skysight-inc/HackerNews huggingface dataset:
I think a fair bit of his non-cryptography security advice of the past 10+ years has been...different than a lot of people I know better and have direct evidence of their competence would give. Increasingly so recently (the past year or two). As a cryptographer, particularly on the symmetric side, he does a good job (at least, the other people who I know who are good at that also think he does a good job; I understand number theoretic cryptology better than I understand the more complex details in designing symmetric stuff). He also went way far over to the "high level policy/politics" side post-BT acquisition vs. actual implementation work, other than crypto competition entries, as far as I can tell.

So, it's not so much "not trust" as "critically evaluate what he says each time".
I will give the creators of PonyORM a 10 as well.

http://stackoverflow.com/questions/16115713/how-pony-orm-doe...
My understanding was that NoImplicitAny changes the rules of the language, so its use will make it harder to move code from projects that rely on it to projects that don't. Traditional compilers opt for a rich set of warnings and the ability to turn any warning into error. On closer inspection, it seems that code developed with NoImplicityAny should work 100% on projects without that, so my concern was unwarranted.
> He conflates absence of evidence with evidence of absence.

Absence of evidence is evidence of absence. The false statement of that form is "absence of proof is proof of absence".

If absence of evidence wasn't evidence of absence, then, at best, the presence of the event and the presence of evidence are have no bearing on each other & are independent (in the statistical sense, i.e. the "evidence" is not evidence at all), and at worst, presence of evidence corresponds to the event not happening (i.e. the "evidence" is backwards).
hk cannot be compiled with gccgo?
I'm not sure I see the use for this.

Instead of plugging my multiple Node.js apps straight to nginx, what's the benefit of proxyfying them one more time with Passenger?
Ditto. 88-year-old Dad finally got himself an ipad, after decades of wondering whether to get a PC (I got him an HP laptop a while back that he and my mom never quite took to).

Now he's an avid user. The tablet is a miracle of innovation. And the Kindle has enabled my mom to read again, with her macular degeneration.

Tens of millions of ordinary non-techies out there have transformed their lives by means of these gadgets.
Smart Layers Demo
Textbook publishers ignoring Texas school board’s inane intervention
It’s not just what it looks like and feels like. Design is how it works.
The beauty of open source is that people don't have to put up with potential conflicts of interests. If they don't like it, they can fork our codebase. We knew this from the beginning and we went with this business model anyway, because not only are we strong supporters of open source, but also because we're confident that we can deliver the best product.

Having said that, our Enterprise business model has only benefited the open source version so far. Development of Phusion Passenger is much faster nowadays than it has ever been. Back in the days when we were primarily a consultancy firm, our means of income drained away energy and focus from development.
The graphics cards are the big piece. You pay alot of money to get that firepro label, compared to performance of similar gaming cards with very comparable specs. You could cut out ~500$ that way.
But you don't get to jump out? Disappointing.
I don't get why he speced the E5 CPU vs. the i7 but then also didn't use ECC RAM.
That's not really "enriching" life as i see it followed by more patronising rubbish. Just because something doesn't meet your needs, circumstances or prejudices it must be worthless? Oddly, I had exactly the same reaction to your opinions.
What Texas has done is very embarrassing
The Bill of Rights, like most of the Constitution except clearly identified provisions, wasn't originally intended to apply to the states. It was only in the 20th century that the Supreme Court started the process of incorporating provisions of the Bill of Rights to the states via the equal protection clause of the 14th amendment (which was a reconstruction amendment explicitly imposing restrictions on the states).

So the clear text of the Constitution, as the drafters understood it, did not prohibit concurrent federal and state criminal trials for the same crime. Indeed, it imposed no limits on state criminal procedure at all. No due process, no nothing.
It's even more explicit than the dates, the article was created by this law: "Loi n° 94-361 du 10 mai 1994 portant mise en oeuvre de la directive (C. E. E.) n° 91-250 du Conseil des communautés européennes en date du 14 mai 1991 concernant la protection juridique des programmes d'ordinateur et modifiant le code de la propriété intellectuelle"

edit: link http://www.legifrance.gouv.fr/affichTexteArticle.do;jsession...
I think I was attacked by a gang of angry buzzwords about halfway through this article.

