skysight-inc/HackerNews huggingface dataset:
So it seems the story here is that in older versions of android, if you export a Java class to a webview with "addJavascriptInterface", the js code can get arbitrary code exec by calling exportedObject.getClass().forName("java.lang.Runtime").exec() or similar? And if you can mitm/spoof on public wifis, you can inject js to exploit this in apps that export to their webviews?
Uh oh Justin Beiber is in the doghouse for "BREAKING THE LAW" (EXCLUSIVE)
I don't agree that Google should be the one doing this, most browsers have a setting for referer like off/on/same-domain-only and if someone wants privacy they can set it the way they like.

It's also extremely irritating if you're copying a link to the site from Google.
>The GPL isn't restricting your freedom, your employer is.

I'm freelance. I write games and apps, and I do contract work. I can't use GPL software (except for GCC, which I already noted) in creating any of the products that I create because I need to make money.

Not everyone can make a Free product so popular that they can make money being paid to maintain it. I think there are probably fewer than twenty examples of such products that are actually monetarily successful for their creators, and I've read multiple stories of developers who had crazy-popular free products and who were unable to make ends meet.

Not sure how you expect "my employer" to make money giving products away for free either.

It's not "my employer" but the market realities that restrict my freedom with respect to GPL. I can't even publish an iOS app with GPL code; blame Apple all you want, but iOS and Android are gold mines of contract opportunities. You're telling me I should stand on some feel-good principle and ignore the $125-150/hour contract offers that keep pouring in and instead take a job making free software for 1/3 that amount? If I can even find such a position?

Sorry, I'm taking the money. You can make the sacrifice if you want.

>Microsoft will charge you for the privilege of using their inferior compiler

Express editions have been free for years. And that includes the entire VS suite as well as command line compilers.

>"Oh boy! B is giving me more stuff for free than A was, I'm going to go shit on A and make demands!"

Umm...hello? That's entirely unlike what I said.

What I said was: Lots of Free stuff sucks enough I'm willing to pay for closed alternatives. That's two kinds of payment: Paying with dollars, and paying with the restrictions in my freedom. And I'm saying the transaction is worth it. I'm not making any demands. I am saying that a lot of free software sucks compared to the alternatives, but that's just the truth.

In the case of Clang, it's awesome to me that it's BSD-free. If I need it in a piece of software, I can use it without question. Might it end up in a proprietary package? Yes. But if that user makes changes they'll likely send them back upstream so that other users of Clang will benefit.
What's unfair about it? He was able to report it first and thus got karma for it. Although I agree that comments should have more weight than posting links. But I think it's a chicken and egg story.
Running out of money... failure?
I'm thinking of stopping my startup, not because its a bad 'idea' or i went ahead and made a rookie mistake with making tech. that no one wants, or any of that.

Plain and simple: I ran out of money .

I see a new potential career in a separate set of IT (IT Sec), but have always been a developer at heart - now 25, have been developing since age 15.

I wish it didn't have to end this way.
So if you cut yourself you get treated as a criminal and tortured? What the hell is going on here? How is this even legal?
Yes. So? Your point is?

I called it out as the only thing I do use.

And I may transition to Clang from gcc if a build problem I encountered with an older Clang version is fixed. That leaves gnu make.

And make sucks for many, many reasons, but that's not Gnu's fault. It's just that all the other building solutions suck more.
Bitcoin can already support retail confirmation within seconds without risk of fraud. See https://en.bitcoin.it/wiki/Myths#Point_of_sale_with_bitcoins...
Karma hardly matters, so I guess it doesn't matter if it's unfair.
not necessarily; the relative desirability of oakland might have increased faster than the relative desirability of san francisco, compared to their respective 2008 values
A third option other than hit-piece or vendetta would be just page views.

A lot of tech writers and bloggers just write counter pieces to popular articles in the hope to get read, spread and shared by whoever dislikes or disagrees with the original article. It's become very common to see articles like "Why [insert yesterdays top HN post] is wrong/will never work/is flawed/..." on HN and reddit.
This game also helped define me. I remember running around 5th grade thinking in my head 'beep pause pause beep beep pause'.

