skysight-inc/HackerNews huggingface dataset:
That looks interesting. I've got a CMS which shares some philosophical similarities to Wagtail. It's a lot clunkier and uglier though. I wish I had the time to add some polish. I think the 'pages have types' idea is spot on and something all the other Django CMS's I've seen seem to get wrong. (too much freedom for the user to create 'Frankenstein pages' by arbitrarily combining blocks).

The editor and image library is very nice.

I feel you've gone slightly too far in the 'flat and beautiful' direction. Some UI elements lack affordance and I think usability has suffered slightly at the hand of aesthetics.

Finally I still feel there's a case for not completely replacing contrib.admin but that is a complex debate and I can see in your specific case you probably made the right decision. I'd really like to see if I could achieve some of your elegance without abandoning (or reinventing!) contrib.admin.

Best of luck!
But didn't you see that movie about the guy with the hotel?
Article is from February 2012. Does this price comparison reflect today's situation?
Many lawyers will work for a contingency fee if they feel you have a strong case.
That seems disingenuous for some people: programming can be a bobby, too.

I'm guessing that you have a completely different reaction to someone who is telling their friends about their latest rock climbing exploits. (Scaled this massive chimney, had to use this super awkward crack for a peton; super challenging climb! Etc, etc).

Why is programming treated differently from other activities your friends do?
An abundance of energy would result in new technologies, engineering and infrastructure to use it.

Water shortages could be addressed with large scale desalination.
Shipping/transportation would become real cheap without significant fuel costs.
Food issues could be addressed by commercial hydroponics.
Just to clarify, are you talking about the way the news/blog posts are organized? or the Fiddlewax Blue app itself?

As for the news/blog posts, they should reflow to fill your screen. I'll see about giving them a bit more breathing room. :)
go discourages relative imports? interesting. why? Are these files not packaged together?
I don't think I would expect to do in-app purchases without my own e-commerce capability, or using some ecosystem's IAP support, and AOSP never had an open source IAP framework.

There are other places where one can complain that Google has effectively abandoned open source components of AOSP. These are places where Google has made previously standalone apps part of their ecosystem.

On the other hand, alternative distributions like CyanogenMod have become sustainable VC-fundable businesses based on the relative reliability that important new core OS features do go into AOSP on a timely basis. ART, for example. It's there to read and study and try long before any Google-label OEM benefits from it.
I was thinking that they were already in a deep coma...
There seems to be a plan to start monetizing chrome extensions. That's good, i'm in the process of writing one.
Disney launch accelerator, powered by Techstars
Flappy Farmer – Replace Your Flappy Bird Addiction
Characteristics of the Monied "Like" Button
http://culturalengineer.blogspot.com/2013/12/characteristics...

One-Click Micropayment Capability for Volume Solicitations and Multiple Providers
http://culturalengineer.blogspot.com/2013/12/one-click-micro...

Represented by Perkins Coie
> America is pretty good -- don't anecdotes from the internet says deter you.

It's not merely anecdotes; there's plenty of hard data. The US locks up more people in absolute numbers than any country in the world, including China, which has 4 times the population and a totalitarian government. Per capita, the only countries with more inmates are a handful of tiny Carribean islands, I believe.

Law enforcement is structurally not being held accountable. Stories about police officers killing or tazering unarmed and even disabled people abound, usually followed up by a story that nobody got charged with any wrongdoing (except maybe the victim).

In talks online, I notice that a lot of Americans are afraid of the police. Tons of websites warn not to say anything to the police. The message that the police cannot be trusted is everywhere.

This is not the image of healthy, democratic, rule of law. It's a police state.
Walled Gardens, Walled Ghettos
Cost. At typical backbone speeds there are problems enough dealing with basic routing at sufficient throughput already. "Nobody" at that level wants to also have to pattern match packets.

Cisco, Juniper etc. who manufacture high end routers would certainly love it.

