skysight-inc/HackerNews huggingface dataset:
Ask HN: What site should I use to find a good web designer for freelance work.
I'm trying to redesign my side project and need a freelance web designer. I'd be interested in hearing what everyone else does to solve this. Thanks!
Scribd online tracking
There is a broader point that we no longer have the open source community we once had.

I think this may be one of the more tragic results of the 2000-2010 decade. Where have the developers gone, and how could we get them back?
To be fair, erased generics force autoboxing of primitives. Anyway, Java's combination of static and runtime types, though not pure by any measure, has actually proven quite useful.
How many years would he get in prison for this in US? While the interpretation of the law or the law itself are pretty bad here to begin with, at least the punishments are saner for stuff like this. US seems to have both completely terrible and easily abused hacking laws, but also extremely disproportionate punishments.
The 2,500-Person Tech Mixer That Was Not a Party
actually, it's 250mbps now.
Thanks for the detailed comment. But could you go into a bit more detail about how the elite actually benefit from factions within a large nation? Like with an example taking today's elite into account.
List<Widget> filtered = filter(widgets, new Filter<Widget>() {
@Override public boolean keep(Widget w) {
return w.getColor() == RED;
}
});

List<Integer> weights = mapToInt(filtered, new Mapper<Widget, Integer>() {
@Override public Integer map(Widget w) {
return w.getWeight();
}
});

int sum = sum(weights);
Actually, if we look at two half-cycle waveforms, one sine and one square, like this:

http://i.imgur.com/oE5NFZ9.png

(Just the left 1/2 of the graph for this example)

The integral of the sine waveform with a peak value of 1, on the interval 0 x < pi, is :

http://www.wolframalpha.com/input/?i=integrate%28sin%28x%29%...

= 2

The integral of the square wave on the same interval is = pi

So the ratio increase in average voltage at the speaker (comparing the sine to the square) is pi/2 = 1.57. The increase in speaker power is (pi/2)^2 = 2.46.
> Also, did Jason Fried step out of a time machine with his IBM Selectric typewriter to compose this? 37Signals have always been on the hipster end of things but the design of this letter is ridiculously so.

I gotta admit, while it's the content of the article that has 99% of my interest (going to miss the "37signals" name, but it sounds like they know exactly what they're doing, so good for them!), I did also pause and wonder about the Courier font as well as the "scribbly" version of the Basecamp logo.

But then, that's me, and sometimes a font is just a font? :)
It is different because in SQL you can't do non-parameterized queries, and in PLPGSQL you have to specify you are executing dynamic sql. This means that since it is in the db, it is going to be parameterized by default.

So what is different is the fact that unless you use a non-SQL-derivative stored proc language, you pretty much have to put up big warning signs any time you put in place a possibly exploitable query.

Examples:

1. This is not possibly exploitable:

CREATE OR REPLACE FUNCTION foo(in_bar int) RETURNS setof foo
LANGUAGE PLPGSQL AS
$$
BEGIN
RETURN QUERY
SELECT * FROM foo WHERE bar_id = in_bar;
END;
$$;

2. This one is exploitable.

CREATE OR REPLACE FUNCTION new_user(username text)
RETURNS BOOL LANGUAGE PLPGSQL AS
$$
BEGIN
EXECUTE $E$CREATE USER $E$ || username;
RETURN TRUE;
END;
$$;

3. This one is not exploitable.

CREATE OR REPLACE FUNCTION new_user(username text)
RETURNS BOOL LANGUAGE PLPGSQL AS
$$
BEGIN
EXECUTE $E$CREATE USER $E$ || quote_ident(username);
RETURN TRUE;
END;
$$;

The point is that it is crystal clear in these cases whether a query is parameterized internally or not. If you don't see the combination of EXECUTE and ||, there is nothing to worry about.
Achievers and Dollhousers
Just because you don't live ars' life doesn't mean the world should be your way and not his/hers. The term "superstitious throwback" is a really assholic way of dismissing an argument because you don't agree with it.
That, exactly that.

