skysight-inc/HackerNews huggingface dataset:
> Things that don't sell are pushed out for things that do, giving people exactly what they want

Well, no. I can't find rabbit (meat, not pet) for love nor money. Because it "doesn't sell". Time was, the butcher would always have rabbits and if people didn't buy it they would go to his dogs.

> there is no inefficiency when it comes to staffing, either.

inefficiency, otherwise known as plenty of jobs.

I'm seriously not convinced that the ideal society is the one that is most efficient.

Wonderful things live in the obscure, inefficient corners of things.
Stop asking your clients for retainers
Some people own shoes, they don't actually wear them...
See also https://github.com/mozilla/rust/issues/3591, where re2 is graydon's expressed preference. (graydon was the project leader at that point; more recently brson has taken up that mantle.)
Lazarus 1.1.99 pre release available for testing
> If I recall, Rails got the bad rap early on because Twitter thought it was the cause.

IIRC, it got a bad rap because of one blog post by a Twitter dev that seemed to suggest that Ruby and/or Rails was the cause, which was later followed by a more in depth explanation from Twitter of their reasoning, which didn't place the blame there, but by that time Ruby/Rails haters had permanently latched on to the "Rails was killing Twitter and that had to leave to survive" meme and facts were no longer relevant.
And it was fixable with a regular expression. :)
For the record, I have some issues with this intersection of idealism vs. reality (cash flow is hard to ignore if you don't have it) but there's an interesting conversation happening in the comments.
I've got a (limited) number of promo codes. If anyone wants to try it out, drop me a line, first come, first served. Email in profile.
Elements of Statistical Learning: data mining, inference, and prediction.
I disagree. They're the new X With Friends. Everyone is playing a *Saga game.
Just like everyone WAS playing an X With Friends game.

In a year, Candy Crush will be old and lame and replacements like Pet Saga will never achieve the same success just like Zynga's newer X With Friends titles failed to achieve the same success as the original.

I will be shocked if they can survive post Candy Crush, to be honest. Almost $1M/day is hot stuff, but hopefully they realize how fickle people are with apps.
A couple points:

* !RC4 - RC4 is in doubt[1]. The only reason to keep it around was to mitigate the BEAST attack, which is now mitigated[2] client side, so RC4 should be dropped.

* gzip off; - Explicitly disable gzip compression to avoid BREACH[3]

* Ensure TLS deflate is off to mitigate CRIME[4] (this is the default in most, but not all combinations of nginx/OpenSSL).

* openssl ciphers -v is great for testing what ciphers match your settings.

* Comment your nginx config! You will not remember all of this when you next look at it (or someone else does). And some of it will certainly be outdated. Security is not a static game.

[1] http://www.theregister.co.uk/2013/09/06/nsa_cryptobreaking_b...
[2] https://community.qualys.com/blogs/securitylabs/2013/09/10/i...
[3] http://en.wikipedia.org/wiki/BREACH_%28security_exploit%29
[4] http://en.wikipedia.org/wiki/CRIME_%28security_exploit%29
SMCs are present in nearly all Intel systems...They could very well store your truecrypt keys too
While I agree that this doesn't seen like a great ipo candidate, how is 850k per day a "minor" success.
>> Interesting that I don't see these kind of complaints at this level about book clubs.

Don't be obtuse. There are TONS of complaints about The Book of the Month Club, Columbia House, et al. Ask ten people who signed up for Columbia House record club and nine of them will tell you what a horrible experience it was.

Even with the slightly scummy nature of "X of the Month Club" companies, JustFab stands out. The SFBC page you link to has two very prominent links to "HOW IT WORKS" which state (in overly salesy language) that you're signing up for a book club, not just buying a single book.

JustFab.com, on the other hand, has a section called "HOW IT WORKS" right on the home page. There is no mention of any subscription or club features in this section. JustFab also has two "HOW IT WORKS" links, but one link is below the fold and the other is much less prominent than the SFBC link.

But it gets worse! JustFab's "How JustFab Works" page does not mention anything about a subscription or club until the third section down, way below the fold on most monitors.

