skysight-inc/HackerNews huggingface dataset:
If companies think Heroku is more expensive they are failing to factor in how expensive it would be to have an employee to do all the work that Heroku takes off their plate. I work 45 - 50 hours a week developing. If I have to do devops - provisioning, deployment and system administration work - to maintain a server infrastructure there goes 15 - 20 hours! Surely my company is paying less to Heroku to manage that redundant, and at this point formulaic infrastructure than to me to do the same things that they've automated away. I can then work on our products. That seems less expensive, not more.
For code projects that are between me and a couple of other devs, none of whom are infrastructure security experts, I trust a company like Github a lot more than one of us trying to hack something together on a server.
Damn straight. Look here: "Apple's [Tim] Cook told [Carl] Icahn that he's still studying Icahn's proposal to buy back $150 billion worth of the company's stock." Source: http://www.cnbc.com/id/101151952 (Monday, 11 Nov 2013)

Apple makes about $60B/yr in profit. Ichan wants Cook to borrow $150B to buyback Apple shares. Icahn and Cook would be the main beneficiaries of this plan.

I've seen this many times in non-tech firms. Look at Borders book store. They did several rounds of this over decades to boost their stock price. Each round, enriching the officers and board members, and piling the company up with loads of debt. E.g., November 27, 1996. "Borders Group Inc., the retailer of books and music, said today that it would buy back up to $50 million of its common stock." http://www.nytimes.com/1996/11/27/business/borders-in-stock-...

Eventually, they couldn't service their debts and they went bankrupt. The officers and board members couldn't care less. They got rich. Their employees and customers got screwed. Their creditors took everything including the pension fund. Some commentary here: http://www.datalounge.com/cgi-bin/iowa/ajax.html?t=11235835#...

The moral of the story: Corporate raiders and vulture capitalists could care less about anybody but themselves. They'll gladly drive successful businesses into bankruptcy to make a lousy buck. Along the way, they make the employees suffer. And they reduce competition in the market place and hurt consumers. And we make it easy for them as a society by pretending this is how capitalism is supposed to work. Shame on them; shame on us too.
Apple's Tim Cook Discusses Emerging Markets and Plans for Cash
We already do? https://www.tinfoilsecurity.com/vpn/faq

Do we need more detail? :)
> My bank has a small business ebank site which is IE only (and you need to put IE11 in compatibility mode).

Wow. That alone would get me to switch banks. Then again, the only thing I ever use the website for is to check my balance.
How The Meritocracy Myth Affects Women In Technology
Capistrano: Can't be MIT licensed any more
What, do they all have the same coach telling them how to use their hands to talk with?
I'm skeptic of the belt efficiency. Memory storage will be wasted. What do we gain with it ?
Previous discussion on this topic: https://news.ycombinator.com/item?id=7197449
AirBnB for the road?
Obligatory http://xkcd.com/593/
Possible he's been hellbanned, but his latest post is the only dead one.
Ripple is superior to Bitcoin, but because it lacks the speculation element (i.e. "get rich quick"), it's not attractive.
Yup. And after getting dinged once or twice in a review, metrics get gamed consciously or unconsciously. The mind tends to avoid pain.

If management lays down some metric like "higher velocity by 20%" or "20% more bugs closed", don't be surprised when they get it and it turns out to not really be effective. (From imperceptible Story Point Inflation to 20% more technical debt, or bugs mysteriously skipping the bug tracking system...)
Some 3D printed objects are actually superior for strength, for example plastic with a honeycomb interior can have an amazing strength/weight/cost.
So your issue is with poverty, and culture not with infrastructure?

GDP/capita is pretty shitty in china, I agree. Because time/money ratio is so crap, people are prepared to spend time, to save/earn more money, hence toll roads being an issue, and house speculation being an issue.

But no other country has increased GDP/capita faster than china (and on the scale china has) in the history of GDP/capita records.[0]

So exactly what are we criticising?