If you have a secret document, when I come knocking on your door and ask for that document, you'll refuse to give it to me, or at least ask for something that convinces you that can access it. Nobody would be crazy enough to charge me by a crime if I ask you the document, and you give it to me without any kind of verification.

But now, configure a computer to do that exact thing, and suddenly you manufacture plenty of new criminals.
Except your argument is invalid because java has continued to add features and keywords to address its flaws.

It is moving towards scala, just at an incredibly slow rate.
Fame is orthogonal to skill.
Modern businesses that are growing very quickly these days have abstracted away (and outsourced, contrary to the article) accountability. I think that is an important lesson.
A CSPRNG is fine (just use any decent stream cipher), but as the article suggests, properly seeding it is crucial.
When you are younger the scarcity is money, not time.
When I was younger I would have liked to dress fashionably or go out and do more sociable activities , but it was either that or buy computer parts and software etc. I couldn't have afforded both.

By the time you get a job that lets you afford both you don't necessarily want to learn fashion from scratch.
I don't think so. Btc-e is based in bulgaria and withdrawals/deposits have only been stopped for one russian provider (QIWI). See: http://newsbtc.com/2014/02/07/btc-e-stops-russian-ruble-depo...
Correct, however if this "exact runtime bound" is what you are going for, then please use the correct notation. T(N) = 2N would be legitimate, as would \Theta(N) = 2N. Saying that O(F(N)) = 2N is misleading because the definition of the big-o notation explicitly discards all constant factors and constant annends.
IMO docking stations are the "faster horse". We could've used better docks a few years ago, but now the idea seems silly for most use cases. Why carry around a big ol' laptop when your data is available everywhere, is largely device-agnostic, on-demand? You don't need to carry around an email or spreadsheet or word processing machine - everything is an email, spreadsheet, word processing machine. You don't need to carry a device that contains your work, because your work accessible from anywhere.

If you're particularly security-conscious, great, throw everything up in a VPN (as everyone already does now) and issue company hardware if you must. At the end of the day having multiple bits of hardware for different contexts not only makes working easier, it also prevents you from having a bunch of hardware floating around on buses, trains, and airplanes containing your sensitive data. Not only that, you're dramatically reducing your odds of data loss.

There are real road-warrior types who will need actual "full" laptops, but the vast majority of people hauling big laptops to and from work everyday really just need a machine for work, and a machine for home, and nothing in between.
I carry books and magazines, just in case I end up at acoffeeshop. Why not an iPad or Kindle? Because a book or magazine focuses me on one discrete thing.
If you happened upon my 'protected' account with some mal-formed link, then saw the standard 'tweets are protected' message on my main page, you might be in a spot if you went back and save all those secret tweets. Under the interpretation being discussed anyway.
This is something systemd can already handle. Linux has APIs to change the 'reaper' process (PR_SET_CHILD_SUBREAPER) so that orphaned processes move to a non PID 1 process.
I find it hard to understand those rules. What country did you grow up in?
I don't know about France, but in many jurisdictions, a "reasonable person" standard is used. While I don't personally believe accessing publicly available files should be illegal in any case, I do think that in the situation as described (with the admission of traveling up the path hierarchy to find a login page), most "reasonable people" would indeed infer that the files were not intended to be publicly available.
I think that it's stable, testing and unstable in order of stability to instability. Stable is guaranteed long term support. Testing generally has had a week of testing to ensure no obvious catastrophic errors, and unstable is basically as is straight from initial packaging

I run testing on my non-prod (experimental) server instances and would probably go with stable for anything production quality, although I've never experienced anything going wrong with Testing.

I have my server tied to "Testing" rather than the current name, which turns it into a rolling distribution (like Arch).
For most of the used programming languages, a lambda captures values (like in Java or Python), and closure capture variables or scope (like in Scheme or Ruby), hence the name, a closure close (bind) the free variable of the closure to the ones of the lexical scope.

The lack of checked exception transparency is for me something that goes in the right direction. The hidden message is 'Use checked exception only for IOs and please don't create your own exceptions, use already existing ones !'
The application logs into the db with the credentials the user supplies, so the problem is not our problem anymore.

