skysight-inc/HackerNews huggingface dataset:
I work at ActiveState on Stackato, which is a private Platform as a service. Similar to Heroku, only for private hosting (e.g. you host it on your own hardware or hypervisor). We use Docker as of our v3 beta release today (http://beta.stackato.com/). Our use of docker in 3.0+ means that we bring their tuned security along with us (they integrate with apparmor really well, in fact they require it to start up a container). Here's a really good overview of LXC (and docker) security in general: http://blog.docker.io/2013/08/containers-docker-how-secure-a...
Except the funny thing is they're not that baffling.

The first two can literally be read and understood in about a second by anyone who knows lisp. "Oh noes, they're not using the latin-alphabet for everything! Whatever shall we do!"

The third one is an example of taking away all indenting and spacing from a presumably badly written function, which makes any language unreadable, but at least in lisp consistent indenting and spacing is relatively easy to accomplish.

I suppose the obfuscated C contest entries or PERL golf would actually be far harder...
To clarify, the default copyright rules apply (which means, more or less, no copying allowed).

Copyright very much applies to MIT/BSD/GPL licensed code as well. In fact, the mechanism of the GPL requiring changed+released versions to include an offer for the (modified) source code depends on copyright.
I believe that usually the underwrites have buyers for all the stock prior to the IPO. The only reason they intervene to keep a stock from plummeting is to secure their own profits as they usually get options on the stock as part of the IPO deal. Talk about conflict of interest. Obviously a lot of the buyers are funds managed by other investment banks. Again talk about conflict of interest. What was the story the other day, that GS didn't record a single day of trading loss for an entire year...

That said, most of the money still does end up in the company which can use it to build its business. The process isn't completely broken. But it's very inefficient.
Not a fair comparison. They spent $100MM on a movie knowing that they will net $X00MM in profits.
From using their ad service I can say:

their demographic targeting is razor sharp, you can target followers of specific users, or people within any of the standard demographics. You can also target people by specific interests.

I think this is the AdWords for branding
Alright, since you can't speak for yourself or rebuttal with anything more meaningful than "This is nonsense.", I'll respond to the article.

1.) Quantitative Easing is printing money
--
"This is because when the Fed buys bonds from banks it does so by crediting those banks’ accounts at the Fed with reserves that didn’t exist before. But it’s misleading to call this process “money printing” because it doesn’t actually do anything to increase the amount of money in circulation. In fact, in our monetary system, most money is created by private banks and not the Federal Reserve. When a bank lends you money on your credit card, that’s “printing” money."

They say it's misleading to call it "printing money" because all they do is increase the amount a private bank can lend out. Apparently it's not their fault for putting in the extra reserves, it's the private bank "printing the money."

2.) Quantitative Easing will eventually lead to inflation:
"If the government literally began printing money and started mailing out new $100 bills to citizens, that would lead to price inflation."
---
Apparently, using their own example above, people getting lent more money and using that lent money is not inflation. The author is purposefully evading the core argument and instead paints a ridiculous definition of inflation (direct inflation). It doesn't take a genius to see that more reserves = more money to lend = more money to spend = more money in circulation.

3.) Quantitative Easing is responsible for recent stock market highs
---
Point isn't pertinent to the discussion and quite frankly, I don't care. The stock market is driven by people who decide to buy or sell. When more people buy, prices go up.

------

So, what are your thoughts?
Just curious - where have you hosted your service and what mechanism did you use to scale based on traffic?
We're doing a similar thing called Orchard:

https://orchardup.com

We give you a standard Docker instance in the cloud - all the tools work exactly the same as they do locally. You can even instantly open a remote bash shell, like the now-famous Docker demo!
If you can't tell if it'll grow into the valuation, you can't really claim it's overvalued. The fact that you (or the company) don't see reasons to value it so high doesn't make it true.