Here's the bottom line: "X of the month" subscription businesses are ethically questionable, but not illegal. JustFab heads down to the bottom of the barrel by concealing its true nature to a greater extent than other subscription companies.
Wow! I love this analogy! Allow me to disagree with you inside the premise of your own analogy. Visiting a museum is a much more useful way to understand past world history, but visiting your grandma's attic is a much more useful way to understand the little twists and quirks of your own family. In much the same way, I think a curated history is very nice for open source projects with lots of committers and constant newcomers, while a history that preserves foibles can be more useful for smaller and tighter teams. It is often very enlightening to see the missteps that were taken on the road to the eventual solution to a problem.
Well, we don't get 8 weeks of guaranteed paternity leave if that's what you mean. But Texas has some nice protections for employees. Non-compete agreements, for example, are almost unenforceable in Texas, which is nice.
Before Java gets all the credit, what are they using to store and publish all those tweets?
This isn't just about surreptitiously installing a compromised PCI card into a desktop PC. It affects every machine with a FireWire, Thunderbolt, or PCMCIA/ExpressCard port, i.e. most stolen corporate laptops.

https://en.wikipedia.org/wiki/DMA_attack
mp3's shoved together to form a book - that's probably why it works.
If you stream the data in from disk (e.g. read 1kB, encrypt 1kB, read 1kB, encrypt 1kB) then a cold boot attack only recovers one small chunk of data. Whereas if your keys are in RAM then a cold boot attack can recover the keys which can then be used to decrypt your entire hard drive.
So, so, so true. I've been looking for jobs in a city outside of the typical developer hotspots (Dallas) and it is absolutely insane for me to see every ad seeking something like a "programming virtuoso" (an actual quote) for fairly basic web dev. I got an email from a recruiter looking for a "top-level web developer" and then saying they would be recruiting at a nearby college job fair. (A tiny, rural college.)

Why does every business need to pretend that they are getting the best of the best? Obviously, I want to get there someday, but I'm still early in my career. I know I'm not top-level anything. It would be disingenuous and frankly delusional for me to claim such!
That works well for getting just your money back. If you're upset about the whole thing and want to shut it down or get their business practices changed, a class action lawsuit is the way to go.
Someone said something to this effect in one of those "Why I left Google" blog posts, and other Googlers were calling him/her out because they believe that even a CRUD app at Google is exceptional because it is a Google CRUD app (meaning they solve problems with CRUD apps that other companies don't have, I think).

I don't know if there's any credence to that.
I can delete songs from my iOS 7 phone by swiping. I'm not sure which settings factor into this - it's being synced with iTunes via USB, and it's logged into iCloud but I doubt that makes a difference.
If the problem was "How can I spread radiation throughout the environment?"
As does OSX. Probably Windows too? There has to be a registry setting to tweak, somewhere.
I'd say a major advantage of the JVM is the lack of a GIL. Ruby has one. JRuby is slowly eroding that advantage.

That being said, it's much easier to write performant code on the JVM with the right tools. Static types and the discouragement of metaprogramming (except in Groovy, and let me tell you all about how fun that is) help with that.

Groovy would be the JVM's Ruby equivalent (if JRuby didn't exist). It's cleaner, faster to write in, and very non-obvious what is and isn't performant.

I think an SOA Ruby architecture would have helped Twitter, but as a startup built on the JVM (and experience with Rails/Ruby) the JVM's performance is a key factor for us. Not to say that Ruby or Python can't be performant too, but there's a reason it's used. http://www.techempower.com/benchmarks/#section=data-r6&hw=i7...

While these benchmarks aren't conclusive, Rails is definitely built to be friendly and encourage developer productivity, not raw performance. Many JVM frameworks are built to be faster at the expense of more time developing. We use Dropwizard and get a lot more bang for our buck when it comes to servers.