This means, btw, that you can hook up LedgerSMB to use LDAP Auth simply by changing PostgreSQL's LDAP settings. Here's an example howto, using LDAP via Samba (I would prefer Kerberos, but this demonstrates what people can do with such a model):

http://cocnm.computerisms.ca/index.php/Install_Ledgersmb

Now, again, this is great for an internal business tool. It may not be what you want for a high-scaling public web app. We use a different model for customer portals (with security again encapsulated in the db, but through a different way).

It's worth noting btw that PostgreSQL allows you to specify auth method by connecting host and requesting user/database, so you have a high degree of control over what sorts of connections can be enabled or disabled in such an environment in the db backend.
Using the term "lynch mob" metaphorically is a long established usage. But in case you weren't just pretending to misunderstand me, I didn't mean that HN users are literally planning to kill Tim Armstrong. I meant the forces that drive lynch mobs are driving people here.
I found a really good one last year : yabla.com

I paid for a couple of months for the chinese version, it's really well made but the content is not exciting enough. Can't speak for other languages but I really think this is the best way to learn (this and podcasts).
You read the article right? Al Jazeera implies they didn't follow their own procedures, not the FBI. The FBI constructed a theory, and sought to validate or invalidate it.

You can read the actual OIG Report [1] it is online, but the interesting bit is here, in Chapter 7 (page 269):

"Based on our investigation, we concluded that the three FBI examiners who misidentified Mayfield's print were confused by the fact that the fingerprint on the Madrid bag contained as many as 10 points that corresponded to details in Mayfield's known finterprints in relative location, orientation, and intervening ridge count. This degree of similarity is extraordinarily rare and confused three FBI fingerprint examiners as well as a fourth, outside, court appointed examiner."

I don't know how much you know about fingerprint forensics, I just know what I read, but a 10 point match is considered pretty strong from what I've read. And as I mentioned earlier, its a statistical thing not an exact thing.

[1] http://www.justice.gov/oig/special/s0601/PDF_list.htm
I can't understand what you're saying about endianness here. If some file format or network protocol has a specific endianness in it, it has a specific endianness in it.
If it were so easy to make samples and
they were so disposable that anyone
could come up with them, then there
would be no need to sample older work
and no one would do it.

You don't use samples because it's difficult to create new ones. You use samples in order to evoke shared cultural heritage.

Imagine I write "I shot the sheriff" or "That is not dead which can eternal lie" or "x considered harmful" or "I've got 99 problems" or "We few, we happy few" or "Beam me up, Scotty" or "Light of my life, fire of my loins" or "Of the people, by the people, for the people" or "Less space than a nomad".

I'm not just stealing a sequences of words I think sounds good. I'm referencing other works - partly to evoke their meaning, partly so when you recognize the reference it communicates that I am like you, that we have shared background, that we've read the same books, heard the same songs, visited the same websites.

Is taking a few notes from a song really so different to taking a few words from a book, speech or essay?
It's more like if you walk up and find the document on my doorstep, turn around to see the 'no trespassing' sign, then leave with the document anyway.

Again - I don't really agree with the ruling here - just trying to clarify.
Four tech developments in law
The first thing I wanted to do when I finished reading the dotsies story, was implementing that for chinese.
Would it really? Hubble ended up costing over $2.5bn https://en.wikipedia.org/wiki/Hubble_Space_Telescope by launch day while a Shuttle launch cost around $450m https://en.wikipedia.org/wiki/Space_Shuttle . Probably a rebuilt Hubble would have cost less, but how much less?
sorted(Comparator<? super T> comparator)

Eurgh. Why isn't this a projection to a comparable type (or better, a projection to a tuple of comparable types, for use with lexicographical ordering)?

