skysight-inc/HackerNews huggingface dataset:
So when ActionScript is compiled to JS, do they mean it's actually pure JS, or is this getting converted into ASM.JS? Historically, a big appeal of Flash vs. JS has been performance - ActionScript is an ugly language, but it's statically typed. And JS/canvas/whatever historically haven't been too efficient at moving vectored objects around the screen.

Then again, a the factor in Flash's favour isn't the run-time, its' the development workflow.
Its not their "designers", it's the fact that they really value design in Swaziland.
Seriously, again?
Ask HN: Is there a service to find my online accounts?
I was thinking if there's some kind of service where I can type my e-mail and see what websites I have an online account registered with this email. I started to delete old/not used accounts but I can't remember everything I signed up in the past.

So do you know a service like this? If not, how do you think it could be the best way to implement this?
Flash is awful, but Firefox and the other browsers don't exactly have a great track record on security either. The less code and business built-in to the browser, the better its security.
Sure, and not browsing the Web at all is even safer. But it's nice to see developments that make insecure technologies more secure.
Yes but he follows it with a long paragraph saying the same thing in lots of different, less clear ways. Repeating those three words three times is, in fact, far more effective.
Seconded being able to see all the roles in an area as a list would be really usefull.
IOS 7 apps are prettier, but are they better?
Closing your browser trumps it though...
Pgloader (PostgreSQL Loader) rewrite (from Python to Common Lisp)
There's a couple of things that you can do with PGs transactions that don't work in MySQL, for example transactions around DDL statements. That can leave you with quite a mess at your hand when you have to rollback half a database migration.
I think the Idea is that you wont use the GUI much on server instances. I am working through a Sharepoint MCSE right now. and the Server config and admin, your encouraged to use the Server Manager tool on another computer or the command line. Ideally on most installs the Full GUI is not installed. MS considers it best practice to use the Core install if at all possible. Followed by the Min Gui, and then if necessary the Full GUI.
Richard Stallman on the Painful Birth of GNU
Indeed. Graduates aren't even far off starting on around £25k+ in the UK[1]. Somebody with a good few years experience can quite easily get almost double that.

[1] - http://targetjobs.co.uk/career-sectors/it-and-technology/286...
Agreed, I feel like by building things like this it just hampers all the work that is being built to replace flash. The best way to change things is to make it so that learning HTML5 and JavaScript becomes worth it, and that is easily done by just not supporting flash.
That was a lot of words to encourage use of authors own tool instead of or aside perhaps even with port knocking.

The article hasnt anyway delivered any meaningful reason not to use port knocking, just a few straw-man arguments such as "most people only setup 3 port sequences".

The idea presented though is an interesting one, run your ssh on one port, and when that one authenticates with any method, only then allow connections to a second ssh on another port, which has perhaps only then begun listening or being allowed to accept connections from that specific uid, and if that authenticates then the user is in. Like having two gates infront of a city instead of a secret handshake with 16 port sequences say.
I think it qualifies if that's all you talk about. Correct the title, then move on to things that are actually interesting.
The infographics are dismal. The bars in 'Average Salary by Specialty' indicate that Python developers make twice what Javascript devs earn, while in reality it is around 10%. When you look at Java, an approximate 10% difference between Junior and Midlevel results in much more similar bar heights.

What's missing is where the numbers are coming from, how many replied and whether it is in any way representative.

The numbers for Germany are very odd. 24k for a designer is pretty close to the poverty line, I believe. Is that before or after tax? I guess it suffers from a lack of participation from many non-anglosaxon countries, so I would not use any of these numbers in actual interviews.
And literally zero of the web developers and designers I know use OS X. This is why a single person's social circle isn't a useful indicator of global marketshare.
would you mind telling a bit more about your previous one, why did you get cease letter?
Facebook and Twitter too late for China's Internet
Matplotlib: plotting
Who cares whether something is disruptive or not? Does it make any difference at all? Are you trying to crack some formula to making disruptive products, because it ain't gonna work.
Y Combinator - Is it worth it?
I have just applied for the Winter funding cycle and am excited for the chance to move forward with Y Combinator. I have heard lots of great stuff about them, haven't actually heard anything bad about them (whether it's true or not). Too good to be true or are they just that great (this is probably what I lean towards).