I found it most enjoyable. Rarely do we see so much political spin and software development so close together in the news. Somebody should write a book about this.
Passenger runs in Nginx. The architecture is very similar to plugging Node.js apps to Nginx, except now all that plugging is taken care for you. There are also a bunch of features that you get compared to straight reverse proxying with Nginx. From https://github.com/phusion/passenger/wiki/Node.js (that document is slightly outdated because of recently developments, we're updating it):

* Multitenancy - Run multiple Node.js applications on a single server easily and without hassle. With vanilla Node, you have to remember where your ports are configure Nginx reverse proxies. With Phusion Passenger, you create a virtual host, set `passenger_enabled on`, and you're done.

* Process management and supervision - Node.js processes are automatically started, and automatically restarted when they crash.

* Statistics and insight - Phusion Passenger provides tools for inspecting the applications' status, such what requests they're currently processing, how many requests they've processed.

* Scaling - Based on current traffic, Phusion Passenger can spawn more Node.js processes, or spin down some existing Node.js processes.

* Load balancing - Phusion Passenger automatically load balances traffic across Node.js process. The load balancing mechanism utilizes a smart "first-available" selection algorithm to avoid problems caused by slow requests. Nginx's proxy balancer does not do this by default.

* I/O security - Node.js is automatically put behind a buffering web server, such as Apache or Nginx, which preprocesses and postprocesses HTTP requests and responses. This protects the Node.js app against slow-client attacks such as Slowloris. It also provides a secure environment which sanitizes HTTP headers, to protect against vulnerabilities in the app's HTTP parser.

* System security - Node.js processes are automatically started as the user which owns the app. This allows the OS to separate their privileges, so that a vulnerability in one app does not affect another.

* Static file acceleration - Static files are directly served by the web server (Apache/Nginx), not by Node.js. This offloads the Node.js application from handling those things.

* System integration and less moving parts - Phusion Passenger fully integrates Node.js with the web server (Apache/Nginx), so that in most cases the administrator only has to deal with the web server and with centralized Phusion Passenger management tools, instead of dealing with each app individually. Note that the integration we talk about here pertains to usability only. Under the hood, each Node.js application is still its own OS process, and does not run in the web server's address space.
Apple iPad Air Event: Everything You Need to Know
You're being very generous, 99.9% is probably still too generous.
Aww, that citation is for the much less striking part of your post. Do you have a citation for the 'works against you' effect being stronger than the 'works for you' effect? It doesn't sound like something you can conclude without actual study.
"just"? Man, normal people can't install Tor. It is not that it is difficult for them, it is impossible.

Also, this solves a problem slighlty different from what Tor solves, in my opinion.
Gracias Ricapar.
Bears repeating: trust but verify. Trust the math but not personalities because allegiances can change. And as cperciva writes (http://www.daemonology.net/blog/2013-09-10-I-might-be-a-spoo...), verify through actual code reviews.
Stripe got a makeover
Checking the about page is pretty terrifying...
Wade is founder of SeekingArrangement.com - the leading sugar daddy dating website, SeekingMillionaire.com - a millionaire matchmaking website, WhatsYourPrice.com - where singles bid for first dates, and MissTravel.com - the first travel dating website.
Sadly those in the content business have made a clear distinction between "streaming" and "downloading", in legal and licensing terms. And so such tools would facilitate the download of music videos, for example, which youtube is only allowed to stream, and there lies the crux of the matter.

As for the adsense TOS it does consist of other similar clause prohibiting it being run on "piracy" or counterfeit website to appease certain industries, so it's not limited to protecting Google's stuff. One would suggest (as you did) that this keeps Google from maximising profits but these are concessions they are forced to make.
Avoid conspicuous UI patterns
The girl spewing some bullshit may lead to an interview ended early. Clearly bright, but not as bright as she think she actually is... Come back in a few years with a bit more humility... Hard to decide if the other guy is bad or inexperienced without a resume...