Say you have class Country { int population; int name; }. You want the names of the top 3 countries by population:

countries.orderByDesc(x -> x.population).limit(3).map(x -> x.name)

But instead, you must do something like:

countries.sorted((x, y) -> Integer.compare(y.population, x.population).limit(3).map(x -> x.name)

It gets much uglier when you want a lexicographical ordering by several attributes.
A Case For The Startup Visa Act For Foreign Entrepreneurs
This isn't as simple as it might sound. Not having a way to post anonymous message might be a problem, but being able to post anonymous messages has problems of its own. Anonymous messaging is a contentions topic:

http://www.theguardian.com/technology/2013/nov/19/facebook-t...

And, unless I am seriously mistaken, because of these problems one cannot send anonymous messages on Facebook, and other social media are considering following Facebook's lead.
MD5 challenge/response auth today would typically be used in short-hop logins. It might be further protected with SSL on longer hops. For larger networks, I would assume you'd want to use Kerberos auth.
>Of course, Dell could include analogue filtering circuitry to filter out the excess power in inaudible frequencies if they wanted to.

It likely isn't necessary as it is probably built into the output amplifier. I have no clue what audio amplifier dell used but here is an example of a typical headphone amplifier IC http://www.ti.com/lit/ds/symlink/lm4881.pdf

If you look on page 9 of the datasheet you'll see its frequency response. The attenuation is > -20dB past 15kHz at best. You aren't going to get much of a square wave above 1.5 kHz, and probably not below if you look at the response of the speaker.
Indeed. I see I parsed your previous posting too finely. You meant in the context of a mix tape, which would not be fair use. We'll continue this discussion in a thread elsewhere.
something different about them like,
they will ruin my brand with immature casual jokes about rape?

Please understand, I'm not pointing this out because I'm outraged or offended. I'm pointing this out because this is a contact form meant to attract customers. this is business. their business is marketing and branding, and the message they're sending with their website is that they are tone deaf, when it comes to what is appropriate for broadcasting a general audience. Appropriate in the sense of: Can I trust these guys to take care of my business's image? For me the answer is a resounding no.
Wow that is nuts! SF is really facing some big problems, I hope other cities can learn from their successes and mistakes. Though I still love my parking spaces.
Also, putting 'var' in a loop header is debatable because it gives the false impression that the variable "i"'s scope is confined to the for loop, when in reality it will be alive throughout the containing function. JSLint would bark.
I was going to say the same. Most of the engineers I know don't use any skills they learned at university, much less physics.

It's probably a misallocation of resources, using the engineering degree as a filtering mechanism.

Quite a few are drafted for management (especially of industrial plants, etc)
The "Paul's Boutique" example is always my favorite, because it's one of my favorite albums, and the astronomical amount it'd take to release today. Although it could just be that the Beastie's are one of my favorite groups, and I happened to be listening to them as I read this comment.
> Show teleology is more than a human construction
> to explain the purposes we ourselves invented

Your question itself is enough evidence that humans didn't invent teleology, but merely recognized its existence. You are asking for a reason why. You are asking a teleological question.

Two year old children do the same thing, constantly. They ask why.

It is natural to ask why.

It is very unnatural to deny the naturalness of asking why, or to try to suppress it, as if the desire to understand why didn't exist in all of us.

Indeed, the answer to the "why" question is one of the four causes Aristotle says we must explain to understand what a thing is. We must understand the why behind it. That is the final cause, or the purpose for the thing.

What you cannot answer is this: How can final cause -- purpose or motivating reason for something -- arise out of nothing? Indeed, the intelligent person recognizes that such an idea is non-sense, and rejects it out of hand.

You get purpose, or reason for being, from a priori purpose or reason. I work in order to have money. I want money in order to buy food and shelter. I want food and shelter to continue to survive. And so on.

You never get purpose, or reason for being, from nothing.

You think by asking me to show that teleology is more than a human construction, that you will bolster your evidence for reductive materialism -- especially if I can't provide an answer that meets your satisfaction. But in so doing, you are demonstrating teleology. You have a goal. You are driving towards that goal. And your goal is self-contradictory. Your goal is to establish that teleology is somehow not Real, not inherent in the universe, and not inherent in us. But goal-based action is what teleology is all about. So you are engaging in the very behavior you are seeking to prove doesn't exist, except as a figment of our imagination.