[0] http://www.gapminder.org/world/#$majorMode=chart$is;shi=t;ly...,
It's fucking hard to use. What are you fishing for here?
> Tom Perkins [...] wrote a letter about it [...] And the Wall Street Journal published it.

Until a few years ago, Perkins was on the board of directors of Rupert Murdoch's NewsCorp, which owns the WSJ... Probably still a big stock holder.

Perkins retired from the board after the wiretapping scandal. See here: http://www.forbes.com/sites/jeffbercovici/2011/09/02/jim-bre...

So, no surprise WSJ published this $hit.
>Americans have gotten soft.

You don't get to justify providing poor service by accusing your dissatisfied customers of being soft.
Googles’ Subtle But Loud Voice Against Russia’s Anti-Gay Law
> Discovery looks interesting. Can it be used for a client to discover a cluster?

It certainly could be extended for that. We haven't done anything with discovery to help with that process yet though.

> Is there a way etcd can work better with Docker links?

There is a lot of room to explore here. Including:

- Automatically registering exposed ports from running containers into etcd for service discovery.

- Using information in etcd to manage a smart proxy that would proxy requests. This would be the "Link via an Ambassador" but etcd would help coordinate.

Both of these would be good things to build and see how they work and feel in practice.

There are also some interesting alternatives to doing the links thing such as using some network namespace tricks to avoid passing metadata around via environment variables and simply expose services directly into a container: https://coreos.com/blog/Jumpers-and-the-software-defined-loc...
This guy who write this piece of shit has an obsession with Mrs. Robinson I bet. Well, the movie the Graduate.

I've grown up in Silicon Valley, lived here since 1976. I am 46 years old now. I have seen the last remaining orchards replaced by tech companies. And I see the ghost town buildings of old tech companies not far from Fry's on Arques.

The Google buses are discreet, quietly picking up people and dumping them off home like on at the plaza on Cox/Saratoga, weary nerds wandering off it to go home and get some shut eye.

This is how it is, there are those who have and the have nots. We all agree there should be a better way. But arrogance? Not hardly. Would you say the same of an actress in Hollywood trying to make it, working on tables, then she gets her first big break and goes a little mad, spending her money? Well, that's what has happened with some of the people that have made things happen in Silicon Valley.

Arrogance is writing a shitty whiny complaining article that solves no problems. Whinge whinge whinge.
It's gotten better, but is still less consistent than Photoshop.

Also, it suffers from being "not Photoshop" -- to the extent that there've been various(?) projects in changing the UI to mimic Photoshop (eg: gimpshop).

Personally I've grown more accustomed to Gimp (and the UI has improved) -- but I still find Photoshop to be a better experience. But the difference is more subtle than it used to be.
Customizing Help and Tips By Input Type
> * The hard reset definition is sort of dumb. When a device leaves the factory, it obviously doesn't have any knowledge of whom its proper owner is. A hard reset, by definition, has to nullify any owner-verification system and no technological solution can withstand it.

Not really. This is, more or less, a fairly easy problem to solve: Upon first use and any subsequent hard resets, the device phones home to ask to be activated. On first use, the activation server replies with an unconditional 'YES'. Upon activation after a hard reset, the server goes 'Before I answer, can solve this challange' (PIN or username/password).

This is how Apple implemented Activation Lock on it's iOS devices and it's more or less uncrackable.
"Never argue with a fool, onlookers may not be able to tell the difference." --Mark Twain
And here I was hoping for Steven Sinofsky. :-)
etcd isn't designed for significantly dynamic environments but we certainly want to make it easy for people to add and remove machines at runtime. We have basic support for runtime cluster configuration but are building out a more complete API. The current proposal that is being built can be found over here: http://thread.gmane.org/gmane.comp.distributed.etcd/168

As you point out there is no magic garbage collection of stale peers. You have to explicitly delete nodes that you don't expect to be participating any longer.
Am curious, I remember seeing a talk by Linus Torvalds on the internet where he explains git and how it incorporates a decentralized design to solve some inherent problems that the alternatives posed. Now, why is there emphasis on creating git servers?
I think that willful ignorance is worth getting upset over. It may not be "healthy", but it's worth it.

