skysight-inc/HackerNews huggingface dataset:
For the privacy-conscientious user, your site provides one of the worst experiences I've ever seen.

To get anything to work, I had to allow scripts from www.codewars.com, push.codewars.com, two CloudFlare domains, AND platform.twitter.com. While my usual process to get JS-heavy web apps to work is load scripts from the domain itself, plus any standard CDN domains (like CloudFlare), your site does not work without widgets.js from Twitter, which is pretty crazy.

You depend on three different CloudFlare subdomains - one of which serves a tracking script, on top of you trying to load tracking scripts from MixPanel, Google Analytics, Rollbar, Intercom, Twitter and Facebook. I only loaded what I had to, but I think it's safe to assume that you would have pushed more domains on to me had I loaded everything.

Edit: the complaints in the two paragraphs below are invalid (can't strikethrough on HN) - I mistook the authentication form as requesting my GitHub credentials, whereas the "GitHub" title is a link to GitHub's oauth page, and they also provide the option for creating a CodeWars account without linking your GitHub. The visual distinction between these two authentication mechanisms is near-invisible on my laptop's monitor. Anyway, according to
guptaneil (below), they will still require you to create an account with them after linking your GitHub, so don't bother.

-Normally I would just dismiss such a privacy-flippant site as yours, but what pushed me to make a comment is that you prompted me to type in my GitHub password on your site, on a form with an action against your server. This is absolutely horrendous. You should only input your GitHub password on pages at, and send it to, servers at https://*.github.com. I can only feel sorry for all the users who have fallen for this. I feel worse for those users without NoScript, who have unknowingly typed their GitHub password into a tab with scripts from about 10 different companies running - do you trust all of them to not log your password? Even the analytics companies?-

-I've flagged this post, and for anyone who typed their GitHub credentials into this site, I'd recommend you reset your password.-
Too many people living like they do now.
The Future of Digital Fitness
Post Mortem of my NYC Democratic Primary Visualization
How will this game end?
Congrats guys... Love the service and support!
Just curious and trying to understand, but what about the word kata is masculine?
I ran into some bugs when testing, such as:
http://imgur.com/B0VVnmn

The test will pass but I can't submit it, because the test doesn't pass. Meh.
"We’re no longer in the days where every program is super well crafted. But at the heart of the programs that make it to the top, you’ll find that the key internal code was done by a few people who really knew what they were doing."
does btrfs have anything comparable to raidz3?
Android Gingerbread Refuses To Die
Ah I stand corrected. I was thinking scrypt Khash/sec

So you are making 1 cent a day while burning 200 watts 24/7
I don't understand this idea. Things don't have to be hard to be useful. Raising awareness has never been easier and that is a good thing.
+1 - This one caught me off guard for a second. You have to complete the two challenges on the home page before it'll let you sign up.
Introducing Twitter Data Grants
It's entirely plausible Amazon will grow into its current valuation. What that really means however, is the stock will produce at best a zero return for the next decade. In the case of massive overvaluations, the future gains are merely pulled forward.

If we give Amazon a huge benefit, and say that ten years from now it deserves a 50% higher PE than Walmart currently enjoy (during a huge bull market); spot their future PE at say: 21. They need to generate nearly $8 billion in net income. Once again give them a huge benefit and say they can hit a 5% to 6% net income margin against their sales (Walmart tends to be in the low 3's). They need to get to $160b in sales in ten years, with excellent margins (for what they do). Possible? The sales definitely are, the margin will be hard to hit. That's the good scenario, and if they pull off that good scenario, the stock only breaks even in nominal terms; inflation adjusted it might be down by 1/3.
Thanks - I did continue to read and looked into the spec bugs. I guess I didn't consider Boris, Dimitri, or Tab as being all that outspoken about the so called 'freeze' - one acknowledged the poor word choice, but that's about it.
Kudos to the coders who built this interactive Infographic. Very impressive.
Hmm, this http://ark.intel.com/products/70098/Intel-Atom-Processor-Z24... looks pretty shallow. I wonder if there is a technical reference manual hiding somewhere on the site.
>>random redditard

>OK, this is HN.