A better alternative is to stop or limit source ip spoofing, because you can filter it on the interfaces connecting smaller providers and customers rather than the most resource-constrained routes to other backbone providers. And that's slowly happening (I'm saying, while looking at tcpdump output from a SYN attack that might very well use spoofed IPs). It's simpler because you "only" need a single lookup against a few bytes per packet per interface instead of potentially having a long list of patterns to check against the whole packet.

> and who I would expect to incorporate best practices

Don't bet on it. They will when it makes a big difference to them. But for many of these types of attack you'll see purely reactive reactions because it's often far cheaper (for them) vs. the costs of routing hardware etc. that can do enough processing per packet to be viable.
That's very impressive work, cheers for sharing.
Haha, you should see my bookmarks... no less than 10,000 right now (probably more) and I export and clean them every 6 months. The thing is they are all quality sites or pages and interesting information that I would like to read or will need sometime soon. I've tried all of the major bookmarking sites and have even planned on rolling my own a couple of times (didn't have enough time to build it out though).

500 tabs is probably an exaggeration, but unless I recently restarted my computer or Chrome so it will update I always have over 100 open.

Does anyone know of an open-source bookmark manager that can be self-hosted? The bookmarklet is easy to create and archiving a copy of the site would be a really nice feature (but not required). There are also several scripts to pull out summaries or body text from pages, but those could always be processed later.
Plan 9 released under GPLv2
Could this be Apple’s next iPhone? The iPhone 6?
App looks cool once I found the walk through. I almost gave up before I had any idea what it was. I think one mistake people make with Show HN posts is that they don't link to the right page to actually show it. I would have linked straight to the walk through and not the landing page for news. Good job. Not for me though since I don't do Apple.
Actually, if you read the article you would have seen that, in the end, I specifically said that it's possible that they are doing the most important things right (focusing on speed and accessibility).

And the fact that they are a good beginners resource doesn't make their own site's bad practices good practices. Even beginners know how to "view source".
I don't work for a Tier 1 ISP but I do work for an ISP.

As a customer, I don't want my ISP screwing with my traffic. As a provider, I don't want any customers complaining because we screw with their traffic.

To block monlist and only monlist queries, we'd have to be looking into the layer 7 payload of IP traffic. I'd rather not do that.

The brute-force method would be to block traffic to/from 123/UDP but that's gonna mess up a lot of stuff (including my own).
VideoLAN is now accepting Bitcoin donations
Quick tip on the video: I felt it moved a little too quickly. I tried keeping up with the text, and it seemed to get pulled away from me as I was about 2/3rds through each time. At the end I was slightly dizzy :/
Well, we're definitively not on s net block that OVH ought to give access to monlist:

ntpdc -c monlist ntp0.ovh.net | wc -l
602

Yikes.
Unless I'm misreading this decision it merely upholds the FCC's right to classify ISPs as "information services" instead of "telecommunication services" because the Telecommunications Act is a bit fuzzy and leaves a lot up to the FCC. The FCC could decide to reclassify them as telecommunications services due to industry changes and I believe that this case would serve as precedent for them to legally do so.
looks at what was deployed this morning

Yep.
Would you refund those people automatically after removing the feature they use? Since this is not anymore the same value proposition as before. One small feature can make the whole app not anymore worthy those original 1.99$ user paid for.
If you want to get even a little more performance out of it, look into PHP APC (alternative PHP cache). You can configure W3 Total Cache (or similar plugins) to store their cached files within APC (which will be in-memory). Though, since the cache files on disk will be already cached in memory, this may not be all that much faster.

APC is a nice alternative to dealing with something like memcache (since you are working on a smaller scale).
> How exactly would you avoid the overhead of individual instances using a ctypes structure?

This optimization only works if you have an upper bound for the total number of items but if so I'd at least try something like declaring point_x and point_y arrays so you'd have two Python objects accessed by indexes rather than many Point references. This technique can be particularly useful if you don't access all of the elements at the same time and you can get more efficient memory access patterns because you can access a subset of the elements in nice linear reads.

