skysight-inc/HackerNews huggingface dataset:
> PostgreSQL is the best open source relational database and I hope it remains that way.

Yes, and it will. In fact the best post-relational features of PostgreSQL work best when used in a relational way.

> While I don't mind seeing some non relational additions like JSON, it shouldn't be detrimental to Postgres relational core.

As I usually tell people "Good object-relational design is usually good object-oriented design and good relational design, and that makes it really, really hard."

> It's not a pissing contest : if MongoDB is more popular than Postgres for non relational (NoSql) data so what ?

I would agree. The fact is that for the last 10 years, PostgreSQL has been the choice of open source rdbms's in business apps for the last 12 years and I don't see that changing.

> It's not like Postgres is a commercial product and need wider adoption to keep the parent company afloat.

Mindshare is important though.
The richest 2 people in america have around 120 billion dollars between them. 100B are enough to directly give $5000 to 20M people under coupons and welfare today.

Lets say you tax away that 2 trillion, which is mostly illiquid productive capacity rather than easily redistributable liquid cash. That'll provide a $7,200 basic income for about 275 million Americans for one year. Then what?

Of course, in real life, you can't redistribute Zuckerberg's wealth as cash. The most you could do is give every American a few shares of FB, a few shares of MS, etc.

Also, you won't be giving a basic income to anyone making above a certain amount (no reason to give it to someone already making several tens of thousands of dollars a year).

We already do that. It's called "welfare", not "basic income".

Not to mention that these people, unlike Warren Buffet or Trump, cannot hoard the money they get, so those get re-invested in the economy pronto.

You are confusing consumption and investment.

Buffet and Trump invest the bulk of their income. Buffet invests in railroads and insurance companies, Trump invests in condos. Peter Thiel invests his money in companies like Facebook, Linkedin and Deep Mind.

Consumption is when you spend the money on stuff like big screen TVs or food.
I think this ln2 factor matters when you are drawing a graph. But I guess that's included in what I called axis range.
If you can handle some abstract theory, the design of the STL is put into a useful context by Stepanov's Elements of Programming.

Stroustrup's The Design and Evolution of C++ is another great "why" book, and I hope that Bjarne will decide to update it for C++11 or 14.

It's older, but reading Lippman's Inside the C++ Object Model is what finally made the language click for me.
I use that nearly every day. Thanks so much!
The Atlantic is on the other side of the Atlantic.
I might start playing French Horn again thanks to this!
It's reasonably easy to wrap the SQL involved in calling stored procedures.[1]

The JSON in 9.3 is almost good enough for this. It doesn't handle nested data structures to sql nested complex types properly, and so it won't quite get you there but otherwise agreed.

I.e. to make it work currently you have to slice and dice the JSON in some fun ways first. I find it less painful to just handle the complex type serialization/deserialization on the client side.

[1] See https://github.com/einhverfr/PGObject-Simple-Role
Smoking Marijuana in public is already illegal in Colorado. No one bothers to enforce it in Boulder... but then again they never did before it was legal either.
The reasoning sounds sane (users marking mails as spam when it is difficult to find the 'unsubscribe' link). But I cannot believe there is no ulterior motive. If users unsubscribe from businesses' mailing lists, it decreases the value of such lists and increases the value of GMail ads.

So, I wonder if this isn't just a move to make an advertisement channel, from which Google extracts no revenue, less effective.
C++ FAQ Lite is not a book, but a great reference; this is useful the night before an interview. It's helpful. It certainly did help with my interview.

http://www.parashift.com/c++-faq/

A book I like is C++ Primer.

In any case, this list on SO is pretty cool. http://stackoverflow.com/questions/388242/the-definitive-c-b...
> Are those the goals that you should care about?

Yep.

At the very least, you want to abandon your current job on your own terms, not by being fired. But keep in mind that even great jobs (including owning your business here) have boring tasks that must be fulfilled.
Goto considered harmful, indeed!
Scientists Begin Looking at Programmers' Brains: The Neuroscience of Programming
Another: http://i259.photobucket.com/albums/hh288/krispos42/Unsorted/...
Recently i thought about making to-do list that don't suck :) Interested to know more about it?
Not to mention, in similar places like these, meeting people (for business and/or flirting), and well, having some exersize just by walking there.

And after you dragged yourself there, you have more guilt if you don't work, compared to being at home.
Education spending is wasteful too.
Neither of which actually require going to a coffee shop. It's the human interaction that most people find appealing.
All new App Store apps require sandboxing now, so as long as Apple's sandbox is tight (not a given, but it's supposed to be) then you can't do anything harmful. Apple won't sign anything you give the that isn't sandboxed.