I believe that was his/her point. I'm clearly not the first person to have noticed that your contributions are few and far between, with much garbage taking up that in between. Your posts would be welcomed on reddit, here they serve only to drag HN down.
Nowadays I am pondering whether Silicon Valley is guilty of similar practices.

Read up on John Michael Greer's concept of "catabolic collapse":
http://ecoshock.org/transcripts/greer_on_collapse.pdf

I find a great deal of parallelism between Greer's observations and Marc Andreesen's "Software is eating everything". The two great economic sectors of the past 20 years in the US have been the FIRE industries (finance, insurance, and real estate), and software / IT.

Broadly speaking, a society facing the end of an anabolic [growth] cycle faces a choice between two strategies. One strategy is to move toward a steady state in which C(p) = M(p), and d(R) = r(R) for every economically significant resource. Barring the presence of environmental limits, this requires social controls to keep capital stocks down to a level at which maintenance costs can be met from current production, and maintain intake of resources at or below replenishment rates. This can require difficult collective choices, but as long as resource availability remains stable, controls on capital growth stay in place, and the society escapes major exogenous crises, this strategy can be pursued indefinitely.

The alternative is to attempt to prolong the anabolic cycle through efforts to accelerate intake of resources through military conquest, new technology, or other means. Since increasing production increases W(p) and increasing capital stocks lead to increased W(c), however, such efforts drive further increases in M(p). A society that attempts to maintain an anabolic cycle indefinitely must therefore expand its use of resources at an ever-increasing rate to keep C(p) from dropping below M(p). Since this exacerbates problems with depletion, as discussed above, this strategy may prove counterproductive.

Yes, software provides efficiencies, and some of the recent chain of startups (Google, Twitter, Facebook) have succeeded in ephemeralizing knowledge, communications, and networking in ways which, to an extent, increase social interaction, but they're doing so at the cost of a highly confounded signal/noise ratio, and with significant externalities.

Then there's the whole "moving financial capital around" aspect of tech funding and investment, which I'm coming to increasingly question. I don't find it particularly productive. The number of firms whose exit strategy is "get bought by Google / Facebook / Apple" reminds me strongly of the late 1990s "get bought by VA Linux" (remember them?).

And for perspective, I'm in my mid 40s and have seen a few cycles so far.
Alright, let's try again (from the same balance sheet):

Year 2012: revenue 316M, cost & expenses: 394M

Year 2013: revenue 664M, cost & expenses: 1300M

year over year, revenue increases 2 folds, cost increases more than 3 times. Does that answer your question? You could also break it down by quarters, but the same trend is still there.
There's no need for this kind of attitude.

The respondent was referring to Super Saver Shipping, which is still free for many orders of $25 or more. Before Prime existed, Super Saver shipments usually shipped the next day, and if you were fortunate enough to have a warehouse nearby, you'd effectively get next-day or 2-day shipping without paying for it. But after the introduction of Prime, Amazon had to incent customers in such a position (of which there are many) to pay for it, so they artificially delayed Super Saver shipments by several days so that they could never arrive before or at the same time Prime shipments would.
So instead of that 300 line function you'll need to have a complete grasp over thirty 10 line functions and how they connect to do what you want. Yes, that is perhaps an improvement, but his point still stands. Just because you isolate certain units does not mean that a mental model of the entire program flow is "fairly useless". The majority of the software that I use (that I know of) is developed outside of the Agile/XP "revolution", and it seems to be doing just fine.
Think about it like CPM

If you have 1000 users doing this, is it better than a 1-5$ CPM banner ad?
The UI on their site is extremely unclear and I initially made the same assumption, but they're not asking for your GitHub password. They are asking you to enter in a password for their site to create an account. I still have no idea why it was necessary to link my GitHub account though, since I had to create a new codewars account anyway.
I fully agree. Comments with derogatory terms should be downvoted always and with few exceptions. Do HN viewers really want to have "BSD is immoral/evil" and "GPL is viral" kind of comments everywhere? If not, please use the downvote button.
Seems like this was overlooked a little, but one could always use cash.