Besides, there's no reason to believe that Twitter itself choose the price based on their own valuation of the company.
I thought that was only for American Express? It allowed me to enter 4 numbers with an American Express card number. There wasn't 4 little placeholder dots, which was confusing.
> At a minimum, one must wait ten minutes for the proposed transaction to be included in the block chain, and for large amounts it is customary to wait for six blocks, or one hour. These times are much slower than those to complete electronic retail transactions in most other currencies (e.g., a few seconds to charge a credit card either online or at a physical retail location)

the person who wrote this is a senior economist?

First of all, you don't must wait ten minutes or one hour, you wait iff you want confirmations from other peers saying that the transaction is actually included in the blockchain, more time you wait more confirmations you get. But in the practice you only do this when you can't trust the other party, and many times the other party is using an well-known online wallet that let you use a green address (https://en.bitcoin.it/wiki/Green_address). So, you can have almost instant transactions with Bitcoin.

Actually credit cards don't takes just "a few seconds to charge", that's what the final user thinks, but the reality is that it may take weeks to process and transfer the money to the seller bank account. And also the level of fraud with CC's is astounding; that's why we have to pay a lot of fees (I mean, CC's intrinsically needs insurance).
Here is a interesting series of articles about CC:
http://boss.blogs.nytimes.com/2013/03/25/what-you-need-to-kn...

By the way, with real cash the time for a transaction is equal to the time of one party giving one or more bills to the other party + the other party verifying if those bills aren't fake + (not always but usually) give the change. :)
Could you explain why you think that IPOs are scams that don't actually create wealth? Or is it just this one?

Though I'd rather say that an IPO serves to acknowledge the worth already created by the company before the IPO?
That's not a terrible conclusion. Square loses money on lots of transactions (small ones--under ~$8 and they're losing money). Credit card processing involves a per-transaction fee which really adds up for small purchases and Square's pricing doesn't have a minimum or a per transaction fee.

Then there are things like Square Cash that make no business sense (there's no revenue, only expenses and risk). Great for consumers while it lasts though.
I have no idea if this is supposed to be ironic or not.
Microsoft urges rethink of Australian NBN plan
Show HN: Football Heroes - The Return of Arcade Football and our first iOS game
The iPad version is over at https://itunes.apple.com/us/app/football-heroes-hd/id692267420
I'm curious what problems you faced with PIL on Pip. I never tried installing it before today at work on Travis using Pip. Despite of all system libraries (jpeg-dev, zlib-dev) installed it would complain about libraries not being present and compiled without png/jpeg... support.
The other major Browsers on Windows do not solve, work-with, nor integrate with the metric-tons worth of enterprise and business issues, needs, and past + current solutions. Nor do they take backward compatibility issues seriously.

This is probably 50% of the game which makes Microsoft money with the Enterprise.

You're thinking of the Consumer market.
An Offer From Amazon to Its Most Bitter Rivals
Yes, but Gravity has earned over $218 million dollars so far so if they had made Gravity, they'd now have their money back plus another $200-$300 million dollars. Bollywood should make a few American films every year or so. Where's the Pixar of India?

A better argument might be that a country needs to develop other industries and gain certain expertises. There's no point in having all the IIT's, if people have to leave the country to use their abilities. Space, rocketry, satellites, etc are upmarket skills.
Found another issue: in Chrome (v26.0.1410.63), typed in 1234 1234 and the numbers got rearranged to 1234 2341
Informative Wikipedia Animations
I admit that this may be a fuzzy edge case that I'm not completely familiar with, but I think the objection is not that Congress is completely exempt from the act but that the president had the executive branch issue a rule that allowed the government to subsidize congressional health plans, where this is not allowed in any other business.

This is technically separate from the waiver objection.

I know there's an objection here, so if you can find a reference to it I would appreciate the clarification.
Squire.
How is consuming billions of dollars of the time of talented specialists a good thing in and of itself?