"If you compile in debug mode the runtime might try to be helpful and memset your stack memory to 0"

This is a retarded explanation (pages are set to 0 when they are recycled by the OS so you don't end up having data from dead processes mapped in your memory, with all the security implications). Also, actually randomizing memory in a debug context would actually be more helpful to trigger those initialization bugs...

People that think they know everything are a lot more dangerous than people actually aware of their limitation and safely working within them.
What do you mean by "raw information"? Can you publish a detailed protocol specification?
In computer security, guilty until proven innocent tends to be best practice.
does mavericks phone home?
It is beyond belief that the president was not aware of the problems. This is THE centerpiece of his presidency.
Football Manager Shows More Linux GPU Driver Bugs
You can buy and modify a Toyota Supra to go faster than a Ferrari for much less money. Thats why nobody buys Ferrari's - there is just no point. And people buying Ferraris are just stupid for wasting their money when they could have a Toyota Supra instead.
"Start online" does not mean "on online dating". My current relationship started "online" - we met on last.fm and noticed that we went to the same concerts. From there on it's basically a regular dating story.
And best of all is such things are not fashionable. Take a round of HN or any other place where programmers hang around. Take a note of how many articles, blogs posts, essays, tiny libraries, frameworks etc are written for languages like Javascript, or Python, or Ruby, or Java.

Compare this with C. There is a degree of serious technical focus that languages like these demand for big projects. Embedded systems, Operating systems, Databases, compilers etc. A big part of software world uses these languages on a daily basis. But there is no where the kind of hipster crowd, these languages have the web frameworks or languages have.

Even if you spend some time searching for resources on the net, there are few that teach deep C skills. There might be one or two books out there which haven't been updated in 2 decades.

By and large, these are unfashionable fields to work in. The barrier to entry is really high, Success comes only with seriousness and application of well focused effort, mistakes are expensive and they warrant serious RTFM'ing the hard way- to write to some real serious code.
Thanks for the elaboration and useful links.
http://redis.io/topics/internals-rediseventlib ae is good too.
Not a big problem if you grow a constant number of expendable accounts.

If I were an astroturfer, grooming accounts would be part of my daily routine. I'd probably automate it too.
Thats a recursion
> I find people that "like" companies quite amusing.

I think they pretty much account for most of the hate you see on HN.
Brand identity is the new opiate of the masses.
Isn't money a valuable good? Buying goods and providing liquidity to them helps everyone. If you dig well it's the same thing as every other (things you would call) investment.
> created: 803 days ago
Over 40 scenarios to help improve your Git skills
actual problem: government is incompetent at leadership because it is saturated with politicians whose main skill is only convincing you they are competent leaders. no leadership skills actually required.

if government were competent stuff like capitalist economy and privatising public services would always be bad (provably - actual proof, not just overwhelming evidence - but there is overwhelming evidence too).

leaders intuit things like agile and don't label them - instead of picking it up from a book and implementing it badly because they don't understand first principles.
Competition is already high, and colocating is not that expensive for anyone with the ability to compete.

A lot of the loudest criticism of HFT is that it's too competitive - a lot of people who used to make a comfortable living from the bid/ask spread are no longer able to due to computers driving down profit margin.
Reality is more cynical than the cynics? Ironic, no?
How to fix Qt 4 for Mac OS X 10.9
Pretty bad if you plan on employing lots of JS in the long run. As fantastic as jQuery is, when it's all you know, everything looks like a $-shaped nail.

That said, you don't need to go crazy and go off it cold turkey, you can very much expand your JS knowledge while using jQuery still for day to day AJAXy and DOM manipulation tasks.
Quantum Experiment Shows How Time ‘Emerges’ from Entanglement
After reading the article, my takeaway was:

1. You can't build a Mac Pro equivalent with off the shelf parts (yet).
2. You can get kinda close, but you're not saving that much money.
3. The less close you're willing to get, the less money you'll spend, which is absolutely not interesting, surprising or relevant.