> If you really want to be serious about large, performance-intensive arrays in Python, it's time to pull out numpy. It actually would fit well here.

Very strong agreement - numpy is a treasure.

> As a result, I find ctypes a lot easier to use for simple optimizations. YMMV.

Ditto - I've found cffi to be faster in some cases but it's definitely more overhead to use.
Improved for whom?
$ nmap -sU -pU:123 -Pn -n --script=ntp-monlist <target>

Note that that only checks if the target responds to the monlist command.
Context and the Importance of Personal Curation
Show HN: CodeOut, a real time multiplayer coding game
I believe local extensions will be disallowed on stable and beta channel on Windows, according to the blog post. I think this means that on the stable channel on Windows, there will no longer be a “Developer mode” in chrome://extensions. This is because Developer mode is simply a registry setting that malware on Windows can modify, so Chrome will no longer trust this setting.

To develop extensions on Windows, I think you will have to switch to the dev or canary channel http://www.chromium.org/getting-involved/dev-channel

Edit: changed “now” to “will be” for clarity. Thanks Navarr.
The article doesn't bash the p-value as a statistical test specifically, more its use and interpretation by scientists over the years.

You're absolutely correct about using non-parametric tests, and more scientists should be using them. The normality assumption is flat out laughable when using real-world data most of the time.

You're also correct about multiple hypothesis testing. Accounting for familywise error (e.g., Holms adjustments) can help to keep your p-value reporting honest.

That doesn't negate the underlying problem, though. A p-value is simply an indication, nothing more. The p-value never promised to be more than that. The issue isn't in the p-value's construction, the issue lies in its misuse and how easily it can be abused in statistical reporting (see: p-hacking).

The p-value as a test statistic is perfectly honest in my opinion. But like many other statistical methods, it comes with its own set of baggage that I feel gets conveniently glossed over more often than it should.
Because it is mostly at a level of details that without specific understanding of the topic it is impossible to understand and boring. But, if we would work as alpine guides, I would not be happy with my friends talking about climbing. The problem is basically: it's what we do all day + it excludes people outside of our circle.
Scala-JS has been making very fast progress lately, the 0.1 release wasn't that long ago. I'm excited to see where it goes and I think there's room for some very cool integrations with Play.
France Loves Tech, but Not Amazon, or Uber, or Google, or ...
I don't think that Paxman's comment was as flippant as this article is making out. If you watch the video, his comment follows Lottie Dexter vaguely waving at the graphic of code behind him in desperate attempt to describe what code actually is when she quite sure herself. What he sees is a blurry mess of code pulled from who-knows-where that blatantly isn't of any use in it's current form. I'm not trying to downplay some of the awesome things done with code in the article, but I think the comment it's based on has been misunderstood.
The Construction of a Twitter Aesthetic
If you're not ashamed of it, then you've learned nothing since you wrote it.
Good old fashion thought crimes.
Why Amazon Should Unbundle Prime
FBI, Secret Service investigating Las Vegas Sands hacking
Significant changes to how Extensions are installed are coming to Chrome 33
Anybody else a bit worried that this basically comes down to the good old "embrace extend extinguish" ? It's slightly different in that the "embrace" step was the purchase of Danger and open sourcing of the base AOSP - but the "extend" bit is pretty clearly in full effect here.
Andoird and IOS are a thick-client and they work fine.

Maybe you should be less .js centric and more DOM centric in your thick HTML client.

Minor point, thick client is faster can can use CDN for even more speed. (and using tools like PhoneGap Build, is cross platform, a fraction of native).
To the people defending W3Schools, please understand that some of us do our best to ensure that as much of the information that we consume originates from the most accurate, detailed, and authoritative sources that exist, regardless of usability, cost, etc. It bothers people like us that W3Schools is a top result at Google for so many search terms, in the same way that it bothers us that sites like CNN and Forbes are top results when searching for "health".

