skysight-inc/HackerNews huggingface dataset:
Your claim that the client has a full copy of the server's data is incorrect. By default that is the case, but removing such functionality takes only a few lines of javascript and removing the "autopublish" package (one command).

Seriously, Meteor has grown up a lot recently. This stuff moves quick. I encourage you to take a look at it again, because I imagine many of your initial problems with the platform have been settled - there are still people out there who feel any user can clear out the whole DB from the client .
The free monitoring is only available to the subset that they've confirmed had their payments info affected. They currently are claiming this is only 3M of the 38M customers.

Source: They just directed me to protectmyid.com and told me to sign up and pay for it myself. Not a great customer service experience.
Happiness is a slippery fish | don't follow the herd
It's not cool.
> returning all possible parse trees whenever there were ambiguities in the grammar. [1] (Try getting that from yacc, or basically any other tool in existence right now.)

Any GLR-based tool can do that trivially, including recent versions of Bison (derived from yacc): http://www.gnu.org/software/bison/manual/html_node/GLR-Parse...

Ultimately I don't think this is the best way to develop parsers, particularly when you are designing the language itself (as opposed to writing a grammar for an existing language), because it gives you no hint that ambiguity exists until you actually encounter an ambiguous string (since the question of whether a grammar is ambiguous is undecidable).

I wrote more about this on my blog: http://blog.reverberate.org/2013/09/ll-and-lr-in-context-why...
everyone is probably using "health" for their password anyway, amiright?
The whole article reads that they're getting more recruiters than they want/need - so, it's a buyers market, and they believe that they can be picky about recruiters, and if some of the most hustling recruiters will think that they're not inviting to work with - excellent, mission accomplished.
Can't wait to see the first prototype for an organic based cell phone. No modules, but software controlled morphing parts.
Or conversely put a pad of usefulness to the left of the keyboard as well to maintain symmetry. I don't know about the author but if the G15 keyboard came with a fully programmable 'number pad' like arrangement to the left of control and a number pad to the right of enter I would be totally OK with that.
Draft: A Physical Notebook Accessible on the Cloud
They probably didn't hold the narrow beliefs you are pretending they did so 30 came pretty easy.
HTTP Referer Spoofing, don't worry, Block/Avoid ~ issue with visitor analytics
What does that have to do with any of the points raised?
He's lucky he had an 80-column card! ;-)

http://en.wikipedia.org/wiki/Apple_80-Column_Text_Card
> People keep comparisons to the Stasi, too often they forget what the Stasi's purpose was: to suppress political opposition

That's however not how the Stasi thought of itself though, or how it was presented in propaganda.

http://andberlin.files.wordpress.com/2012/05/propaganda-in-t...

"For our security"

US intelligence agencies do keep tabs on stuff like Occupy, and of course it's officially "to prevent terrorism".. I for one don't buy it.
In terms of technology skills, PHP is definitely at the low-end in terms of what you can get on an hourly basis...
http://tinyurl.com/lxsxp3n

To make you more marketable to potential clients, I'd recommend focusing on some skills that are complimentary to programming. That may include domain-specific knowledge of a particular type of client you want to work with (e.g. bioscience, healthcare, local government) or it may include things like usability, SEO, or lead-generation. Find the profit centers in your clients business and find a way to get as close to those as possible. Learn the language they use to describe their work and make sure you use the same vocabulary when speaking with them.
yea definitely sounds necessary. im just wondering - lets say you leave the 1 mile area, somebody @ replies you, when you open the app you'll be in a totally new spot and the message will be at the old spot.
I've tried some other tiling wm's, and i3wm is the one I've liked the most. It just has the right balance. dwm is pretty nice, too, but didn't like it as much. I'm glad to hear some other people enjoying a similar configuration of his linux :D. The only problem I've found is when I go to public places; people just look too much. They are not used to such a lightweight and non-windows/non-mac system.
> GMail at least accepts 3.0, if only to unencrypt it on their servers.

This. I assume Google will be very eager to adopt "3.0" simply to absorb the data and make it available to the Android/AI bots that really run the place (Larry, Sergey and other googlers are clearly just physical manifestations).

Google doesn't seem to me to be the kind of organization to fear adoption of external ideas - they just co-opt them.
It sounds like everyone in this thread has built this app before.
extremely cool idea, hope people in my area actually use it though.
"The range of verbs is further cut down by means of the -ize and de- formations, and the banal statements are given an appearance of profundity by means of the not un- formation."

Obviously, we need to deincentivize that.