In summary, the new Mac Pro is pretty awesomely priced and I'm going to order one for my lead dev.
Revolutions are notable because of their rarity. Were they commonplace they would be "events". 10, 20 years ago these incremental changes would indeed have seemed revolutionary but now they are just "boring upgrades". Anyway, all these "lack of innovation, where is the revolution" comments are really just Apple haters complaining that there is nothing sexier for Samsung or Microsoft to copy.
Hm... this seems nice (while the Android app is just their website packed with Phonegap or something like it).
No Sex Please, We’re Japanese
…and probably one for myself…
> MS had a terrible rep for being aggressive and with bad ethics in the 80s and 90s

That's a really important consideration. Hackers have long memories, and a lot of us don't consider "it's just business" to be in any way a relevant defense.
I always thought waterfall was inherently iterative you could jump back up the stack at any point in the process one sucsessfull project I worked on at BT (management system for the Uk's SMDS network) had several instances of going back and redoing stages before we even got to the final development phase.
I took it as a joke, not a statement of evidence.
And are you a crypto expert?
Always funny
http://www.schneierfacts.com/facts/top
Anecdotes are such an awesome way to evaluate market data.
so beta
You rarely get 8 drive RAID6 in any workstation.
I don't personally hate Microsoft, but it's true that it is perhaps not the most popular tablet manufacturer in the world right now.

I know many people who own an iPad, several others who have Android tablets, but zero Windows tablet owners. I guess that should explain by itself why people are not really excited about it. Fuss and hype are not basic human rights.
.. But you can be sure that Apple's contributions have taken it far further than it would otherwise be.
>"The only ECC-supporting motherboard I could find compatible with the CPU has no USB3, only supports 1600MHz RAM and only offers 3 PCIe slots."
That's the reason I built tools like following favorite writers, remarks, bookmarks and read count. 'Popular' and 'Recent' pages are there just for the discovery process. Svbtle needs editors, where on Markdawn you're the editor for the people you like most.
I don't know. Everyone's different. All my relationships have started because I hit it off with the person in question.

(For the avoidance of doubt, by 'hit it off' I mean 'got on well with').
Further along the lines of what panzi is asking, could you publish OSS that contains code that would make obvious how to interact with the protocol?
Bacteria are already being used to extract economically significant amounts of metals from ore bodies and mine waste.

ATW, up to 25% of the world's supply of new copper is now produced this way.

http://en.wikipedia.org/wiki/Biomining
It's not really marketing junk -- different drive firmware does make a difference in NAS and RAID applications. I'd probably be looking only at 4TB Ultrastars to fill the ARC-8050, or SSDs. I might go with something lower end for an 1813+ since you're probably not buying a gig-e connected NAS for performance.

(it depends, though -- if you're doing just huge volumes of audio, you probably only care about reliability and sustained performance, and not much performance at that; and even flac doesn't use much disk space. it's video or other info which requires high-speed direct-attach drives in 20TB chunks.)
I'm not sure why you are being sarcastic.

The article is just about the Mac Pro price. Conclusion: it's a fair price.
Conversely, JS programmers I complain about JS gotchas about contend that "once you learn all those horrible gotchas, it's a great language".

Even C++ programmers, at least the ones that had good fortune to have time away from C++, agree that C++ gotchas are unforgivable.

But in general, C++ and JS communities have the biggest cases of Stockholm Syndrome I've seen.

Disclaimer: I'm a recovering C++ programmer.
> Registration is not required.

That's not entirely correct. From the U.S. copyright statute, 17 USC 411: "... no civil action for infringement of the copyright in any United States work shall be instituted until preregistration or registration of the copyright claim has been made in accordance with this title." [1]

(The term "United States work" is defined in 17 USC 101 [2]. There are certain exceptions, unlikely to be relevant.)

