperback. (30ish copies). That's it. No more books, no miscellaneous DVDs / Documentaries purchased. That's it. Well, except for when she just goes and pays for it. Which she did last year to the tune of $350ish.

[1] http://thompsonschools.org/cms/lib07/CO01900772/Centricity/D...
Nice. Yeah, I've used straight Fluent (Visual Studio + framework) before. The ScriptCS stuff looks very cool.
alas it does not show file count per subdirectory
This was the best thing I learned today
Quote: "99% of sites/apps/services we visit now make you register and go through an on-boarding process before getting to the meat of the product."

That's because signing up is the product. The touted "product" is a fiction, a pander to get you to sign up. Another way to say this is you are the product, the advertised "product" is just bait to lure you in.

If you haven't signed up and the company e-mails you, they're in violation of the Can-Spam Act. Once you've signed up, you become a customer, a category excluded from the sanctions of the Can-Spam Act. So getting you to sign up is not just the most important thing, it is the only thing.

I wish people who wrote articles like the linked one actually knew something -- that might make their articles worth reading.
Apple launches iTunes radio
Apple releases two iPhone models, iPhone 5C and iPhone
http://live.cnet.com/Event/CNETs_Apple_Sept_10_event_live_blog
NSA: Steve Jobs is the real Big Brother and iPhone users are zombies
Actually, it is easy to blame them. If a bar had the reputation of crawling with sexist assholes and awkward lonely guys, how would the organization fair? The owner can't say 'Oh well, that's how our customers are' if they want to expand into different demographics. Bouncers and staff are put into place to quell that type of behavior.

In IT, can teachers help quell the behavior? Yes, but we can't be the sole guardians when the rest of the internet is still behaving that way.

How do you change that? I don't know, I just do the best I can.
Yeah, you have a cert set up and put the public cert in the identities file for each server you want to connect to. Then just SSH into each box with agent forwarding ('-a' I think, but you're best to check that).

So you'll need to create an SSH cert first:

ssh-keygen -b 4096 -t rsa -C "$USER created on $(hostname)" -f $USER.key

Keep the private key, that's essential you keep this safe as it's literally your key to access any servers you do the next step for.

On each server SSH, append your public key to the of /home/$USER/.ssh/authorized_keys (creating the file if it doesn't exist). It must be the public key!

There'll be better guides online for this stuff so I suggest you have a read through them before blindly pasting the stuff I've posted into your terminal. But it's all quite simple stuff once you've grasped the difference between a public and private key (if you weren't already aware - you may well be)
The deductible might be an issue for some people. If you don't have a spare $5,000 then you might choose to pay more per month to decrease the risk you have to pay that amount all at once.

Also, make sure to factor in the cost of any prescription drugs you're on.
Apple announces the iPhone 5C
Apple iPhone 5C is official, a plastic and colorful iPhone for $99
Hmm, the day is already highlighted for me (inverted color).
I leave mine behind whenever I travel outside the US, not so much because I am afraid to be on a list (although after reading this article, that fear has risen somewhat) but because I employ encryption on my laptop. If they do search my device for anything illegal, they will inevitably ask for my password, which I don't want to give for philosophical reasons. Then it's pretty much guaranteed that I'll be detained and/or my laptop will be taken.

You are right that, as a US citizen, this is a very strange revelation to have when packing for an overseas trip. Personally, this very real possibility opened my eyes on just how far we've fallen.
Why Having a Mobile Friendly Store Is No Longer Good Enough
OP can use orange, it's just the juxtaposed orange and black that the problem. After all orange is one of the primary brand colors for ING, but that's probably because they're originally a Dutch brand and orange is a Dutch color.[-3] Rabobank also has orange as one of their primary colors, presumably for the same reason.[-2]

HSBC has a primary brand color of red, but note they separate all their red from the black on their page with a decent amount of whitespace.[-1] Santander do the same.[0]

[-3] http://en.wikipedia.org/wiki/House_of_Orange

[-2] http://www.rabobank.nl/particulieren/

[-1] http://www.hsbc.co.uk/1/2/

[0] http://www.santander.co.uk/
Predicting Kiva loan defaults
> This is a major pet peeve of mine with new web services. A lot of them are trying so hard to optimize the sign up that you can't even figure out what the service is and how it works without giving up your contact info.

That's because of a truth about the modern Internet, which sounds like an old truism about card-playing: if you can't figure out what the product is, you're the product.
The NSA's next move: silencing university professors?
Ok, I am building a new site. Which, if any, of these approaches are viable for me to implement today in an easy and reliable way?
Server A has events Server B wants to know about. With REST Hooks, Server A provides an API that Server B use to tell Server A "Please POST notifications about those events to this URL". Then Server B keeps a web server listening for requests to that url. There is no persistent connection.