A house divided against itself cannot stand.
To elaborate on this...

malloc and free aren't even a part of C itself. Other than static (globals and "static" the keyword) and automatic (stack) allocation there isn't any memory management in C itself. malloc and free are library functions wrapping system calls. That's something to do with the operating system - the machine itself has NOTHING like malloc and free.

I and many people know C but know fuck all about assembly programming. (for now)
Hey ntaso,

Actually I am now studying Computer Science as a minor (philosophy still being my major) at my university (we have a very flexible program here in Denmark). I find it very difficult, but also very rewarding.

And yes, I actually have tried to learn to code. First through Zed Shaw's Python book, then through some youtube videos but the big hurdle for me has always been how to _publish_ my stuff. It's all great fun that I can make some command line stuff, or write some JS/HTML but I was never explained how to actually do all the basic steps of having a website. I.e. domain names, servers, everything. I felt like i was playing with legos by drawing them on paper.
This won't last.
And my point was that I don't think anyone could point to those behaviors in me until I was 16. Before then, I think I was inquisitive, but had never had an opportunity to make in the manner you're talking about.
This was an interesting article. (Font size is tiny using Chrome on iOS).

> If your business or technology depends on using random numbers, your best bet is to use a hardware random number generator.

Some hardware RNGs would be hopeless for this task. It'd be scary to have to buy one of these things and trust the output.
Am I the only one who reacts on the graphics rip-off?

Sure, clones are okay in my POV but when it goes to a level where even the graphics are identical to the original...
Clusters of Affluence in San Francisco
Kids are capable of closing windows. Yes, they might see something gruesome and have nightmares because of it. But they learn and close the window quicker next time.
I used to love battling with IE6 to get a webdesign looking great, cross-browser compatible and degrading gracefully. Ok it was maybe more like love+hate, it was a challenge, a puzzle and particularly trying to solve it in the least (subjectively) "hackish" way possible.

But then, I also used to write 4096 byte demos in x86 asm. And a bunch of other crazy things that don't even occur to me now, some things with JS ...
But it'll be hilarious for a few minutes.
Type erasure has ups as well as downs. For one, it means you can write runtime polymorphic code when you don't care about static types - something that requires extra effort and a non-generic base type in .net. Any time you pass an object through a runtime polymorphic "hole" (e.g. a location of type java.lang.Object / System.Object), you lose the ability to pass along type parameters. In .net, if you don't have that abstract base class / interface, your only fallback is reflection. In Java, you've got List<?> or whatever it is.
P.S: Read "Deep C Secrets - Expert C Programming", and once you've understood the chapter on memory, go back and read the malloc implementation in the back of K & R.
But moving at an incredibly slow rate is exactly what the Gosling document says: Java will only implement features that are familiar and proven, namely years after they've been introduced. Also, Java's philosophy says that no feature is to be adopted, no matter how nice, unless it solves a very, very, very painful problem. Many people, myself included, think it's a very wise stance for such a widely adopted language.

Scala is first and foremost a research language. It has some very good features and some terrible features. Also it is completely unopinionated. But that's how it's supposed to be: as a research language, its main goal is to figure out what works and what doesn't, so that mainstream languages years from now will know what works and what doesn't.
I like to use this as an example of a problem that secure multiparty computation can solve i.e. that you can remove a buggy / malicious central dealer from a system.
Not everything of systemd is in PID 1. And yes, what some people consider necessary and important or even essential features missing from sysvinit, others consider bloat.

Just to ensure we're all talking about the same thing, here's an overview of systemd's footprint:
http://people.debian.org/~stapelberg/docs/systemd-dependenci...

From the article:
"On most machines, systemd will bring from 236 KiB to 550 KiB of additional libraries to be loaded into memory. When recompiling systemd without its optional dependencies (e.g. for embedded systems), this shrinks to 368 KiB in the worst case.

The RSS (Resident Set Size) of systemd is 1.8 MiB, whereas sysvinit uses 0.8 MiB — both measured on typical Debian wheezy installations."