I understand the reasons why cash can be inconvenient, but I doubt it it less hassle then dealing with a bank/CC company over fraudulent charges, associated overdraft fees, and all the crap.

Now eCommerce transactions over the web is a different story.
Agreed - there was even a terminology explanation and apology message in there too.

The first couple of messages from the original post on seem a little hyperbolic, but the fire sort of put itself out in short order.
Curious: What are the ethical implications for the thieves? They effectively stole from a giant, multinational corporation, and inconvenienced consumers. At the end of the day, no consumer lost money from this. I wonder how this differentiation affects the consciences of the thieves, who are probably sitting on quite a large pile of money right now...

(I hope this comment doesn't show up in a background check..)
Should that be something you work on before announcing the change? Seems quite critical to me.
um, for the 1 minute they are on your site? using only part of their cpu?

see the above example for 1 cent per day going at full tilt all day
It depends. If the goal is to consolidate several boxes to a single VM, it does this. Be sure host-based (on the linux box) firewall rules are set and documented. If possible, set network-based firewall rules also (AWS security groups).
Google is at about a $13b annual profit run rate these days. Amazon would need sales of $250b to $325b to hit that level. Needless to say, that's a very, very, very long ways off: maybe decades.
>Most of those people have no other options. You don't want to fund people (in general; obviously there are outliers with 150+ IQs and fucked-up careers, I was one and, who knows, may be one in the future) who don't have other options.

http://www.paulgraham.com/marginal.html
I'm sorry, I can't connect "Computer Science as mathematical proof" and "structured programming" at all.

I mean, structured programming was much better than unstructured, goto-riddled, ball-of-mud programming, but... mathematical proof? Not with that foundation.

You can actually do formal mathematical proofs of functional programming (at least in the small). You can do it for structured programming, too, but in the much smaller.
SEA Hackers Take Control of Facebook.Com Domain
yeah, most of these grants won't even cover a grad student for more than 3 months. Most professors are going to spend their time on NSF and NIH grants that will support multiple students for 5 years.
Reuters link as Yahoo tends to evaporate its articles:

http://www.reuters.com/article/2014/02/05/twitter-results-id...
What 100x performance difference do you think exists between 30Mbps ADSL and 100Mbps fiber?

The answer is that there exists a box that mounts on a telephone pole. The purpose of the box is to terminate hundreds/thousands of DSL lines and connect them all to the central office with a single fiber optic cable. It allows you to get 30Mbps out of your 30Mbps DSL instead of getting .8Mbps, because the box is close enough to your house to get full speed unlike the central office. It saves the phone company from having to string a new strand of fiber to the premises of every individual customer who lives too far away from the central office for high speeds over twisted pair copper.

The first generation would have been actually installing the boxes, which they apparently never even did. Then you periodically upgrade the boxes to provide faster speeds as the technology improves and/or the cost comes down, e.g. from 1.5Mbps DSL to 3Mbps to 6Mbps to 12Mbps etc.
This is speculation: The reason Google is moving forward quickly with Shadow DOM implementation is that this polyfill is dog slow. Think about what it takes to make DOM invisible in the browser in a polyfill- overriding every DOM method to filter out shadowed nodes. I've heard reports of 10x slowdowns on DOM operations with this polyfill in place. The kicker? Web Components (specifically Custom Elements) lose almost all their encapsulation without Shadow DOM. Those of us who are betting heavy on Web Components as The Future™ are pretty anxious about this.
This is a bit easier to read if you ignore whitespace (add ?ws=1 to the end):

https://github.com/boto/boto/commit/95939debc3813468264159d5...
...um, no, you can't have access to all my trello boards.
Did I say it was the pinnacle? GGP post suggested that visual programming was vaporware. Perhaps for general purpose programming it is, but visual programming itself is not vaporware.
Xsolla Adds New Payment Methods in Turkey
Wait so when you realized the envelope was empty you went into a rage and shook it furiously, then held it up against the sun so you could see through it?
The particular part of the Shadow DOM spec that sparked this discussion (the "cat and the hat" combinators)was introduced less than 4 months ago and was met with some objections just this last week at the CSS F2F meeting. So the 3+ years comment is a bit unfair in this context.