And with that, I think I really am done perpetuating this silly discussion.
Your web app needs to know what IP address, username and password to connect to the database on.

If it's all one the same box, that's trivial.

But imagine you have several app serves, and several other systems that all needs to talk to the database. Then one day you need to change details of the database server. Now you can either use a tool to update all the configurations (or do it by hand), or you can have all of these apps pull the database config from a distributed directory of some sort.

Etcd is such a directory. Similar to LDAP, but simpler (LDAP requires you to write schemas, and decide which attributes to index on and in set up replication hierarchies). Some people also use DNS for this (you can put arbitrary data in a private DNS server).
For me it was mainly about multiple windows that I never could find fast enough when I needed them
Good timing to piggyback on the Sochi hate. You may also like to put up this NBC story on the site :)

NBC: All Visitors to Sochi Olympics Immediately Hacked

http://www.youtube.com/watch?v=waEeJJVZ5P8
The distinction between 'observational' and 'historical' is a matter of political and social convenience.

Consider carbon dating. Since it's been observed, we should assume it's observational. carbon dating indicates that dinosaurs existed hundreds of millions of years ago instead of mere thousands. but that's historical and therefore this is a contradiction, so we can't assume the distinction.

the only logical conclusion is that we have a false premise.
Hmm, I did not consider that. I guess we'll see in a decade or two. My opinion is that many of these constructions will go unused - permanent relocation is a lot harder than just using roads, plus no doubt most of them have already been bought for resale (increasing the price) or rent (which may be more acceptable). Also, there are whole apartment blocks in or near major cities that are still unused despite demand, it's not just ghost cities.
How do they get rich off the buy backs? Explain like I'm five. Do all the Joe Schmoes who own the common stock as art of their 401k's benefit from it as well?
Is anyone else getting their DigitalOcean IPs banned from certain sites? I use it as a personal VPN sometimes and lately any application hosted on Google App Engine is inaccessible. Sometimes Gmail, Google Analytics and Google Drive are also inaccessible.

The strange part is that the server I am using should not be sending email or doing much really except hosting some git repos and a basic website.
Is Bitcoin Free Speech?
It seems to me like someone excitedly posted this without really understanding what Krita actually does, or perhaps the differences between an app like Photoshop, an app like Illustrator, and an app like Corel Paint.
>Still not the company's fault for the individual's lack of responsibility.

No. If they know, or more importantly from a legal liability standpoint SHOULD have known, then it's on them.

We haven't seen the test case that will decide the legal liability/insurability of P2P driver services, but it's clear that Uber and others are operating in a somewhat legal grey area and are not bothered by it. Indeed, you could argue that they are forcing the issue of regulation and insurability with their business model.

But I'd stop short of saying that they have NO responsibility. It's clear that Uber is hoping to delay any reckoning on that question until after their dominance is a fait accompli.
> Because time/money ratio is so crap, people are prepared to spend time, to save/earn more money, hence toll roads being an issue, and house speculation being an issue.

The point is that infrastructure investments are often misdirected, poorly thought out, or plain corrupt. China needs "affordable" housing, not property as "speculation opportunities" (and given that there are so few ways to invest money, this is what happens anyways). China needs low logistic costs, but has some of the highest in the world even with their "great" infrastructure; toll roads represent great skimming opportunities for officials and their families. Truck drivers are stuck in a crappy situation where they are forced to overload their trucks just to make ends meet, and hope the fines on the way (justified or not) don't bankrupt them.

> So exactly what are we criticising?

We were arguing about whether China's infrastructure investments were wise or not.
It sounds like Uber's business model is essentially in sidestepping the consumer protections that exist for conventional private driver and taxi companies. It reminds me of how credit card companies and PayPal sidestep consumer protections created for banks.
This guy is like a good security QA guy on steroids.
Show HN: What I've made for Facebook's 10th anniversary.
Photoshop "killer"?