So, this question is for the successful Y Combinator business owners: What was your experience working with Y Combinator like? Were they really as helpful as they say? What company did they help you start? Any tips for newcomers?
C isn't a framework.
It suffers from the biggest disadvantage of all: being proprietary. Flash is a massive wart on the free web.
Do you have any perspective on how Flask fits into this?
If they put as much effort into this as they did in the kitchen cabinet software they built I expect to see a lot of people using this.

IKEA has a knack for packaging things in such a way that works for people.
From disgruntled developer, to founder, to burnout
> Protection against what ?

Um, protection against random people wiping your phone maybe?
Darn, that's really sad. Diaspora is a really cool concept, though I'm kind of soured on social networking after years of Facebook. Perhaps I'll give it a shot soon since this guy literally gave his life for the project.
I personally see port knocking with cryptographic payload just as one tool on layered security. I'm still wondering why people bother horrible VPN/IPsec junk with annoying clients. I got something like 10 different clients installed. It shouldn't be required at all, if systems and protocols are already secure. You can use something like TOTP key as payload to open ports up or something more complex/secure if you want.

Afaik passwords aren't bad option either. You should consider password as shared secret blob, not as password. It's as unlikely that someone is going to guess 256 bit password as it is that they guess any other 256 bit secret.
I understand, which is why I personally prefer to use copyleft licenses. However, non-copyleft licenses like Apache v2 are still compatible with free software.
Play is not "beyond" Rails, it is merely an other community (Java/Scala) that catches up with Rails.

Node.js is a joke, I see more and more people "get it". It sure serves a purpose, but the language not being for general purpose, the syntactical problems of JS and the single-trick concurrency model don't make it fit for true disruption.

Meteor might be a contender for "next level" (currently it is build on Node i think, but that might change one day), I also consider Yesod (Haskell) and some of the web stuff on Clojure to be good contenders.

I think it will not be merely a new FW that changes the scene, I expect it to be a new language along with that.
If you're living and working in London that's the kind of salary you'd be looking at, simply because the rental prices around here are so high. Outside London I can see it being that much lower. £26,500 is about average wage in the UK, and salaries are not keeping up with inflation and cost of living increases over the last 10 years in all professions.
Yeah, these numbers are definitely off for Japan. Developers get paid shit in Japan (which is probably a big part of why most Japanese software/websites blow).
How exactly do you write a web app that doesn't process requests and return a response?
I really don't think your wording of your product is great. I think "A service that publishes an email sent to it as a website" is more accurate.
Not strictly computer science - but the one textbook that I really liked from my computer engineering degree was "Computer Organization and Design: The Hardware/Software Interface" (http://www.amazon.com/Computer-Organization-Design-Fourth-Ed...). It was surprisingly readable and easy to follow. It covers the design of a MIPS processor from the ground up (ALU, caches, memory, pipelining, etc) and also is self-aware enough to not pretend that x86/ARM don't exist.
Chess Games and Positions in Neo4j
"Liking What You See: A Documentary" (Ted Chiang)
Can the GitHub community be a sustainability model for Open textbooks?
Yet no one else uses SurfaceFlinger because Google's no-patches and code-dump strategies makes it completely useless to any potential downstream project.
QS: weather & personal productivity
It seems much, much worse. He's not defining "size" very well. If I interpreted him correctly, he's claiming the assets don't follow the power law, therefore transaction volume is much higher, because of course transaction speed "money velocity" must be constant because he didn't consider it.