I don't think most developers really consider the performance aspects of downstream services ... top-level services rarely see the brunt of load, that happens a few levels into your SOA graph.
Is a lot off-topic, but I will look at it :)
I don't think they leapt to conclusions. According to [1], they were running into problems with garbage collection issues in long-running Ruby processes. They put a lot of work into doing performance measurement, if Zipkin (https://blog.twitter.com/2012/distributed-systems-tracing-zi...) is any measure.
Which credit card company is that, in which country?
> The hardest part is that Reddit (admins and moderators, that is) is actively supportive of imgur and actively hostile towards alternatives.

While I won't argue that they're supportive of imgur, do you have any evidence of them being hostile towards your service?

I just went to your page, and I was in the midst of critiquing your design when it occurred to me that the elements I had the largest problem with....were actually ads[1]. Ads that were inserted in such a way that I had no idea they were ads... IMO this is a terrible thing. Not only does it make your landing page trashy, it can (as I'm evidence of) easily confuse even the most seasoned of users. There is zero contextual information to signal that it was an ad, and only after clicking one of the 'buttons' did it occur to me that it wasn't a part of your site. So I almost get the feeling of being deceived into clicking an ad, and that puts a very bad taste in my mouth. I don't think that was your intention, to trick people into clicking ads, but when that's what happens I'm going to blame the site for allowing it to happen. Do note that imgur doesn't have any ads on imgur.com.

Some of the other reasons why I prefer imgur over your site:

* shorter URL

* dark background

All else being equal (feature parity for my needs), those 2 things will keep me on imgur. I hate white backgrounds (superficial I know, but preferences are preferences), and shorter urls are simply better for practically every use.

While I applaud your drive, the site looks like a imgur-copycat making a money-grab (due to the prominent & intrusive ads) in a fresh market.

1. https://mediacru.sh/4y6bAzy9_bti
Attackers can slip malicious code into many Android apps via open Wi-Fi
The Ultimate Guide to Ecommerce Business Plans
The best thing I did with ciphers is stop just using everyone's "magic list" without understanding what they are and what they mean.

To start understanding the magic list of ciphers, enter the list into openssl like this and watch what it produces:

openssl ciphers -V 'RC4'
openssl ciphers -V 'EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW'

(etc. etc.)

take away some of the adds/exclusions in the list and watch what they add/remove. Plug in other people's lists and see what they do.

Then learn what ECDHE vs DHE means (and why DHE is slower)

Then learn about RSA vs DSA keys, EC ciphers etc.

Then play around with this tool that shows you what ciphers different browser support (try it with IE8 vs Firefox vs Chrome, etc) https://cc.dcsec.uni-hannover.de/

Then read about AES hardware acceleration in openssl on most modern processors (not all but many). http://zombe.es/post/4078724716/openssl-cipher-selection

and eventually, a few days later, you'll start to understand what is best :-)

It is always much more than a few lines in a configuration file if you really want to understand.
Concrete5 CMS
New Features for Usersnap Basecamp Integration
The Future of AngularJS
Should you bold the text? YES.

This is a very important action. You want to make it very clear to the user they are not just purchasing a pair of boots, but also subscribing to a service, since you are presenting yourself as a normal retailer!

Less scummy thing to do - include the subscription as a line item in the checkout. HOW HARD IS THAT?!!!??? Oh wait, that would make it clear what the user is actually purchasing. We can't have that.
Sure you can.

http://bannedfromhn.neocities.org/
Beyond the NASCAR
There's been a lot of recent flux in what the consensus on "best config for security" even is in the past six months. We went through a phase where RC4 was the recommended cipher, now we're mostly coming around to it being a bad idea, for instance, and that's still a thing in progress rather than totally done.
I wasn't interrupting their lives. If someone was alone on the bus not doing anything, or alone in the Tim Horton's line not doing anything, I'd say "hello". If they responded we'd start talking. If they were clearly not interested in talking to me then we wouldn't talk.

Most people truly enjoy talking to people. Most people have anxiety about meeting new people and remembering names and talking to people on the phone. But once they've gotten past the "hello" most people absolutely love to talk. I generally ask questions more than talk myself because I already know how I think and would like to hear other's perspectives.

And how could someone who has lived for decades not have something interesting to say?