We realize that people such as yourselves have no problem consuming information from low-quality sources such as W3Schools, CNN, and Forbes, and most of us don't care where you get your information from. We would just prefer that our search results not be polluted by the low-quality sources that people such as yourselves link to and, thus, push to the top of the search results.
Yes, most of it :)

And I'm going to leave a lot more when I switch jobs in the near future.

On the other hand, I had to maintain some awful spagetti code when I was starting out (and much of that was written by the current CTO!), so what goes around comes around.

I'd like my successor to hate my guts a little less, but sadly I won't be around to explain why I made several suboptimal (or flat out wrong) choices - most were of the "you have one week to implement this" variety, but others were just me dropping the ball.

When I give my 2 weeks' notice, should I go around all of my old code adding comments? Documentation? What would you like if you were to maintain some spagetti VB6 and .NET code?
Five Tips to Execute Social Media for Small Businesses
OAuth and Bug Bounty from Facebook and Google
http://intothesymmetry.blogspot.ch/2014/02/oauth-2-attacks-and-bug-bounties.html
Oh yeah. I assume everyone does.
This is an old tactic that has been going on for more then 10 years with web browsers.

Also, I doubt that you need an extension to change the homepage.
Yep! Lots of it, actually. The biggest thing you learn is that it really hurts the ability to extend and grow the feature set of the product over time, but that if the product never gets off the ground that never becomes a concern.

But by writing and deploying crap code, you also learn how to write it better the next time. I think most devs know by now how much bad code runs the world.
"The reason we use code is to allow people to discover, understand and build on ideas"

The reason we use WORDS is to do the same thing...

But somehow nobody will ever insist that:

"Likewise, teaching kids which letters to press in Notepad to make a sentence is also a terrible idea, because it's focusing on the characters."

or that teaching spelling, punctuation and grammar are "meaningless".
I was hoping no-one would ask that :)

No: the marketing site (http://wagtail.io/) is a single static HTML page. But we're about to add a blog, so we'll convert the whole thing into a Wagtail site, hopefully next week.
VMware, Google Team On Chromebooks
The advantage should be more in user experience, since this would essentially put a halt to bundled crapware.

People who are willing to move to "Developer mode" will not be the people who will be confused in any way.
AdBlock is in Chrome Store ... so it will keep running as before.
There is absolutely no way the FTC will allow this.
I believe this is misinformation.

At the moment, there's a way for software to install Chrome extensions (not developer mode). They're removing this capability. You will probably still be able to run developer mode extensions
China's Jade Rabbit lunar rover not dead afterall
The problem with this is crapware vendors existed before extensions were available. They were dirty hack modifications to the programs. They would introduce all sorts of bugs and since they modified the actual software they were a pain to uninstall.

If your cabin in the woods is getting broken into, you won't secure it by putting a lock on the front door. You'll just get robbed and have a broken window.

The real problem is users accepting and running installers that install crapware. You effectively give it permission to do anything it wants.
This past weekend, Erik Isaksen, Adi Chikara and I built this app for the Static Showdown hackathon with AngularJS and Firebase. The idea is that anyone can issue a challenge, invite their friends, and compete in real time to solve a randomly selected programming problem. Spectators can watch a challenge and see the contenders working in real time, right in the browser. We're calling it CodeOut.

While there are a few obvious missing features that we didn't have time to complete inside 48 hours, like code evaluation and scoring, the basic idea is up and running (bugs and all). You can see it in action here: http://ss14-team-144.divshot.io/. Erik also made this video: https://www.youtube.com/watch?v=gurIfcMZq14

HN, we'd love your feedback and support to win "Crowd Favorite". If you like this app, please help us out by tweeting: https://twitter.com/intent/tweet?original_referer=http%3A%2F...
... so you can run your Windows apps in a licensed copy of Windows in a VM.

And here I was hoping for Google resources to be put into Wine ...
I run about 15 Wordpress sites on the cheapest Linode package, using nginx and php-fpm.

Of course, all of these are very low traffic sites.

There was definitely a learning curve, especially with nginx and Wordpress. I'm much more of a web developer than a server admin, but once everything got up and running, there's very, very little in terms of day to day maintenance.