Evidence based on assets capped at a lower value than the power law implies probably implies either regulation is limiting asset size or otherwise distorting the market, OR the books are cooked and assets are considerably higher but accounting games are being played. Perhaps thats a good idea for future financial planning if many of the "hidden assets" are actually worthless unrealized mortgage loan losses. Or maybe they're just crooks.

Anyway its a pretty big leap to go from unusually low assets to therefore total aggregate transaction volume must be artificially low.

For those who can't tell the difference between assets and transaction volume, this is a slight simplification but the assets of the car lot at my car dealer are about 200 cars, varies a bit, but they're all of probably about the same order. Now the total transactional volume is totally different at each dealer, some sell one car per day and some sell ten cars per day. The total annual transaction volume better closely match the total annual car production. However the assets on hand merely equal a simple division problem and don't mean a whole heck of a lot. Its like comparing apples and oranges or OSes and DMBSes. They're kinda sorta related but not the same thing.
The Rise and Fall of the Vitamin D cartel
Great talk! Thanks for sharing.
Most useful comment in this whole conversation. Incredibly handy for home servers - for which I'd just resigned myself to the fate of running ssh on port 80.
The issue is, the SSH server is many tens of thousands of lines and extremely complex, while a port-knocking implementation might be a few hundred lines and very easy to audit. It's much easier to be certain that the simple one is bug free. The simple one protects the complex one.
I was really confused before I realized that there's a "!" missing.
But the sequence can be found by sniffing the network connection. Unlike the ssh passwords, which aren't ever transmitted in plain text.
Implementing Backwards Compatibility in Android
Not too surprising to see lots of people here who would prefer a gradual evolution of Windows toward a touch interface. Bouncing back and forth between legacy Windows and "Modern" UI is obviously unsatisfactory. But, remember that Microsoft tried a gradual, familiar evolutionary approach three times previously and failed. Where were you then?

Now Microsoft has a new kind of failure. Is evolving it in this proposed direction or any other going to succeed? I think this proposal is good. It helps the "bouncing back and forth" problem. One problem is that Microsoft has different security models for "Modern" and legacy apps. (Never mind what kind of sense it makes to have a stronger and weaker app security model in the same OS.)

Here is a potential irony: Ubuntu Touch is an evolutionary approach to bringing a conventional implementation of the desktop metaphor to touch. I could see using an Ubuntu tablet. It probably won't be widely popular since it will have some touch-unfriendly legacy in it. But it might end up being a better evolutionary path than what Microsoft chose. But I'd know what I'm getting and probably be comfortable with it.
25 + useful Firefox add-ons for web developers and designers
Rails was released in 2003, and 2013 is almost over. So the question is "in 2 years, will Ruby on Rails still be popular and competitive" - yes. VERY much yes. In 10 years, we can debate that, but in 2016? No way!
Compile in the Cloud with WP8
Show HN: Cloud 66 EasyDeploy - Making Deployment of Open Source Projects Simple
Where I live grad salaries are 18 - 22k
The Facebook Coffee Machine, a Nice Hack at Maker Faire
Actually I agree with that average. We've just hired 4 developers to work for us. We're based in Zone 2 London and we're paying them on average £28 000 (they all have 2 years or more in commercial experience)
I don't use port knocking but:

"all implementations had the downside of adding yet another piece of clearly experimental software to my system along with somewhat convoluted procedures for setting the thing up" what? you can add port knocking with literally 3 iptables rules, netfilter is a rock-solid proven piece of software.

"explain to me what problem this is supposed to solve." visibility: if target cannot be found there's no target to attack; security by obscurity is good (as long as security doesn't depend just on it).

I use bastion host to ssh to my servers with key and different port (yes different port is good; for a couple of sysadmins who cares we broke some standard?)
Its pretty inspiring that writing code with a philosophy can change the world.
Worse might be Better in the case of Node, though. It's also benefiting from a great package manager. NPM already has 2/3 as many packages as RubyGems and 20% more than PyPI.
GPL isn't about (nor does it require) licensees to contribute anything back.
I think that Rails has a lot of life left because it be influenced by the new techniques that are being pioneered in other frameworks. In the same way that Rails inspired frameworks in other languages - new technologies like node and meteor can inspire Rails too.