I certainly appreciate the level of investment Google has made here and I can sympathize with how it feels to just want to ship a feature already! I've been pumped for web components ever since the first pitch you and Dimitri gave us in a hotel suite a few years ago at TPAC. But keep in mind that both Microsoft and Mozilla have (failed) experiences in building component models for the web (e.g. HTAs). This isn't an easy feature to get correct. The web needs us to get this right and shipping it before there's consensus isn't how we're going to succeed in that regard.

-Jacob Rossi [IE team, but speaking on my own opinions]
I've always been told by labview advocates that "you can of course pull up a text editor and write code." The language and API is certainly a different matter, being a second class citizen and presumably an afterthought.
"Trust, but verify"? Test the libraries to the degree of confidence that you need. (There was a link here a few days ago that advocated testing an algorithm with all possible floats, because there's only 4 billion of them. If you really need the library function to work the way you expect, that level of testing is not out of line.)
Dynado: Better than Google Apps, Basecamp, Dropbox
That's because we have 12 years (in the US) of general math studies to prepare us for stats and calculus. Integrate programming into the sciences and math courses (physics and geometry have obvious points for integration, I'm less certain about the others) and a first course in programming will actually be able to get students much further than they often do today.
You got my upvote. I can't understand the point of view expressed in this article at all. I particularly can't understand the claim that the accessibility hasn't improved.

Yesterday I implemented a couple of different machine learning algorithms on some test data using python and sklearn. Now, I'm just noob - but there is no way I could have that quickly implemented a machine learning algo on some data 10 years ago. It would have literally taken me months to do the equivalent thing rolling everything myself. And even then my code would have probably taken several days to run for any dataset of any reasonable size because I wouldn't have a clue how to build numpy's optimised data arrays etc...

Plus all this code is just given away... for free... no questions asked. It's so unbelievably awesome it boggles my mind.

So yeah - I don't get why this author is giving all that it's due. It really deserves a crap tonne of due. y'know?
Unfortunately Docker prevents hosting environments from employing some of the most potent security mitigations added to Linux recently.

You cannot treat a docker container like a virtual machine – code running in the container has almost unfettered access to the parent kernel, and the millions of lines of often-buggy C that involves. For example with the right kernel configuration, this approach leaves the parent machine vulnerable to the recent x86_32 vulnerability (http://seclists.org/oss-sec/2014/q1/187) and many similar bugs in its class.

The algorithms in the running kernel are far more exposed too - instead of managing a single process+virtual network+memory area, all the child's resources are represented concretely in the host kernel, including its filesystem. For example, this vastly increases the likelihood that a child could trigger an unpatched DoS in the host, e.g. the directory hashing attacks that have effected nearly every filesystem implementation at some point (including btrfs as recently as 2012).

The containers code in Linux is also so new that trivial security bugs are being found in it all the time – particularly in sysfs and procfs. I don't have a link right now, though LWN wrote about one a few weeks back.

While virtual machines are no security panacea, they diverge in what classes of bugs they can be affected by. Recent Qemu/libvirt supports running under seccomp.. ensuring even if the VM emulator is compromised, the host kernel's exposure remains drastically limited. Unlike qemu, you simply can't apply seccomp to a container without massively reducing its usefulness, or using a seccomp policy so liberal that it becomes impotent.

You could use seccomp with Docker by nesting it within a VM, but at that point Docker loses most of its value (and could be trivially replaced by a shell script with a cute UI).