As for timeouts, check out http://resthooks.org/docs/retries/ for ideas on how those problems can be solved.
I think most people know about this, but it's also good to know about scp. You can easily copy files using a ssh connection.
Do any of the new iPhones have less NSA integration?
The docs talk about "event types" like contact.update which do not exist in HTTP and require knowing the semantics of a particular group of resources. To truly be RESTful, I would want "please notify me of any PUT, PATCH, or DELETE to this list of URLs, or POST creating a URL that matches this pattern." And if you're going to include a copy of the resource (I don't know what else a payload would be) you need the media type the subscriber expects as if you were doing content negotiation for a GET request from them. Or maybe the payload could just be the current result of a HEAD request so the subscriber can invalidate their caches, and they can send the appropriate GET request(s) when and if they care to.

There should be some standard link relation like <link rel="subscription"> so clients have some hint that this is available and where to request it.

I'd also want some way to manage the freshness/load tradeoff, like "please notify me within one hour but no more than every five minutes".
Security Case Studies - What we learned from the 2009 phpbb.com compromise
Thanks for your comment. I'm the backend engineer at Wingify who wrote this post. This post talks mostly about data acquisition, I'll suggest my team to post more technical details of our dynamic CDN which serves the dynamic content.
It seems like you changed/pivoted your business model ? Have seen quite a few posts from matchist earlier about matching freelancers and clients. You don't do that anymore ?
IPhone 5C Preview
I was young & healthy.

Then a doc wanted to put a pacemaker in me the next day. He was wondering why I was still alive.

The infected gall bladder and aortic flutter came with no warning too.
Not sure if you want the question answered, or your own conclusions confirmed.

There's no one answer to this, so the usual "it depends". What is your current development workflow? What is the application? the framework? etc

In general, if you can break the project up small enough pieces, off shoring can be successful. There's no reason why the quality has to be lower; these discussions tend to bring out people's prejudices. However, I think this requires an active technical project manager to deal with the process, and you'll likely do a good amount of work locally.

What doesn't work is the idea that you can feed a project description to an off-shore company and expect the same end product only cheaper (without significant headache in the middle, and even then it may not matter). This seems to be the typical model.
No. The biggest issue is the language barrier. Subtle language nuances that you never considered become very apparent. Compounded by the time difference that is typical, expect to be waking early, staying late, and/or waiting until the next day to get something done. I'd rather have one good programmer next to me than a team of five offshore.
The two HN discussions I found that seemed to have useful info on cohort analysis:

https://news.ycombinator.com/item?id=5245571 (Cohort analysis - User retention in a Rails application, 203 days ago)

https://news.ycombinator.com/item?id=4122000 (How we reduced our cancellation rate by 87.5%, 450 days ago)

The second link references the following class: http://www.skillshare.com/classes/business/Data-to-Dollars-U... ($35; 90 minutes in NY)
The Trust Cost of Cold Calling
Yes! With a dynamic (traditional) perspective, you must obviously render every time the camera moves. Since the camera never changes angle, I can render once and be done with it until something is changed or the memory pool cycles back to the start (i.e. a chunk falls out of rendering distance).

In terms of code quality, it is actually far more difficult (IMO) to do isometric projection with a 0.5 slope (not true isometric with 120 degrees between axes). You can build a projection matrix to handle it but I actually just worked out the math by hand to handle the projections and inverse projections. So, for a while this really put a dent in how clean my code was until I refactored everything several times.
By this sentiment would it be acceptable for phdtree to go to every article on hn that mentions golang and post an identical comment with a link to their project? If I have a project written in js should I post a link in articles mentioning js with, "Hey, my project is also using js: www.myproject.com!"?
The backdoor can be anywhere between the two computers (most likely at the extremities though).

I agree with you in the sense that software should be made as secure as possible, my comment is just a remainder that one should be realistic about what level of security he can get.

If you didn't audit the hardware your software is running on and your local isn't physically secure spending so much time on software auditing isn't very useful.

You'd even have to thoroughly double check that the software you have it the one you expect, audit your compiler, audit your os and recompile everything you have.

You know better than me that there is no such thing as absolute security, so you're secure relative to a menace. If you try to secure yourself against a 1st world intelligence agency, I say... "Good luck". ;)
'3-Sweep' Technique Transforms 2D Pictures Into 3D Objects
You have missed the entire point of the article. Arbitrarily quantifying essentially qualitative measures is misleading (bordering on dishonest) and potentially harmful, when these made-up numbers are then used to influence major decisions.

E.g. these bogus college rankings are used to set immigration and other government policy in many countries:
http://www.theguardian.com/higher-education-network/blog/201...

The more operations you perform on these made-up numbers, like the "combination" you mention, the more authentic they might seem. But the result of averaging a bunch of made-up numbers is just as meaningless, if not more so.
It's very comforting to see how the MOOC space is growing and garnering a lot of attention. I've always been one
to prefer to learn on my own and do research so it's great to see a lot of these tools popping up. I wish I had
these in college!
Would this only apply to files that are physically on the hard drive or would this also mean they may have access to connected cloud storage accounts like Dropbox or iCloud?
This is a new product offering we're testing. Our original business model of helping freelance developers and dev shops find great clients is still here going full steam.
I don't think there was any intent to say he must be a douche. I suggest you read carefully what was written. He just says that the author is hawking 'make games with gamemaker' but in reality, the author may have gotten some money, but the real moneymaker is in writing libraries and using your platform as a way to sell other games. The way it was written was certainly not passing judgement on anyone.
I recently discovered ncdu (http://dev.yorhel.nl/ncdu/scr) as an alternative to du. Quite handy.
Docker + Joyent + OpenVPN = Bliss
Great - if you're just up front about that I would read this.