It's not only about interesting information though, it's about developing social skills and the ability to interact with others in situations that aren't pre set up. It's about meeting new people. It's about understanding that every person is interesting. It's about realizing no one in the damn Tim Horton's line is doing anything better than making a new friend or having a conversation with someone they've never met whose views might open up a new way of thinking for them. It's about meeting people from other cultures and countries with different customs and life styles. It's about meeting the girl that could be the love of your life one day. In the end it's about living and interacting with the single most interesting thing around you at any given point. Other people. Far more multi-dimensional than any piece of artwork or app on a phone could ever be are the people around you.

You seem to think I was a huge bother to these people but one girl's first kiss ever was me because I said "hello" to her in the Tim Horton's line. She truly enjoyed the experience and while we didn't go much further than that that's a memory neither of us will ever forget. Would it have been better for me to be doing a fantasy draft with the espn app on my phone? Not a chance.

Were there times people didn't want to talk to me? Totally. But the majority of people are very friendly and open to talking to people if you say "hello". You can't be a creep with some pick up line. You have to genuinely be interested in learning more about the person. Then you tend to learn a lot and make new connections.

And again it wasn't something I did every bus ride. But it's nice to have the option every now and again to get a little jittery and say "hello" to someone you don't know. No one has no social anxiety, or at least I don't have zero social anxiety.

Hey as long as you're happy tekalon keep doing what you're doing. But if you're a little lonely, try saying hello to someone on the bus one day ;-).

And always remember, every single person in your life right now was a stranger at one point.
EuLisp is not ISLisp.
To me it seems implied? "It is free for 30 days but then it is not free anymore."

I don't know, maybe I read too much into it - but when I signed up, I was aware that I was both getting 30 days free, and that I would pay for it after. And I don't recall that I had to read any fine print to glean that understanding.
Top 7 Social Share Buttons You Just Got To Love
If you want to actually be able to save decent money in the US, you should aim for the second-tier (e.g. Boston, Seattle) or emerging (e.g. Austin, Pittsburgh, Baltimore, Portland, Durham) tech hubs where salaries are 80-90% of NYC/SV but cost of living is a lot lower.

NY and SV are good places to build your career, but most people who are intent on being lifelong programmers (as opposed to being managers or founders by 40) get out after a decade or so. The cost of living is annoying but bearable; the culture it creates, however, sucks because everyone is competing to be a manager or founder before being judged "too old". The cultural effects of high rent (much less purchase prices at 30-50 years) are even more of a travesty than those high rents are standing alone.
Why has it been posted with words in alphabetical order?
Google is 15
I don't think it's at all obvious or universally true that it's better to get an 'Unable to connect' error message than a certificate warning (btw, the default site could tell the user they arrived there by accident should they continue past the warning). Depends on the context.

I'd still say it's definitely not true that you "have to" get an SSL cert for all virtual-hosted domains on one IP address if that IP address is responding to SSL requests on 443.
UHaul_cares: A Sample of Brilliant Customer Service
From Anonymous to Bitcoin, The Good Wife Is the Most Tech-Savvy Show on TV
I hate to ask but how does this even work (sorry I don't get it)? I send to a detailed story and you make a mock scene of it and send me the picture?
I chuckled at the link to ifttt about page

https://ifttt.com/wtf
Balancing personal and professional goals at startups
There is a bureaucracy involved. To name a feature, you need approval from International Astronomical Union Working Gruop for Planetary System Nomenclature. No, I am not kidding.

http://planetarynames.wr.usgs.gov/
Arthur Dent: Are you telling me you originally made the Earth?

Slartibartfast: Oh, yes. Did you ever go to a place - I think it was called Norway?

Arthur Dent: No. No, I didn't.

Slartibartfast: Pity. That was one of mine. Won an award, you know. Lovely crinkly edges.
As someone working close with tech writers, I suggest (project) that the thing that precipitated this article is the realization that the JVM can run multiple languages. That's the kind of thing that is just science-fiction-y and just break-the-rules-y enough that it blows tech writers' minds and to some extent their audience.