I created a parallel to serial and back set of chips to create a remote control system to get through the invisible maze level.

I played this on either a Tandy color computer 2 or 3 ... not sure which. I wonder how many engineers/programmers this game created. Such great memories.
There are definitely some bad parts of st. louis, but I have to say, the one main rule: stay out of east st. louis. It's pretty bad news.

Luckily, if you're in the missouri section of saint louis, you'd have to stumble pretty badly to accidentally cross the Mississippi and end up there.
to be honest i keep bumping into homesexuals (of either sex) in SF. I think its a pretty large part of the population, compared to other cities. if you swing that way, I'm pretty sure the dating scene is quite above average.

note: im straight
Is it not possible to read wsj articles without logging in?
If you do not have kids - I really do not see how you can say you do not have time for side projects. I live in manhattan, work between 50-70 hours per week, have a girlfriend, exercise 5 days a week for 1 hour, drink a lot, and watch some tv (HBO only), and have multiple side projects.

Here is what I do not do: watch sports (huge time suck), watch TV (unless im programming at the same time), commute to work (5 minute bike ride), go to bed early, have kids, program because I have to.

I would love to see a csv with one column that is "Have side projects (Y/N)" and "Watch sports weekly" in the other .... I think you would see a trend
The developer of SpaceChem also created The Bureau of Steam Engineering http://www.zachtronics.com/bse/bse.htm and The Codex of Alchemical Engineering http://www.zachtronics.com/alchemy/alchemy.htm which are both free.

Incidentally, I didn't realize that he was the creator of Infiniminer. For those unfamiliar with the game, it is what inspired Notch to create Minecraft.
if i had a business based in SF and wanted to move, i would move to west LA.

actually, i already did that, years ago.

SF is a pain in the ass to live in, even if you have lots of money.
They only have your outbound mail (which admittedly may include quotes from inbound mail), and are (ostensibly) not storing it long-term.

I've been running a split setup like this for a year or two. I found that my free-with-apartment internet connection, amazingly, gave a fairly static IP (it was DHCP but usually the same) and unfirewalled inbound ports, so I set up a mailserver for inbound mail and IMAP storage. I figured the IP might be on anti-spam blacklists, firewalled on port 25, or shut down if the ISP saw me mailing out, so I sent outbound mail through Dreamhost. It was nice to have the full copy of my mail in my house, with backups and spam filtering under my control. Sending outbound through a 3rd party wasn't ideal, but I thought a decent compromise to avoid having to talk to the ISP and risk the free public IP being taken away (I wouldn't have even known who to contact anyway.)

As a bonus, I set the Dreamhost mail server as a backup MX with the same email address I host myself, so they catch mail for me if my server or connection goes down.

I now have official "small business" ISP service that includes several public IPs, so I am transitioning to sending my own mail, now that it's definitely kosher and I'll have support.
Reads familiar? The outage pattern is identical to the one impacting GitHub January 8 [1] with my comment in the thread discussing the root cause [2]. Systems generating config files and then pushing them out to services within the infrastructure without proper checking and linting. In google's case, I just can't believe their systems are so delicately integrated and such critical component so botched up.

[1] https://github.com/blog/1759-dns-outage-post-mortem

[2] https://news.ycombinator.com/item?id=7081913
> But I think it's a chicken and egg story.

Boot karma.
I did the same thing but I skipped past Sac to Yuba City.

13% cheaper housing here according to the same site.

I'm renting a 4/3 2500 sq ft house on an 8k sq ft lot 3 blocks away from an 8/10 greatschools.org K-8 (I have 3 kids.) for $1600/mo.