Finally when a bug is discovered and needs to be patched, or a machine needs to be taken out of service, there is presently no easy way to live-migrate a container to another machine. The most recent attempt (out of I think 3 or 4 now) to add this ability to Linux appears to have stalled completely.

As a neat system for managing dev environments locally, it sounds great. As a boundary between mutually untrusted pieces of code, there are far better solutions, especially when the material difference in approaches amounts to a few seconds of your life at best, and somewhere south of 100mb in RAM.
Citation needed!

Really, your statement is simply completely made up. If you read the license, it says:

your modified version must prominently offer all users
interacting with it remotely through a computer network...

Users are not code, nor should they be owned. If they are not already released, release them now.
For anyone interested in the prospect of visual programming for web development, please join our newsletter at crudzilla.com ... we are coming out with an update that will attempt to fit a wordpress-like plugin system into an IDE. We think that'll be a good start for a more visually oriented development environment.
You don't need a travel agent for that, just use skyscanner or something. The case where a TA adds value is something like: 'I am going from Australia to Canada for work, and I need to visit a bunch of small towns that are only served by regional airlines, and I need to be there on these exact dates.'
There were either walls on either side of the trench, or the planet was a barren rock to begin with.
The O'Reilly book shipped with the old API! http://my.safaribooksonline.com/9781449332679#safari_reviews
I don't know if basing things on source is necessarily a negative. Perhaps better binary distribution mechanisms would be worthwhile, but maintaining the source-basis is a good way to ensure we're less susceptible to falling into a pit of proprietariness.
Least you could do is link the actual article rather than a landing page: http://spectrum.ieee.org/semiconductors/processors/25-microc...
Go Ingrid!
"just the usual womens fashion fad explanations"

Very classy, dude.
I still wonder whether you want to use django (if you start from scratch) if what you need is a rest API on the server. Many simpler ways to achieve this?
Yes, I was big on Flightfox when I heard about it and tried it for an international trip last year (Australia-Malaysia-France-Morocco-Italy-Switzerland-London-France-Malaysia-Australia). Paid for the top tier service but didn't end up using any of the results because I found a better and cheaper series of flights myself. I was a bit disappointed actually and went from telling everyone about it to not considering it since for other trips.
The Horrifying Secret 'The Matrix' Reveals About Humanity
If it's like most other parts of Github, it's based on the timezone recorded for each particular commit. That is, if you're in PST while I'm in CST (or at least our respective development environments think that) and we make a commit simultaneously, your commit activity will "occur" two hours before mine.

Github is a global company, so it would be surprising to see such a perfect "working day" profile on that graph if local timezone were not taken into account.
This remind me of Unix source licenses.
Bionic Hand Lets Amputee 'Feel' Objects in Real Time
Facebook.com compromised by Syrian hackers
There's different use cases. There are high-level / strategy oriented task systems and low-level microtask work systems that tend to have more specialist features for getting shit done baked in. As payware goes, JIRA is a pretty well-rounded high-level one. Gitlab seems fairly popular for dev work because it emulates much of github and is more integrated with source control (getting shit done) than say redmine.
hi fibbery, we made this change exactly for this reason: so customers would get great results more of the time. With the new format, not only do you get one of the best experts, but that expert can spend more time just on you. That last part is key.

This idea that "one person digging deeper" is better than "more people competing" first came to us at an in-office hackathon (flight hacking, not software hacking). We noticed with more "iterations", experts could hack even the most mundane trips. In this particular example, they got NYC<->Berlin (round-trip) for about $400 with rigid dates. The rigid dates part is key because it simulates the real world (we've seen < $300 with flex).

Once we worked closer with some of our experts, we realized the top ones are miles more analytical. They either write their own software or compile huge spreadsheets of their findings.

So this change of format was to put you in touch with one of them, not with someone who does this on the side. We wish we could have created a new income stream for the average person, but to ensure customer value, we had to go this way.