It speaks to the part of them (us) that wants to believe things like, "I knew that big company Sun couldn't do everything perfect, because they're BIG and they're a CORPORATION. I knew there was a deeper way to use technology, and isn't it just inspiring/trippy/deep that a VIRTUAL machine can so something it's totally unintended for?!?!?! lolomgcyber those hackers are breaking the rules established by The Man so we can have our super-slick free text messaging capabilities #mind #blown"

:)
They have ~$1.1B in cash, so their true market cap is closer to $1.8B.
Invested in "Huddle" and "Huddler"?

That's weird. Is the idea to be sure if the brand works, one of these will be successful? Or just like the word "huddle"?
There is no water per say. It's just that the soil chemical composition is so that if you heat it a "few hundred degrees" a chemical reaction will produce water.
Made out of the finest hatter's tinfoil!
Whenever I get into an argument with someone about the merits of self-driving cars, I point out that we're pretty much there already with flying.
Headhunters who ask for references out of the gate are going to be shotgunning your resume across their hiring portfolio. Generally speaking, references and a background check are the last thing a company asks for before hiring.

It also sounds like you are applying for a lot of positions that are straw men - listed positions designed to be so specific that no good candidate can be found. It happens a lot in big companies (because sometimes HR makes it harder than it should be to promote from within) and companies that want to game the H1-B system.

Finally, you probably don't want work at a company that asks software engineers to fill out applications, unless the application is very domain specific (like the YC application). That's a signal that the company doesn't value software engineering like they should.
Looks like it was already supported before: http://docs.basho.com/riak/1.2.1/tutorials/installation/Inst...
Surviving a Startup: Finding Your Oxygen Mask
Your path to product: productizing what you know
I sympathize with your anger at the Wired article. I too read it and cringed at the misrepresentations. It was either carelessness or a desire to dumb down the subject matter.

To my mind, the article is a demonstration of how poorly the media cover just about everything. When you or I read articles about subjects wherein we are not experts, we (or at least I) assume that they are well-researched and accurate. But when we read articles about subjects in which we have expertise, I find I'm routinely dismayed at the inaccuracies. I am no longer surprised by this, but still bothered. It casts a huge cloud of doubt over everything I read in the media.

Therefore, I found your rant delightful.

Nevertheless, I feel some of your points are subject to debate.

You criticize the characterization of JVM as the star of the show affording Twitter and others the ability to scale more easily, considering these efforts were necessarily coupled with a rearchitecture of their entire infrastructure. Of course there is truth in your point, but minimizing the role of the JVM is unfair. The JVM, and especially its higher-performance languages—which include Java, Scala, and Clojure, is a big star in our web application frameworks benchmarks charts [1].

With respect to high scalability opinions vary, but I lean toward the side that believes that while very high scale is ultimately a matter of horizontal addition of servers, a great deal of complexity and pain can be avoided by servers simply being fast at what they do. When platforms perform not merely a few percentage points apart but an order of magnitude (or more!), it's not reasonable—again in my opinion—to ignore raw performance. Simply being faster—massively faster—is like opening a pressure relief valve that gives you a lot of architectural breathing room.

Yes, Ruby runs on the JVM, but not all languages on the JVM have proven to reap the benefits. We have not yet observed JRuby demonstrating a compelling superiority to MRI Ruby.

Also, as others here have pointed out, many believe that maintaining a large system is aided by a language with type safety. I personally am considerably more productive with a modern statically typed language than any dynamic language. When I make typo-grade errors in dynamic code, and that code makes it to a testing round, or even worse a staging or production environment, I have lost huge amounts of productivity. I end up feeling embarrassed and I long for a static language to prevent this kind of silly failure.

Type safety preference isn't a matter that will be settled any time soon or ever, but I believe that at least the general consensus is that for large systems, stricter languages can make maintenance less painful.

[1] http://www.techempower.com/benchmarks/#section=data-r6&hw=i7...
12 True Tales of Creepy NSA Cyberstalking
Branching messages with pipelines
A class action lawsuit has been filed 2 years ago...

http://www.scambook.com/blog/2011/10/justfab-com-justfabulou...
Hmm. It showed the same video twice in a row.