"one can even, if one jeers loudly enough, send some worn-out and useless phrase ... into the dustbin, where it belongs."
> your to buzy

Grammar... rage... rising...
I can imagine doing it the same way - it's a single, common document repository for the company; it's shared instead of stuck on someone's computer, with version control, and the same place as their other docs - so you learn and maintain only a single place/tool/useraccounts instead of having a separate system for everything.
That first one reminds me more of a jazz / electro / rnb / funky house type of thing. Mixed with some japanese video games of course. If that's done entirely on one 8-bit chip it blows my freaking mind.
Initiative got $1.3M to reproduce results from 50 papers in cancer research
Anecdotal and not super pertinent, but joke Twitter accounts can absolutely net $10,000 a week. There are glorified bots (think something along the lines of @MensHumor or @YaBoyBillNye) with hundreds of thousands of followers that sell advertising (either external links or 'sponsored' tweets) . It's an entire bizarre community that profits massively off of retweet-happy teens.
Meteor has publication/subscription system that ships only data you specify w/ very fast communication w/ server.
Scala: Methods vs Functions
April 8, 2014 is approaching rather fast...
I also did a little adventure into local-anon-messaging, but my solution was to use wireless access points and udp for text, relying on a server only for image share. In retrospect it is primitive and ugly as sin, but I was excited about it so I put it on the app store:

https://play.google.com/store/apps/details?id=com.constantiz...

The only problem? wireless routers that block udp ;)
I too cannot believe it.

Often companies trying to recruit have jobs pages on their website that add extra barriers for a direct candidate - registration, cover letter, extra forms, contract roles not listed.

This is tantamount to encouraging candidates who were smart enough to find your company and be interested in it to use a recruiter - after all, you only need send them a CV.
Jokes pay about $50. At 1.5 tweets per day, the most someone is going to pay is $2,250 a month. But, when they are sending that much work they are going to ask for a discount. $1,500 a month tops.
Not a great argument for the PS4, considering that online play will require a subscription no cheaper then XBL Gold.
I agree with you - but I don't think that absolves US citizens of responsibility either.
Not that I disagree, but the argument that it's not bandwidth-related isn't refuted by saying you don't have issues by downloading the video and then playing it with another player.
English version: http://www.zeit.de/datenschutz/malte-spitz-data-retention/
To Celebrate Spying on Google Users, the NSA Drew a Smiley Face
Author here: this is a bit like Alex Payne's 'sovereign' project but using Docker containers for apps.

It's a bit rough around the edges but if any one would like to give it a go, the Docs are fairly easy to follow and you'll have a fully functional server up and running on Digital Ocean in about 15 minutes with a Ghost blog and piwik analytics. More apps to come soon.
It depends what you mean by meme. In the original sense as used by Richard Dawkins, yes, hackneyed phrases are memes. But the now-common usage, as in Internet meme is more specific than that. It's more like an inside nerd joke - the kind that is supposed to get funnier with relentless repetition.
Your feelings towards JavaScript essentially mirror mine, though I've found writing code in TypeScript for Meteor has been a much more pleasant experience and gives me more confidence in the code I write.

https://github.com/orefalo/meteor-typescript-compiler

http://www.typescriptlang.org/
>I wonder if Meteor will end up introducing security holes like ASP.NET, as developers forget there's an abstraction and clients can't be trusted? (In ASP.NET, things like being able to screw with viewstate or fire events for disabled controls.)

This is a thing for Meteor already. For example, if you have the insecure package enabled, you can can make changes directly to the database from the browser console. However, this particular issue can easily be detected prior to deploying to production.
Willingness to use it doesn't affect how free (as in beer) it is. It does affect how free (as in speech) it is, but that's not what the grandparent was arguing, and there's a huge difference between the two.
Physical address of the organisation managing the site is amusingly "7500 Security Boulevard, Baltimore, MD 21244".
Step 1: Stop using recruiters.
Call me cynical, but for all the public outrage worldwide I'm pretty sure that even that outcry comes from a minority.
Before we get carried away, let's remember that the web has tremendous utility outside of applications. Progressive enhancement is still the best way to do a great many types of websites. Rails succeeded because it tied together the fundamentals of the web in a nice package. Meteor is another step-change for a certain kind of real time application, but that is by definition a much narrower use-case.
Wow - sounds kinda hostile and doesn't really address the original point (sorry if I'm misreading your response). What's so special about the exact mile radius that couldn't be, say, a bit more flexible if conditions aren't perfect? Couldn't the app expand that to a mile and a half if no-one's present within a mile? Etc. I think that's the original point that was being made.
Interfaces are the most salient feature on my mind. Secondarily, I really like Ruby meta-programming with it's ability to inject an anonymous class in the middle of the inheritance hierarchy. But Haskell isn't object oriented so I don't know how it might support such features.
You should really read up on autopublish and turn it off for your app.

Don't make bold claims unless you try a little harder!
Actually if the Independent Payment Advisory Board fails to develop a proposal should costs exceed certain thresholds then the Secretary of Health and Human services must submit a proposal themselves which they must implement.