Then again if I'm not the audience, well, I guess you know what you're doing.
Ransomware use, another angle.
"I don't remember my password."
iPhone 5C - Multiple Colors
Yup, I think that's what we're doing.

I find it strange, though, that the insurance companies are allowing us to renew early and lock in a rate for another year if they're so sure rates would otherwise skyrocket in January.
It is (SimplyInsured is an insurance broker) but the objective information is short, accurate, and to the point. Discussion of the changes in health insurance markets from the ACA has been sidelined by the crisis in Syria, so some timely information is good to have even if it's from a commercial source.
Continuity and Infinitesimals
Apple announces a new kind of iPhone, the multicolor iPhone 5C
Maybe Coke IBM and Citibank are the wrong brands, but why not a brand that tries to eek sex, like Axe, or most beer companies?

Am i crazy for thinking that being loosely associated with sex/porn would be great for many businesses?
Reminds me of all those legacy bugs in IE6 that achieved the same result, or RSnake's crash that involved an insane HTML width attribute.

But hey, it took until IE9 to pass Acid3. Who knows what's in Trident?
Under the hood, is this API event-based, thread-based, or both?
College rankings are foolish.

That said, at least ranking organizations give a real opinion. If your job is to assess human rights violations, you should numerically assess them. Qualitative rankings are a weak form of analysis.

Someone has to pick the country, why not the NGO tasked with doing so?
I think it would be a justified move (in an evil kind of way). Most of the interesting exploits these days need to leverage more than one vulnerability. This kind of thing would give you a marked advantage in penetrating systems, and do so in a non-obvious way without exposing the targets to other attackers. The advantage would be something like 10x, or whatever the difficulty factor is that ASLR adds to the average exploit. It would also be a good match for probabilistic/big picture kind of approach that a big organization can afford to take.

But will owning RdRand give you good enough control over ASLR, that's another question.
> definitely amongst the group of developers who are the most averse to putting their shit on github and open sourcing their libraries etc

Yep. I'm sure the majority of them are also GPL violators.

They love to take but never give back.
In this invocation find and wc both have two fixed arguments, you're never going to hit MAX_ARG_PAGES. The output from find is passed to wc over a pipe, and to my knowledge there's no upper limit on how much data you can transfer over a pipe. I've piped huge disk images.
Apple Introduces The New iPhone 5C At $99 for 16GB, $199 for 32GB
Beyond Nash Equilibrium: Solution Concepts for the 21st Century
That is when they detain/harass him and steal his computer anyway.
Some of the language is so APple marketing heavy it makes me ill. :)

"Beautifully unapologetically plastic" -- What does this even mean.

"The new cases are soft and cool" -- Why is this a talking point? Oh - because Apple now wants into the multi-billion dollar phone case market, it would seem. And, they will make plastic cases in china for $.02 and sell them to me for $19.99
Why is this a thing? Your API interfaces with a message queue; your end client uses all the libraries and patterns built up over the years to consume from the queue. That doesn't sound all startup-y like "REST Hooks", but the pattern has been around for a long time.
So true; imgur should be mentioned as a service that offers great value without asking you to sign up.

I started urgeous.com with the same idea: blogging without signup. It got zero traction and was/is maybe too complex to use as it is but I still believe in the idea! ;-)
I personally agree with the sentiment and I've never regretted having too much insurance.

But in this case wouldn't that scenario likely hit the same out-of-pocket limit that's on the bronze, silver, or gold plans? Or do I not understand how that works?
I share the author's aversion to reducing complex information to rankings. At the same time, at first reflection it seems that countries would have less incentives than universities to "juke their stats" (to use the expression in the article). Of course, economic indicators, crime statistics and the like are liable to be fudged for political purposes, but my impression is that countries don't compete with each other on rankings the way universities do.
I hate the fact that I am being forced to do business with companies I don't trust (insurance companies) or face being penalized with fines.
I think you are confused — at no time are any files passed as arguments in the command "find . | wc -l".

Also, to count the number of files in a directory, you need to do readdir(), which will get you the names. Then, to see if any of them are directories to be recursed into you need to stat() the names individually. This is all "find" does. How, I'd very much like to know, is this "a nasty hack"?
We can flag articles that we believe don't belong on the site.
>> it's a public nuisance to post such examples -- I mean a working example, as opposed to an inert code listing.

> I am sorry, but I found the code behind it interesting so posted it.

You should have posted a listing, not a working copy. That would have been the civilized, non-destructive thing to do.

> If you were smart enough, you could have accessed the html behind the page easily.

I did. But if you were smart enough, you would have done that and avoided performing an unscheduled test of the less technically skilled visitors' browsers ability to handle broken code.

> My point being, browsers should be able to recover from such code.

Why not set your car on fire? A modern car should be able to tolerate the flames, right? Where's your sense of adventure?

You just aren't thinking. This is a public forum visited by people representing all levels of skill.