You keep using that word. I do not think it means what you think it means.
Cryptotronix Hashlet – HRNG, Key storage for the BeagleBone or Raspberry Pi
Employee Stock Options as Explained By an English Major
You can change that now. Gimp supports a single window mode, it's a lot nicer.
With increasing population, it is incredibly simple.

Choose one:

1. Live further away
2. Increase number of people per living abode
3. Increase number of living abodes per space

Numbers one and two are personal choice, number three is political.
Kind of disappointing. This was the first game I've ever written so it kinda means something to me. From what I've read, it seems that you had no intention of mentioning that you copied it from me (Nope you didn't fork it :p). But I guess I'm flattered to know that it was good enough for you to "re-share".
OT: Anyone know of a "weathermap" like this that can be overlaid w/ Google Earth or similar?
I'd like to place a bet, but unfortunately, there's no point in placing a bet stating that by a certain date AIs would beat median human intelligence by huge margins. It would be like placing a bet on a prediction of any other extinction event. Impossible to collect, even if the prediction is right.

On the other hand, just for the fun of it, a couple of other predictions. Here: "true, human level AIs would not be developed until 8Tb RAM sticks would become a commodity". Another: "true, high fidelity, multi-censorial brain-computer interface will never be built".
The Drug Risk Perception Gap
Well written article. I wrote a long comment about my views, sat for a bit, re-read the article, then deleted my banter because it wasn't adding anything interesting, but I do want to say these themes have been on my mind lately and I appreciate seeing them discussed so well.
"This is Unix. I know this!"
Specific criticisms, perhaps? I, for one, prefer GIMP's user interface, and find Photoshop's unintuitive and difficult to use.
Minor nit pick here, but carbon dating is not used to date fossils and rocks because C14 has a half-life of only ~5k years. With such a short half-life, the C14 all decays away to trace levels in only a few tens of thousands of years.

Other radioactive isotopes with much longer half-lives are more appropriate for geologic dating. The U-Pb system is really good for most geologic applications.
The engineers at GSFC say you will need the DSN. The smallest DSN antenna is 26m and that is used only for LEO (a couple thousand km).

You talk about "red tape" like moving a huge radio telescope is some kind of formality, and you quoted a figure of 3.5m with no apparent engineering basis. I find this ridiculous.
Getting a 404 on the linux dl link for FF Auror, required to test this new feature:

http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/lates...

Same with all the English (US) versions in fact. Other languages appear to work.
No creationist has ever been able to explain why their version should be preferred over, say, Mayan creation myths. It kind of makes my mind explode that they can claim absolute truth over other such myths. But, that's religion, I guess. Pointless and I wish bill nye hadn't given th the time of day.
The current title ("Capistrano: Can't be MIT licensed any more") is misleading. leehambley (Capistrano maintainer) refutes this claim in the thread itself:

> I think I made myself clear. Our lawyers don't see a problem (and don't see that the GPL of SSHKit is viral in terms of the usage of Ruby, and Rubygems), that in this circumstance the copy-left of the GPL does not cross the boundary of Rubygems (Capistrano hints to Rubygems that it would like to use SSHKit). And that even using the LGPL with it's provision for "dynamic linking" being an exception adds nothing to the discussion for scripting languages.

> I won't chance the licence without a proper, peer reviewed audit, if this means your lawyers don't think you can use Capistrano, I'm sorry for that, but I can't afford the time and energy to re-open this debate. (again… again… again… again).

> SSHKit is intentionally restrictively licensed to protect the investment that my company made in building it, which is something I also don't have a choice about. If you want to rewrite a competitive alternative to SSHKit with a compatible API and release it, that would probably be best for the community. (At least those backed by pushy IP lawyers)

Funnily enough, this is a case where changing the title away from that of the original page would improve the accuracy of the submission.
No I didn't avoid it. Slavery in the South was an inter-group problem and because the groups were fully static over generations, it's properly a place for intergroup pressure.