Since all appointees to this committee must be agreed upon by the Executive Branch as well as both minority and majority leaders from each party (hence 12 from Congress with the Presidents approval/recommendation) and 3 from the President, yes the Executive branch could very well determine what health options are available too you.

The real issues before us now are.

1) why can the Secretary of Health and Human Services even refuse to divulge enrollment numbers?
2) why is the same not keeping the President fully aware or made aware of the problems the site faced before launch and after (conspiracy advocated claim the President knew)
3) By regulating what must be covered and not covered they are deciding what you can have and have not. Remember, there are a lot of gray areas in the law which the Secretary has shown more than enough interest in creating actual rules.
I use Awesome as my WM of choice on both my laptop and on my workstation. It just works, and I can get stuff done _fast_.

Besides tiling windows as the major win, I really love the plethora of virtual desktops. I use these with ease. I have a triple monitor setup on my workstation, and have at least 3 virtual desktops in use on each monitor, and sometimes using 5-6 on each when really digging into work.

Middle-click is a must have on a GNU/Linux system also. I've seen people bitch about it on laptops, saying it should be removed, but Mac OS X, and Microsoft Windows don't take full advantage of it. Pasting with middle-click is an epic win for the GNU/Linux desktop, IMO.

The largest win, however, is proper package management with Debian. This alone keeps me using GNU/Linux on the desktop, and it's nice to see Apple following suit with their App Store. Cloud package management is vastly superior to "hunt and download".
only a small portion of a full compiler involves translators, though.
We should keep in mind that the Age Of Exploration, circa Columbus, was considered monumentally successful by their Eurpoean sponsors, but being a explorer was nearly a death sentence. (I exaggerate only slightly).
> If the President wanted to eliminate these programs, they'd get eliminated.

Just like Guantanamo Bay, right?
I suspect there's a significant number of people who would actually agree with that though.
> Pascal is a pretty good pseudocode..

Pascal is pretty much directly derived from early dialects of Algol, which is where most modern programming language syntaxes derive; it's the original block-structured syntax, as opposed to line-structured assembly and early FORTRAN and the fully-bracketed Lisp syntax (which is also block-structured if you indent it sanely).
If you're curious: courriel has become the standard term in Quebec, where adopting English terminology is a little bit more culturally / politically sensitive.
"I'd rather make improvements to speed, power consumption, size, and cost"

I think those are optimizations that you care about - but not the average consumer. We're getting to the point where phones of the same price pretty much universally operate within a standard of performance, give or take a margin of error, and can run a day or longer without recharge. At a certain point users stop caring about further optimizations and start caring more about features. And that's where modularity gives a huge pay-off.
That's a bold claim to make when your blog can't function without cookies.

Also, after it loaded, the only point that seemed to be directly related to Rails had to do with teaching designers to use templates and the asset pipeline. If that's your only Rails-specific issue then you're really claiming that Meteor will kill all other kinds of web development.
Countries like Russia and China and Syria and Iran claim that they're spying on whatever they can and control their citizens online expression because (a) they say they need it / national security, (b) they are allowed to do it / sovereignity.

On the other hand, USA had earlier openly claimed in essence something like 'why we'd never, we don't spy on americans (Clapper), we don't record all communications, we're for the open net and transparency, we need to safeguard the internet from China and censorship, and we have 4th/1st amendment, so we're different'.

Everybody else who did that, didn't do it while hypocritically claiming that they're different - so I believe that US really did something unique in this particular instance and deserves special extra disdain for that.

The position of others is that doing all those things is okay, so they do it without moral problems. However, USA had claimed (and apparently still claims, at least for US-citizens) that it's not okay.... and do it anyway.
Open-Sourcing Rearview: Real-Time Monitoring With Graphite
I think the average user on this site is pretty literate. Easily a quarter of the top posts are non-CS related.
Does Meteor scale beyond a single server yet? Because until then I can't see much use for it.
Very well said. Upvoted. The products in almost all fields are facing the same situation. Too many choices are actually huge distractions for people. How high quality products find their new places would be an interesting topic. Perhaps food industry can be some kind of model we can study? Or any other industry that is already facing this? I don't have an answer myself yet, but will keep this question in mind and seek the answer.
Meanwhile you can enable native H264 support on linux with the about:config setting "media.gstreamer.enabled". This requires gstreamer with the respective plugin to be installed.
Yeah, my point was about both the speed and the very concept of being so blasé about how dangerous it might be to get distracted at those kind of speeds. Or pretty much any speed, to be honest.