I used to be on a shared host but also ran into issues with memory and general downtime. Not to mention there is something liberating about having your own (virtual) box.
> That's a micro-benchmark collection. <

No, it's a meagre dozen "toy programs". (See Hennessy and Patterson "Computer Architecture").

> ... many operations which could be significantly faster if they were written in C ... none of that matters because almost all of the total runtime is already spent in a C library. <

See Sawzall quote -- http://benchmarksgame.alioth.debian.org/dont-jump-to-conclus...
Lots of Forrst
since i spend a lot of time in the console i have a few very simple aliases, for the following and some other time zones i use frequently.

cst='TZ=CST6CDT date'
est='TZ=EST date'
berlin='TZ=''Europe/Berlin'' date'

then i can just convert times and needed.

berlin -d '4:00pm EST'
Show HN: mercury (chrome plugin) – type to switch tabs
This is all super valuable advice. The biggest thing that I've learned from working 100% remote for the last six months (which is also in the article) is to have a space that is just for work.

Another thing that I've learned is to be crystal clear on when your normal working hours are, especially if the bulk of your team is in a different time zone. Don't be inflexible, of course, but establish normal working hours and stick to them.
I'd recommend just adding them to an email to yourself or a textfile. Its low tech but more durable than most methods.
It's been there for months if not years at this point.
Don't be a complete Ass. The US is a a big place, really big and there are vastly different types of states and situations. Any country in the world has fucked up abuses of power, name where you live and I guarantee that an example exists. Comparing Maine (where I live, which has the lowest crime rate and rate of prisoners per 100,000 in the US) to Texas is like comparing Switzerland to Russia based on the size and population levels and distance between. Note that Texas has some great areas it's just to show that they are extremely different to other states and it's not a valid comparison to Russia.
"Today, instead of simply assuming that you’ll be buying and operating your own servers, storage and networking"

umm... I've been leasing dedicated servers since 1999 just fine. Why is all 'cloud' discussion always about AWS vs buying dedicated hardware? The vast middle ground serves most people just fine.

EDIT: Actually, I can understand these discussions in some capacity - with large enough orgs, money may come from budget X vs budget Y, and there can be tax implications depending on what option you choose. The majority of people I see/read/hear having these discussions are not at that level though.
It's closer to Spain; Canada is somewhere in between CA and TX.
http://stmedia.startribune.com/images/300*177/adambelz_13917...
I do, 131 rep on my SO account.
I agree, Chrome shouldn't allow external application to automatically install extensions. There are few (none outside of the business/enterprise area?) cases where it's done for a good reason, and a lot of cases where it's done to install some adware/spyware.

If I'm reading the article right, they'll also disable any extension that the user manually installed from a local .crx. I don't agree with this, just add a warning and allow it. To me, it feels like some sort of DRM.

It doesn't help that developers have to pay a $5 fee to publish extensions in the Chrome Web Store. It's small, but not everyone is willing to/can pay it.
Dear Hiring Manager, Please Don't Shun Me
What are the default restrictions? Is noquery enabled?
Not code, but a 2-years-not-upgraded public facing web server.
The first step is admitting you have a problem. ;)
> What would you like if you were to maintain some spagetti VB6 and .NET code?

A different job?
> the cost of electricity from modern nuclear stations is roughly comparable with sources like coal

It has to be, otherwise nobody would be using nuclear power plants...
Local applications can modify Chrome's settings and inject their own extensions with no involvement by the user. This change is targeted at preventing extensions that the user did not explicitly install.
> Teenagers say stupid shit all the time

And sometimes they do stupid shit.

Some simple advice: don't shoot people, and don't threaten to shoot people. Threats can be very serious, and shouldn't be thrown about so casually.
This is the best explanation of the move, but won't it just lead to crapware figuring out how to enable developer mode and continuing to install bad extensions?
And if you want even more performance, try replacing php-fpm with HHVM.