I telecommute to my Bay Area job.
A buddy of mine had a theory that the lack of acting and fashion industries (compared to LA and New York respectively) had a significant negative impact on the overall attractiveness and gender balance of the general SF population.
and sleeping in your car then. because if you rent, no luck.
I gotta admit, even though I already knew this in the back of my head, the most surprising thing about this is that Google still uses Blogspot for stuff.
I'm not sure if Klang is another software project, but if you meant Clang it is not non-free. Because it is not copyleft, its code can be used in things which are non-free. There is a distinction.
they're pretty close to the price of SF. else, please mention one that is less than an hour of commute away.
https://www.backupify.com/ do this for Google Apps - works pretty well.
? Top left is a link that says Home.
The American mental health system is what's going on here. And it gets worse.

Just the other day I was listening to an NPR article about how jails deal with mentally ill inmates. Alot of them seem to end up there for committing minor crimes that stem from their health problems (such as, to quote the article, "action out"). They receive some care in jail (but very little) and none when they are out. Here's the link: http://www.npr.org/2014/01/20/263461940/mentally-ill-inmates...
The main thing that comes to mind is why they do not deploy these kind of changes to a small slice and smoke test the slice before deploying to all users? This seems to be a pretty common routine for services at scale nowdays...?
Let's take apart the specific supporting paragraph here:

Giving up grilled, smoked, and fried meats seems equally bizarre today, but population-wide changes in dietary staples have dramatically affected cancer rates in other parts of the world.

OK, good so far, we're going to get a case that illustrates why grilled food is bad.

In the early 1970s, liver cancer killed nearly one in 10 adults in Qidong, China, a region located at the mouth of the Yangtze River. Two factors contributed to the astonishingly high prevalence: widespread infection with Hepatitis B, and food contaminated with aflatoxin.

Aflatoxin? OK. Known carcinogen. But how potent compared to the result of grilling?

The soil in Qidong didn’t support rice cultivation, so the population relied on corn. Growing and storage conditions encouraged the growth of a mold that produced the potent carcinogen.

That sounds VERY bad. Bad enough to show a large regional difference in outcomes.

When food trade between regions opened up, the residents of Qidong largely switched to rice. By the late 1980s, exposure to aflatoxin in the area had dropped more than a hundredfold, and the liver cancer rate has halved.

So a 100X normal exposure to aflatoxin doubled liver cancer. This leaves me puzzled. I'm not searing a hunk of red meat over wood every meal. Both the red meat and the open flame are probably a Bad Idea. But how much do I have to do that to move the outcome by a measurable amount? At what point does it matter more than simply eating less? Or eating less processed food?

If you are grilling your meat, you at least bought some meat, and perhaps other unprocessed ingredients of a meal, instead of some processed concoction. Is this a first world foodie problem?
I think most people outside of technology wouldn't easily understand copyleft, and a day might come when I depend on those people. So it's a trade-off between my rights, users' rights, and my peace of mind. The rights I give up, by choosing BSD rather than GPL, I don't think I could enforce without losing my peace of mind.
> and avoid wdc greens

Why? Backblaze reports 3.6% AFR on wdc greens over 4.4 years, which is pretty good.
It's strange that Google did not make validation/testing to configuration files in isolated servers, before publish them to production servers.
The next iteration is planned for tomorrow, we are taking into account the maximum of feature request possible.

We will ask for new feedback after :)
I assume there's a point in overall speed where the slowdown from caps-up/down -> letter-up/down -> caps-up/down is worth the reliability drop from coordinating shift-down -> letter-up/down -> shift-up. I think I hit that point sometimes entering passwords and other frequently entered info, but the reality is for most typing none of us get there.
I think most communities that rely on a points system need it to be a little "unfair" as incentive for taking the time and effort to find and post fresh content.
I assume not. "Go back to reddit" is a memetic response presumably posted for peer acceptance.
Also reminded me of this CloudFlare outage from last year, where a bad configuration rule caused their routers to crash:
http://blog.cloudflare.com/todays-outage-post-mortem-82515

In that instance the rule was written by a human, but deployed automatically to their entire infrastructure before they could notice the problem it caused.
Desperate attempts to wash themselves of liability.

If a Yellow Cab driver killed someone do you think they would deny, admit and then caveat with 'but he doesnt really work for us because he didnt have a passenger in the car and his lunch break was coming up blah blah blah'
I agree that there's no reason to assume that Salt discourages the use of a feature that clearly required time to implement. But in the docs and videos I've seen of the new interface the words "way slower" come up over and over again.