I too cannot wait for autonomous cars; I hope a day will come when I can actually use one without needing a license! Luckily, where I live, public transport is good enough that I would only really benefit from a car a handful of times each year, and I'm happy to forgo that for the benefits - financial, environmental, safety, etc.
first; you seem to be saying that each leak in isolation has to weigh in favour of the american people. a more lenient judgement might be made by taking everything as a whole and seeing if the benefits outweigh the costs. and even when the advantage is not direct, it may come later - for example, the international pressure from the leaks about intercepting foreign heads of states might lead to reduced surveillance of americans.

second; perhaps here on the internet we need something more international. perhaps he is a patriot in an international sense - since he works for the rights of all people. i certainly appreciate what he's done, and i am not american. of course, an alternative is to say that i am the enemy. but then we get to the american duplicity - they seem to want to be our friends, shake our hands, but then treat us as second class people.

[i wondered whether to include british duplicity with gchq, but they don't really make the same distinction. they seem to quite happily spy on britons and foreigners equally. they are not hypocrites, just assholes...]
Stripe is in the business of fraud detection, just as any other payment provider. Their source code likely contains lots of automated heuristics checking for fraudulent transactions, information which is tremendously useful for criminals looking to defraud people. No need for the "security by obscurity" reflex, because the problem at hand is impossible to solve completely.
Not to diminish the researcher's work here, but even as bad as these security holes are, as reported, I'm mildly non-surprised...just because they've got to be much worse...the most visible parts of this system were cracking...it would be hard to believe that the unseen and often skipped-over parts of engineering would be more solid than what we've experienced, given the laughably short testing period.

This is going to set back electronic medical records for quite a long time. Don't forget the Obama admin put aside $20 billion dollars to fund that, and contractors have been eating up that money for a few years now.
paypal might not be great to work with..

i've previously had $50k locked for over a year (and thought i'd NEVER get it back). I then vowed never to use them again...

but buying stuff with paypal is just SOO easy.. its 3 clicks... so much easier than getting a credit card out.

i hate/love dem

regardless, this offer is pretty attractive
I am sitting at a Meteor unconf today and we are talking about scalability of Meteor... There are some very interesting pieces coming out in the next month to really push the envelope on handling a lot of users at once.

I would agree, we are in the business of building MVPs every day so it is much more interesting to us, I bet.
"Generating 5000 fake accounts falls into the script kiddie level of originality."

Wasn't really trying to be very "leet" with this hack, was just something fun I decided to do. Also deleting the accounts wouldn't be incredibly hard to do at all anyways.

I expected this type of feedback I suppose, the point wasn't to show a security vulnerability in GitHub. Was more just a lighthearted post.
Catchy title but misleading. I can't access the blog. Josh, do you run your blog on meteor.com? You should migrate to a production-like environment. We ran into this issue before :)

My team builds http://vida.io with meteor. We've got 100-200 visits a day, few thousands at our peak.

I'm an experienced Rails developer and dabbled a little with nodejs. I can say meteor will change nodejs framework dev, but not kill Rails.

Some of the serious problems I found developing with meteor:

- Reactive template is nice but can lead to very hard to debug issues. Small portion of applications (in general) need real-time. I often spend time disabling reactive update. There's no really good way to debug reactive update trigger.

- Organizing, switching views/templates can get confusing for site navigation.

- Package system is still infancy, has a VERY long way to catch up with Rails ecosystem.

- Pub/sub model introduces a lot of performance issues. We have to limit the amount of data we send back.

- Security: this is related to pub/sub model in previous point. It's very easy to publish unauthorized data to client side.

- No best practices with the exception of authentication. So everything else takes LONGER to do than Rails. Developing in Rails is still way faster in most scenarios.

Despite of these problems, I think meteor is a promising framework. I like how it unifies client and server. And hopefully, meteor dev team will address the above problems.
Here's a link that was posted upthread.

http://www.minimallyminimal.com/2010/3/15/ecocoke.html

All the text is in jpegs. There are many reasons why that's stupid, but "hey, ima designer so fuck you."
Actually, what I think about is the recent government shutdown where the administration went out of its way to close monuments even when those monuments required no federal funds to keep running... even those monuments that had remained open during previous shutdowns.

Obviously we witnessed an administration that wanted to really put the screws to the voting public to score political points.

Now imagine when they want to do something similar with your healthcare.
Income? yes. Profit? I'm pretty sure, but I'm not that invested in caring.
Thanks! I've been looking for something just like this and ended up getting stuck in a maze—there are a lot of uncompelling editions out there. I'm going to try to track this one down.
Google Picture Machine goes beyond magic
Meteor will automatically refresh your browser if you are reading a blog post about Meteor.
Imagem do Dia: Google Poderá Estar a Construir Centro de Dados Flutuante
Yeah, and we saw how well that worked. Java projects sprung up to incorporate the good ideas from Rails, Rails itself picked up a load of developers and evolved into something decent, and the world moved on. Nothing was killed, but all the boats rose.

I'm thinking maybe the drama wasn't a requirement for this to happen. Perhaps Meteor devs could experiment with that idea.