For example, at aha.io we use Rails, and wanted to get the front-end performance of a Javascript-heavy app, but by taking advantage of what we know (which is writing ActiveRecord models, Rails controllers and ERB views). So we borrowed a technique from Meteor and made our views reactive - using Rails for the view rendering. That way we get the best of both worlds: the code only needs to be written once in Ruby, but the performance and reactivity is like an app that has a Javascript front-end.

This is just one example, but there lots of similar examples (think about the increasing use of functional programming styles). The incredibly rich ecosystem around Rails means that stuff just gets done faster - the ecosystem has done most of the work for you. Apart from Django, every other framework is still playing catchup.
Is there any way to run a different Linux distro on the Chromecast? Mine collects dust for the most part. At least it really is a great way to watch Youtube...
Ah, another inaccurate salary comparison chart that doesn't take into account standard of living and how that differs vastly from country to country (and regions within the countries).
'Free Unix': The world-changing proclamation made 30 years ago
Does anyone know what font that is in the screenshot? It's rather nice (disregard the fact that all fonts look nice at that size).
I removed Acrobat Reader from my computer after PDF.js.

This has the same potential.
Although it's vm is implemented in pure js, not even asm.js. It may never hit the 'good enough' performance levels.
If you have cause to worry about security holes in SSH, you should not rely on port knocking to protect you.
> doing SWF rendering in-browser and in-sandbox makes the security nightmare that is Flash go away

I think it's crucial to make sure end users concerned with security understand the difference between built-in or bundled Adobe Flash Player (Google Chrome style), and what Firefox is offering.

As soon as Chrome added a built-in Flash Player, it became the preferred target for hack contests, and still falls over repeatedly: http://www.securelist.com/en/advisories/52983

> Multiple vulnerabilities have been reported in Google Chrome, which can be exploited by malicious people to compromise a user's system. The vulnerabilities are caused due to a bundled vulnerable version of Adobe Flash Player.

That's not what Firefox is doing, and I hope the tech community helps regular users understand the difference.
Motion to vacate default judgement is a possibility. Cybersquatting? This guy has a gambling site?
So then does this mean that PostgreSQL is to SQL like CouchDB is to NoSQL?
I don't think it's accidental that people used to the same about the ruby community.
IKEA has a bizarre complex business setup which ends up with IKEA being the world's largest (and nearly least generous) charity. (http://www.economist.com/node/6919139/print?story_id=6919139)
The history of technology
So what of course they will want to keep trade secrets secret Google is not (for good reasons) going to tell every one what the various algorithms that rank pages are.

This appears to be an astro turf job to try and paint Aleynikov as doing for the open source community instead of getting done for nicking trade secrets - what next will his mum pay a doctor to diagnose him as autistic.
Here's a link to the demo that went around everywhere a few months ago: http://macaw.co/peek/ . I'm, if anything, curious to see some of the code generation in a non-demo setting.
They need to make the desktop monitors as small as phone screens for this to be acceptable.
It also works in Chrome!
K-Cups and EdTech
Here's the link to back the project! http://kck.st/16G2Afh
I see that weather forecasting companies are now referred to as weather big data companies, even though most people know that forecasting means crunching large data sets.
MySQL is pretty good in practice, I think many complaints are indeed just user error. That said:

- Much like MongoDB, the defaults sacrifice safety for performance, e.g. MyISAM tables (which everyone everywhere will tell you never to use, but are IIRC still the default) ignore things like foreign key constraints

- Lots of "error" conditions silently complete as best as they can, rather than failing with an error. E.g. trying to store the wrong type of value, or trying to make a table using a disabled storage engine, or trying to store a string in an encoding that can't represent all its characters. A lot of this is legacy that is slowly being improved on, but reputation naturally lags slightly behind