There's a vibe that salt-ssh is an answer to folks who would use Ansible, and less a feature that Salt has long had on it's list of things that need to be implemented.

Not saying there's any truth to that statement, but that's the vibe I got from the folks I know who use Salt and knew that I preferred Ansible at the time. So while the word "discouraging" is a bit heavy, there's an absence of leadership as to why salt-ssh was developed and when it's appropriate vs. 0mq.
In general, if you seek help you will only be punished.

My sister sought help for a sleeping disorder, and received nothing but a suspension of her driver's license. She then had to overcome her medical difficulties on her own and pass an unreasonably arduous test to get her license back.

My coworker went to our boss to say she couldn't make ends meet and needed some kind of raise (making $25k with 2 kinds in bay area). He fired her for being a liability.

I went to the police to report a hit and run, and they used it as an opportunity to search my vehicle in an attempt to levy charges against me. They openly acknowledged they have basically 0 ability to actually find the perpetrator of the real crime.

I ask myself almost every day, as I'm innundated with needless financial and societal burdens I cannot shoulder, what obligations does society have back to me? I cannot think of any.
No, because they might be paying someone else to do the development.
in the speed chess video above, why did both players advance all their pieces off the back rows for the midpoint of the game?
Here's what I know about mobile so far
the one I left off the list is that people don't want a copy of the web experience on mobile...they want a customized, context-aware, experience (that might augment the web experience)
It's almost certain that they do in general do this and the fact that this is not what happened is part of the issue. Any blog post describing something like this is going to leave out details such as this.
A great tool for testing on different device screens
I miss tower grove park, forest park, and the botanical gardens most about having left stl. Partly because I could see the botanical gardens from the balcony on the back of my apt, though
Welcome to the mental health "industry". I avoided it, thank god, though by rights I probably shouldn't have in some ways. I self medicated with heroin to avoid being locked up in hospital, with little visitation, no computer, no life, for six months, just like people I knew had. Now I've spent the last year and half getting clean, after 7 years of addiction... And what scares me is that I seem to be doing better than those that went through the real system.
That's why you offer relocation.

If a startup has a cool mission, a cool tech stack, -and- operates in an area with a low cost of living, low congestion, and plenty of culture, art, and restaurant variety/quality, it can compete quite nicely with yet another Silicon Valley company when it comes to attracting talent.
Sounds like a problem what Dropbox had experienced recently too: https://tech.dropbox.com/2014/01/outage-post-mortem/
For those of you who write code for your side projects how long does it take for you to get ramped up and going. Sometimes it can take me 30 minutes before I feel like I'm in the full swing of things and if I only have an hour total of free time that means next to nothing gets done. Somedays I find it particularly hard to flush out problems I've been thinking about at work switch gears and work on problems for my own projects. My mind will just get stuck in a state of trying to crunch on the work issue.
So this is about protecting the rights of people rich enough to hire developers to work on bespoke projects that cannot be distributed as proprietary. I.e. Large corporations.
It's my email FAQ. I get a lot of email - it's my largest social network containing 1000's of connections. I came up with the idea of the FAQ to head off having to answer the same questions over and over again. I used to have it as a list of social networks (twitter/skype/phone, etc.) but people ignored that. And that didn't allow me to give the details the FAQ does. The FAQ catches people's attention better than the traditional signature. It has cut down on those kinds of questions by ~70-80%, I'd say. So maybe it's presumptuous, but it was the more successful of my A/B testing. And it's not as noticeable when there's a big ol' email on top of it. So WHO does something like that?!! Me. I do.
Can Warden be install on FreeBSD (not PC-BSD flavor)? Wondering, it looks nice.
The price of a house usually translates into how much the monthly/annual payments are for the house since it directly effects the demand curve. Up property tax prices and house values go correspondingly down. Up average incomes, house prices go up, etc. Decrease interest rates enough and housing prices can go up significantly.
Hi,

Your post is lacking a lot of details. For example, you're thinking of stopping your startup, but you don't mention what it is. You're worried about taking on other work, but that's fine. Lots of people do other work to pay the bills while making a startup. (Or you could sell your VW bus like Jobs...)