There's an argument that it's the best possible thing they could be doing, or that India's space program is extremely cost effective, etc. But an expenditure is a loss not a gain--otherwise we could make ourselves rich by breaking all the windows in the world.
Why Nexus devices don't come with SD card slots
You can request a refund through Knock. I saw a link on their twitter IIRC. @knocktounlock
And people were paying for their medical care gotten in emergency rooms too
So diligent. I didn't even notice that it cost ~$150 to use.
heck yes.
Could you explain how or why this is unfair? I don't think the OP was suggesting that Gravity's expenditure was therefore not worthwhile. If anything, your comment adds further weight to the comparison by illustrating the scale of a major motion picture in terms of expenditure and profit.
Additionally, just knowing that code reviews are going to happen often results in developers putting in more effort to submit quality code.
Beyond LastPass and such, one long-standing UX implementation is in Mac OS X, when you go to change a user's password. It even has an interesting dialog box, though the pre-selected passwords tend not to be quite random enough for my tastes if pronounceable. A variation of this has appeared in Safari on iOS 7 with iCloud Keychain turned on: Safari will now suggest a password in the autocomplete when you go to fill in a registration form it can recognize. This, while surprising, really does work assuming someone can "save" the password at the same time. (Hence why it's rarely done on the web unless you have such tools, but people more often do these days.)
Building automated test is like getting a flywheel going. Sure it might be difficult to start, but once it's gets going, it will take you very far with little incremental effort.
Absolute Resources To Flat Design
Flat Design was no doubt the biggest trend in web and user interface design this year. The design itself is having a few particular you need to consider: colors, typography, web elements and use of free space. Before we dig more into this, remember that flat design can be used to create fascinating websites and user interfaces, but is not suitable for every project. Be creative in what you are trying to accomplish, both visually and from the marketing point of view.
That is my suspicion as well. It doesn't strike me as correct that technical limitations prevent them from offering all languages in Saudi Arabia or Russia, but the Democratic Replubic of Congo has it figured out. Going from wikipedia, it seems like Saudi Arabia has far more developed telecom...

http://en.wikipedia.org/wiki/Telecommunications_in_Saudi_Ara... http://en.wikipedia.org/wiki/Telecommunications_in_the_Democ...
Have you written or read much Dart?

It's pretty damn concise and a far sight from Java. It's more concise in many cases than JavaScript (and only more verbose around things like type coercion where being explicit is a much safer choice). I admit though, that Dart is more verbose than Perl :)

C-style syntax doesn't have to mean verbose when you have features like short lambdas, optional types, string interpolation, operator overriding, getters and setters, setting instance vars directly from constructor parameters, fewer keywords, mixins, etc. C-style syntax also makes the language pretty much instantly readable, and if you're targeting web developers, being familiar to JavaScript, Java, C#, and ActionScript, is really important.

Honestly, Dart is the most readable language I've used, and that includes many years writing Python.
There is a caret bug that messes up typing: http://cl.ly/image/0H3F1O030m2Q
Just for Windows users.
Lots of these people are looking at Gold plans instead of Bronze plans on the site, when Silver and Bronze was far closer to their old plans.
I think that a single page resume especially in a technical field is difficult if you want to have projects, jobs, schooling etc all included. A two page resume I would say is the maximum size a 5 page resume would be way too long and probably has a lot of extra fluff (unless you are including publications those take up a lot of space)
Yes re client side generation though it might not be as random, the point is to encourage people to not use the same password. It could be combined with an educational note "Why use this password?" or "Why should I remember a different password? You don't need to..."

Client-side is always MITM friendly without certificate pinning and strong SSL, which is why I have to dial down the paranoia a bit myself: I was just now thinking that you could plant a non-random auto-completed password, but then if you can do that you could just listen for the real password too. (We're assuming you're running JavaScript here after all.)
You guys at Stripe are amazing. I love you guys.
NIST to Review Standards - Cryptographers Cry Foul Over NSA Meddling
A boy oversleeps on train, uses Google Maps to find family 25 years later
I suffered from this problem until I found myself in a hiring manager position where I had the opportunity to review a bulk load of CVs from hopeful candidates applying for a job that I had the power to grant them.