It is an argument to be cautious though and I think reconstruction failed because it was orchestrated on the plans of industrialist Northerners rather than those who had direct personal experience with what was going on. If Sherman's 40 acres and a mule plan had been implemented race would be different in America today.
The script is currently generating a 512-bit (EDIT: 2048-bit after merging my pull request) DH modulus. DH over a finite field modulo a 512-bit prime is weak sauce, about as hard to break as a 56-bit or 64-bit key for a symmetric cipher.[1] You're using DH over a finite field, not ECDH.

Please upgrade your script to generate a 4096-bit DH modulus. EDIT: A 2048-bit safe prime provides over 100 bits of security and is much faster to generate.

I'm not sure why OpenSSL hasn't upgraded their default modulus size, but to have the same strength as a 150-bit symmetric cipher key, against the best attack techniques 2004 had to offer, you'd need about a 4575-bit DH modulus.[1] AES-128 is about as hard to break as a 3200-bit DH modulus given the best techniques of 2001.[2]

EDIT: Times to generate different sized safe primes on my MBP maxing out one core:

512 bits = 0.5 sec

1024 bits = 0.8 sec

2048 bits = 2 min

3072 bits = more than 30 minutes

4096 bits = more than 60 minutes

[1] https://tools.ietf.org/html/rfc3766 (see table in section 5)

[2] http://tools.ietf.org/html/rfc3526
Isn't that proving my hypothesis that you have to choose between an equivalent to social security payments being a human right and same-sex marriage not being?
I have to dig this up (sorry Brian, your talk was awesome and visually easy to get involved; kudos to identity team)

http://people.mozilla.org/~bwarner/warner-rwc2014/#/
I used to think that debates like this were important, until I realized that you never 'win' anything.
Anyone remember BSD?
> You're pretending that Rome didn't make war to capture slaves.

There were a critical mass of Roman slaves, and this meant a strong set of social institutions to support feeing them. That there were POW slaves doesn't undermine that.
A couple of things that I'd like to see in this script:

1. Go ahead and apply all of the software updates. The RAX Ubuntu images are behind on a lot of security updates.

apt-get -q upgrade
apt-get -q dist-upgrade
reboot (at the end)

2. While you're at it, enable automatic security-related upgrades. It's likely that the user of your service is less technical and not Linux-saavy. Let's keep their cloud server from being owned.

3. Force public key auth (disable password auth) on their OpenSSH server and (preferably) disable root logins entirely. Create a user account for them if needed, with sudo access.

4. Set up IPtables as default-deny with holes punched for OpenVPN and OpenSSH.

5. Configure OpenSSH to listen on port 443 in addition to 22. Some hotspots block port 22. Almost nobody blocks port 443/tcp. This is super-handy if you're ever working from some place with a restrictive or filtering firewall. SOCKS over SSH is awesome, especially when you're dealing with censorship or malevolence at the DNS level. I used this technique when I was in the Army and our Army housing had horrible DNS servers that censored a lot of legitimate sites.

6. I would prefer you not ask for people's cloud provider API keys. This has huge potential for abuse. Instead, give them a script that they can run on any Mac or Linux box that takes the root password and IP and provisions their server for them.

I suppose I should make a PR for you; maybe later this weekend
DNS does go over the proxy. See my comment above about how I used this trick to subvert horrible DNS servers when I was in the Army.
the risk isn't the same. Instead of capital gain a capital loss may happen - for example when you own stock, like, in particular, after exercise. Whereis in case of stock options there is no risk of loss before exercise. The stock options may be worth 0 - that is the lowest possible outcome, and you wouldn't be charged a dime if the options are underwater. Just like bonus - company pays to you when things are great, yet you don't pay to company when the things aren't. Thus the same ordinary income tax treatment for stock options exercise profit as for bonus.
tl;dr:
"Creationism is a worthless and uneducated position to hold in our modern society and Nye is about to treat it as an equal, debatable 'controversy'."

"Scientists should not debate creationists. Period."
When you keep presenting a supposedly unsolvable problem to people who don't know it, then you might get lucky. George Dantzig was one such person. He arrived late to class, saw some problems on the board, assumed they were homework, and solved them. He wasn't constrained by the common thought that these were "unsolvable".