- The query planner is a bit simplistic, so if you want performance you do need to put a little more thought into tables so that you're not doing 5-way joins all the time

- Some more advanced "features" of other databases like triggers just don't exist. IMO they are bad features and shouldn't be used, but their absence provides an easy thing to criticize mysql for if you're that way inclined

It's perfectly possible to make a good product using MySQL, quite possibly better than you would with other databases. But you do need to be very scrupulous about checking for warnings after every statement.
Flexible Web Graphic CSS Buttons
I am not in banking finance but I think the double entry accounting would be if you deposit a $20 bill that physical $20 bill shows up on the "physical stack o cash" as an asset and the other entry (double entry, get it?) shows up as a liability in accounts payable because they owe you $20.

I was in IT at a stock trading firm a long time ago and the limited free training they provided for accounting was probably the most interesting non-job related on the job training I ever attended.
"I think the Idea is that you wont use the GUI much on server instances"

Yes - but this one is a completely standalone demo VM from Microsoft with a pile of different products installed - so logging in directly and using the Screen Eating Menu From Hell is difficult to avoid.
I don't use port knocking, and I'm not convinced anyone should. But something bugs me about this kind of discussion.

There are two broad classes of attackers: targeted attackers, who specifically want to get into your system, and script kiddies who are scanning broad swaths of the Internet looking for an easy target. Most of these countermeasures, like port knocking and moving sshd to a different port, do very little to dissuade the first group. But they make you much less of a target for the second group.

These discussions (and so many security discussions on the internet) make the argument that unless something is effective against targeted attackers, it's not worth doing. That's ridiculous. In the 20+ years I've been running computers on the internet, targeted attackers are outnumbered by random scans thousands to one. Of course, you'll say, any countermeasure that's good enough to stop targeted attackers is good enough to stop these guys as well. And that's true, but for two things:

1. I like my logging and alerting to intentionally be loud when a targeted attacker is messing with my system. By raising the bar enough so that only targeted attackers get through, I'm able to do that.

2. There have been zero-day vulnerabilities in probably most of the daemons I've run over the years. And when those zero-days come, I inevitably get hit with random scans looking for vulnerable versions. Those are almost always stopped cold by things as simple as running on a different port. I'd like to think I'm pretty good at keeping up with vulnerability alerts and updating my software when something like that happens, but simple changes that buy me a little time aren't a bad thing.
What you need to Know Before Developing for Google Glass
The API of RethinkDB is quite enjoyable as well
£28k approx for someone with 2 years of experience in London is reasonably average.

It's entirely dependant on the language involved though. Ruby/Python/iOS developers for example, earn £45k on average.
Linux benefited enterprises years ago, so will OpenStack and OpenShift
This is a good point. But imagine this attitude is adopted and becomes commonplace. People WILL start becoming lax, and people who should not be storing critical information on their phones, or who don't realize that its critical ARE going to lose their phones and they ARE going to get cracked.

I guess the question at that point is, is a 4-digit code better or worse? I'm not fielding that one...
The C standard library is pretty much a framework, isn't it?
Open Karma : helping open source be more amazing
Its not as much standard of living, but cost of living. Which varies not only between country, but even state. Average for some countries makes sense, but for countries like US the average is pretty meaningless. The average difference in income for two comparable developers between say Texas and California is going to be huge.
Canada's salary points seem really low....or there's a lot of "you must know everything and we'll pay you minimum wage" jobs that they're scooping from the Canadian Job Bank. From that list, I want to be heading to either Australia or the US.

Also for PHP dev average, where do you get 75k for junior, and 100k+ or senior? Sure isn't Canada. 75k here is senior level salary, and that's in Toronto. I've only ever seen one PHP job in Canada that paid 100k, and that was an architect position, 10 years experience, and needed to have experience with incredibly large datasets.