If this is something you suffer from, I suggest you ask your friends to all send you their CVs and spend a few hours going through them as if you were preparing to interview them...
Portability across OSes, especially for non-shell scripts?
Pretty much. News coverage of the humanities has the same problems as news coverage of science and technology.
Hijacking the topic - I'm co-founder of a startup called PetroFeed[1] that's building a GitHub-esque platform for the Oil & Gas industry. We've raised $3.1M, have 7 team members currently, and are moving out of closed beta by the end of the week. If you're a Rails dev interested in this area, I'd love to chat with you!

[1] https://www.petrofeed.com/company/careers
Science has trickle down effects in terms of know how filtering into industry to solve real world problems.
The minimums hardly make these plans "Luxury Plans".

The (very good) reason to have minimum coverage requirements is to push people from burdening the acute care system (ERs).
This is necessary in order to keep overall health costs in check. We cannot, as a society, continue to have people rely on ERs for their only care.

Some of the lavish coverage that is now required[1]:
* Blood Pressure Screening
* Blood Sugar (Diabetes) Screening
* Cholesterol Screening

All of these things are precursors to chronic (expensive) conditions. It is much cheaper to manage these things before you develop heart disease or diabetes. Mandating coverage for these things is simply the smarter allocation of resources than treating the end-stage disease.
This is great: interesting systems research (reconstructing CFGs from bytecode, converting to SSA, discovering type constraints for registers, and slicing to find which code influences which registers) and a good starting point for crypto security.

I'm particularly happy to see them pointing out how easy it is to end up with ECB mode, which allows attackers who can merely influence plaintext to decrypt messages a byte-at-a-time, "Hollywood-style". ECB is for Java the de facto default, the one you get when you ask the JCE for "AES" without specifying a block mode. This is no surprise: the other modes all need IVs and nonces, and so libraries give you the one that doesn't need more options when you don't tell it to. It's for this reason that we call ECB "the default mode"; it's a quirk of ours, but a useful one. Don't use the default mode.

Here's the list of things they looked for:

1. Don't use ECB

2. Use random IVs for CBC mode (if you don't, you end up with ECB-like properties for the first blocks of messages).

3. Avoid constant encryption keys (if they're constant, they're trivially discoverable by attackers, and encryption is cosmetic).

4. Avoid constant salts for password-based key generation (so that attackers can't precompute tables).

5. Use at least 10,000 iterations for your KDF to slow down brute force attackers.

6. Don't pass static seeds to SecureRandom, which can have the side effect of turning off cryptographic randomness, destroying the security of your system.

The one thing I'd caution readers about is to understand the limitations of this analysis. The authors are demonstrating the power of a particular static analysis technique, and also providing a useful survey of just how bad app crypto is (over 80% of the thousands of apps they tested flunked these basic tests!).

But that list above isn't "The Six Commandments" of good crypto; it's missing extremely basic stuff, like never encrypting without authenticating, never repeating a nonce or counter, &c. We set out to build challenges to capture things we'd seen going wrong in real cryptosystems we'd tested, and we have more than 64 of them now.
I am interested in the mental process in picking and in committing.

In order to pick, you must have things to pick between. I'm not sure you can even practice picking without having a backlog.
Well, some people appreciates jewelry because of the rare materials, some other people appreciates "difficult" numbers (like big prime numbers, a more accurate pi, or in this case hashes that starts with many 0's) :)
Hey, it worked for Heroku.
How can we make the Netflix github portal better?
Hey, Sean here from Reveal. Thanks for the feedback.

Making the 3D view useful for large view hierarchies is exactly why we implemented drilldown so you can focus in on one section of the view hierarchy. Try double clicking a view in the outline or canvas. It may just be personal preference, but we've had many people comment that the 3D view is immensely useful, and we've found it useful in our own use of the product.