Did you release an MVP? Did you have traction at all? People sign up?

Have you pitched to any investors? Incubators? Accelerators? What about pitching to whatever-the-hip-new-buzzword-I-don't-know is?

Please don't be depressed, but please also fill us in on more details,

—e^1
That's not accurate. DO's bandwidth is simply cheap, it doesn't matter what tier you go with or how much you use. The $5 plan is merely a convenient illustration, as they embarrass AWS on bandwidth cost across the board. At $0.02 per gb on overages, it's six times cheaper than the 10tb AWS tier.

To match DO with AWS on bandwidth cost, you need to burn a few petabytes.

10tb on AWS? $1,200. Given how cheap bandwidth is these days, that's beyond outrageous. Amazon is charging for bandwidth roughly a hundred times what it costs them.

Now let's say you're actually heavy utilizing DO, so you've got one of their bigger plans and burn up plenty of bandwidth. Their $480 plan comes with 8tb, and the extra 2tb (to match 10tb on AWS), will cost you a mere $40. 16 cores, 48gb of ram, 10tb of bandwidth, for $520.

Of course it's understood people use AWS for reasons other than price.
Can anyone comment on why Swiftype (a YC search-as-a-service) startup isn't providing search for HN? It seems like an obvious choice (although the Octopart-powered search seemed to work great).
Actually if you read the case, they say that growing the wheat was OK. Harvesting it was OK. Using it as fodder would have been OK. The unlawful act was threshing the wheat.

Ambrose Bierce was a sunny optimist.
You can get a 2bed for $1k in east bay richmond :p
Secrets of maintaining high perfomance development teams
I am explaining how the victim feels. The issue is not the groper, the issue is everyone else, who may or may not react the way you think they should.

Look back at the story of the woman who stood up for her feelings at the tech conference by calling out behavior she thought was inappropriate. Some people agreed with her, but others derided and attacked her.

Whether one side or the other was more morally correct in your eyes is not the point. The point is that it sucks to be the object of social tension.

And it's not really fair for you to define how tolerant other people should be of that pressure.
Say that to some gay rights activists

Which ones? Besides the unnamed one you mentioned, I mean.
Oh, variety is good. Weather here in Denmark is so plain and boring. The only remarkable season is May-July, thanks to the long days and relatively warm weather.

I totally agree humidity is horrible. I've stayed a few summers in The Hamptons, Long Island---and humidity was a killer. I cannot imagine coping with 102 F / 94%.
You learned a valuable lesson about making sure that you invest time in building something that other people are willing to pay for.

Go get a job, make some cash, and try again later with the knowledge of how important the business side of things is.
I put chicken on my plate. I taste it. It is not salty enough. I add some salt.

Obviously, we wouldn't call this "cooking chicken", but I'm participating in the creation of my final meal. We can add arbitrarily more, arbitrarily complex steps and ingredients.

It totally makes sense to say, "this person is developing software" or "this person is cooking chicken". What is rejected is the notion that eating the chicken means you're not taking any role in shaping it except those roles explicitly given to you.

When I make boxed macaroni and cheese, I add nutmeg, and the result is way better. It's a good thing I have access to enough of the guts of the recipe to make that change (... or maybe it would be better if I ate less boxed macaroni and cheese, but I think you follow the metaphor).
New Tor Denial of Service Attacks and Defenses
I'm sure they use Canary Deployments, Gradual Rollouts and what have you to update their services.

I suppose this is a hard problem to solve on a configuration change level though. Imagine the configuration change that triggered the bug was something like "hey load balancers, stop sending traffic to the cluster with that new version of service X which seems to cause elevated error rates." You don't really want that kind of change to take too long to propagate.
I rather quack it :)
Must be a slow news day.

This same storyline, written over and over again by different writers, is really getting a lot of mileage.