[1] http://www.copyright.gov/title17/92chap4.html#411

[2] http://www.copyright.gov/title17/92chap1.html
Why Twitter is Clumsy
Right, but I mean he should have dropped the CPU if he wasn't going to use ECC; the big advantages of the E5 are SMP and ECC, neither of which he was using. An i7 will be clocked higher and cost less, and come on a more useful motherboard for most workstations.
A programmer is not a designer. Both are completely different fields. What you are saying is that a shark(programmer) cannot fly like an eagle(designer). But it sure can swim. And vice-a-verse.
This story could be told of any developer who doesn't update his skills for seven years. You could tell this story for Java developers, Flash developers, PHP developers, etc. Anyone peddling skills from 2006 is going to be looking pretty dated, no matter what stack you're talking about.

I also don't see this: "I would fault them for building their entire ecosystem with total disregard for standards, their refusal to work with whatever community existed outside." My daily experience is very different. If I start a new project, it'll almost certainly be on the open-source (Apache 2.0) ASP.NET MVC platform. That gives me Twitter Bootstrap, Knockout.js, OAuth2.0, etc. It's a neatly integrated patchwork of commonly-used, standards-happy, open-source frameworks and libraries, and it'll work happily on safari and chrome and on my phone. So I don't feel particularly isolated away from the rest of the development world.

Summary is, I'm sure this vision was true years ago, but things seem to have moved on. I think that now, if I want to put together software using modern approach, there aren't approaches or technologies that the MS stack makes tricky. But I'm happy to be corrected; are there technologies or approaches I can't use fairly easily on the MS stack? Cloud computing? single page apps? continuous integration? BDD? etc. What am I missing?
I did a similar thing. Only it took 2 years.

http://pixelated.postagon.com/5g437329d

I win!
IllumiRoom: Peripheral Projected Illusions for Interactive Experiences
So by dropping EEC, thunderbolt, the second ethernet port, wifi & bluetooth, he managed to shave $24 off the starting price?

I'm not sure what the take-away is here.
I use the two Heroku tools `foreman` and `heroku` regularly. I've recently switched to their Go alternatives, and for one thing, the speed has improved[1].

However, the Heroku client is mostly network bound (communicating with their API), and on an average connection this speedup hardly matters.

I wonder what the other benefits will be?

[1]

$ time heroku help
real	0m0.409s
user	0m0.146s
sys	0m0.036s

$ time hk help
real	0m0.008s
user	0m0.003s
sys	0m0.004s

$ time foreman run echo hello
real	0m2.062s
user	0m0.199s
sys	0m0.100s

$ time forego run echo hello
real	0m0.886s
user	0m0.205s
sys	0m0.097s
You think because he got the legislation passed he was elbow deep in it's implementation?

Do you think Nixon was personally testing drugs or testing water supplies, or Reagan was writing software for the Star Wars project?

He'll get status reports in the same way he gets status reports from each department. Implementation details aren't passed up the chain.
Team Building Workshops with Lego Serious Play
Some time ago we blogged about how we started to explore LEGO Serious Play as yet another activity we use in our agile retrospectives. Lately, we've been using LEGO Serious Play to conduct a few team building workshops as well. In this article, my colleague shares how we approached this and what learnings we gathered:

http://www.technology-ebay.de/the-teams/mobile-de/blog/team-building-workshops-with-lego-serious-play.html
Hmm this post reminds me really of Container Choice: http://i.stack.imgur.com/HNMy4.png

Which was, at least in the C++ community I was active in, pretty famous

It actually helped a lot of beginners choosing the right C++ Standard Library containers for their needs.
Why Facebook Is Teaching Its Machines to Think Like Humans
I like Microsoft, they make good keyboards.
My take on the article is that its saying; you can buy a Toyota Supra and modify it but for about the same amount of money you could just get a Ferrari instead.
LG launches Firefox phone in Brazil
Well if you’re rich and looking for a unique way to propose to your better half this could be it.
After the wall came down, the stasi shredded a lot of their files. But they were reassembled a few years ago and they revealed that some of the dissidents at the time were snitching on their fellows in return for less harsh treatment.[1]

I don't think Schneier is similarly compromised - to give out misleading interpretations of the NSA leaks - but we can't know that with 100% certainty as long as the documents he's commenting on are not public.

[1] http://articles.latimes.com/2009/nov/01/world/fg-germany-sta...