This presentation I did at Melbourne Cocoaheads might shed some light on how useful that feature (and others in Reveal) are. https://vimeo.com/78441103. Scratch the surface and I think you'll find a lot of other useful features.
It is difficult, but it seems to be appreciated. Whilst I'm only one data point, the last time I was looking for work fully half of interviewers commented favourably (and even thanked me) on the fact that my CV was a single side of A4; I tell myself that if I can't convince someone in a single side of A4 that I'm worth interviewing, extra pages will only make things worse. It forces me to really think about which of my skills and experience will support my application.
I was actually pretty keen on purchasing this. Today I'm building a payment page. I don't mind paying for something good that will save me time.

But it doesn't look like you provide an uncompressed version for review. I can't use a third party library that deals with credit cards without first reviewing the code.
We just launched a new version of our Github portal, and I would love to get your feedback on how to make it more useful to hackers and developers.

Thanks!
It is protected from the same race conditions that this apparently protects you from.
I had the same issue with the numbers entering incorrectly.
$acceptablePageLength = ($yearsExperience / 10) + 1;
No. ASan does not detect leaks among other things: http://code.google.com/p/address-sanitizer/wiki/ComparisonOf...
That certainly wasn't by me. HN is legion, for it is many.
I can't speak for the parent here but for me I would rather them not spend so wastefully so that I don't have to give them 30% of every dollar I earn. So how about spending some of those trillions to give us all some of our taxes back.
There are lots of software developers out there, that shouldn't be developing software in first place. They could be excellent farmers, musicians, athletes, but for whatever reason they decided to be software developers. And it doesn't matter how many scrums or code reviews you throw at them, they just won't get it. They will be producing miserable results making everyone around them miserable.

On the other hand, there still are a few decent, old school devs, who don't need hand-holding, constant poking and distraction of standup meetings and writing meaningless test cases that check if 2+2 is still 4. They just (1) understand the problem and (2) write code that solves it. As simple as that. Good old engineering, like these guys: http://www.youtube.com/watch?v=8kUQWuK1L4w. Or original SAS system - its reference manual was better quality then any statistics textbook. Unfortunately those days are gone now and we live in the kingdom of Scrums and Frameworks.
I really tried to understand this - but completely fail to. Can you try and make any sense at all? How in the world is something productive - that leads to mankind as a whole gaining knowledge and information AND to India bolstering national pride and marketing itself as a Space logistics provider to the world - even remotely comparable to breaking windows? Geez - by your logic everyone should keep money in their mattress and go to bed.
Ah you're right, sorry, my point was that cells are being damaged all the time and then repaired, but it's not quite the same.
> How is consuming billions of dollars of the time of talented specialists a good thing in and of itself?

Well, I didn't say that it is, I just argued that it wasn't a negative thing. Wealth was not destroyed or sent away to some far off land, just shuffled around within the same country.

I will say that it is now though: One of India's greatest assets is their production of quality engineers and scientists. The more money they can dump into engineering and scientific endeavors, the better. Unlike breaking windows and then replacing them with identical windows, programs such as these actually create something: experience and expertise.

In evoking the broken windows parable, you are mistaking a rocket for a window. Space programs do not destroy wealth to move money around. Perhaps if we senselessly knocked down a few buildings every time we built a rocket, you might have a point; space programs aren't "cash for clunkers", we aren't destroying wealth (old cars) to encourage the exchange of money (buying new cars).
TG's behavior strikes me more as trolling...the example you gave could play out like:

NC: “After the first week he hasn't interrupted me with questions every hour, unlike some of the previous interns.”

TG: “Which of the previous interns?”

NC: “Bob and Alice.”

TG: “Why were their questions inappropriate?”

etc.

Folks like TG can be sociopaths, where a game is being played with the aim of making the target spend more effort on the response than it takes to ask the question.

There are also chat-bot AIs that use interaction patterns like this to keep the subject engaged as long as possible.