The updater for Apple's own stuff obviously doesn't have this constraint, but it should involve a different signing key than the one used for third-party apps.
>You're stuck with a small keyboard and screen, and your posture probably isn't ergonomic

So, just like at home for most people.

>The horrible wifi

That's a bonus. Less of a chance to turn your work-day into a youtube-cats-marathon.

>fighting over power outlets

That just does not happen, not in the kind of environment the article describes, which is built for this sort of thing.
This isn't a graph generator. It's just a graph. You can plug data into it and get a graph, I guess, but the same goes for Excel.

A misleading graph generator that automatically matched concurrent data sets based on correlation would be quite interesting, but this isn't it.
> For starters, if you really have to go to Facebook's office to be trained on how to spend money on their ad system, I'm not sure you are knowledgeable enough to be spending $100,000 a day on those ads. I doubt Facebook was going to teach you how to optimize your campaign in order to spend less money than you would.

Facebook has been aggressively trying to ramp up revenues, a personal touch is a good way to do that. It sounds like he had a number of highly popular Facebook pages and was likely contacted to come in for some in person training to get to his pages to the next level. If anything that offer is just a testament to his pre-existing success on Facebook, they would lose a lot of money if they invited everyone to the office.

I've been with Google AdSense for a long time and from time to time I get pitches about going to training or having phone conferences to help optimize more, I have to imagine this is similar. Sometimes it's helpful, sometimes it's not.
They periodically check for new updates. You probably just happened to have a periodic check occur shortly after the update came out, just by pure chance. Everybody should see that prompt eventually, but it may take a day or two.
Progress on KaraPy
Django reverted the password limit change:

"In Django 1.5.5, we’ve reverted this change and instead improved the speed of our PBKDF2 algorithm by not rehashing the key on every iteration."

Incidentally Bcrypt does have a 56 byte limit which I understood to be a Blowfish limitation (you can use longer bcrypt passwords by doing a SHA256 pass first)

edit: typo
Only an idiot would spend $600k in a few days without testing. That's just painful to read.
> Postgres has never been popular.

Not my experience. I have found that PostgreSQL has a remarkably stealthy popularity. I went to a conference a couple years ago and everyone knew PostgreSQL, and even there were more booths advertising Pg services than MySQL services.
The most frequent 'spam' mail that slips through the filter are conference mails (really).

I have been to conferences in computational linguistics and machine learning. It is clear that some conferences are giving or selling e-mail addresses to other conferences. I don't really mind getting e-mails from related conferences, it seems that over time there has been much topic drift as my e-mail address has been handed from conference organiser to conference organiser.

Unfortunately, since the conferences are all organised by separate entities, it is not possible to unsubscribe anymore. And unfortunately, this was before I started using '+' extensions to create custom addresses.
Would it be counter productive to learn C++ using Stanford School of Engineering Introduction to Computer Science Programming Abstractions[1] CS106b considering it was taught in 2008?

[1]http://see.stanford.edu/see/courseinfo.aspx?coll=11f4f422-56...
Made me laugh but it's so true.
Marijuana also leads to DUIs.
> Of course, the post could have risen naturally to be more visible to a given audience through reshares. If the post was a link to a news piece or something that could interest the audience that could have happened naturally. Would it be possible to show the original post? (or the link to it if any?)

Considering FB even charges you to get your post to your own fans, it seems odd that when you're paying for it they would choose exactly the people you said not to show it to. They very tightly control who sees what, it was not an accident that Brazil was shown the content.
I suppose most well-functioning organizations that implemented this rule for employees would soon have a cleaning staff made entirely of contract workers. Metric met; root issue no longer our problem.
Use bcrypt.

http://godoc.org/code.google.com/p/go.crypto/bcrypt
This is true; there is no silver bullet. So we rely on defence in depth.

The first line of defence is consistent code layout; e.g. always use "{ }" after an if, and only one statement per line. This aims to make simple typos less likely to compile, make the code more readable and so make errors stand out.

Then there is using and paying attention to the linter / compiler warnings / jshint + 'use strict' / static analysis or whatever it’s called in your language of choice.

Then there are unit tests or integration tests.

Any of these might have caught the apple error, but there are no absolute guarantees.

IMHO it's a professionalism issue – gifted amateurs are great, and they can succeed... most of the time. But a professional engineer would put aside ego "I won’t make mistake like that" and laziness "I don’t need to type braces this time" and do the careful thing every time. Because each step raises the bar, and makes it harder to ship code with bugs like this. Because sometimes it matters.
Question: Is there any reason to prefer bcrypt over pbkdf2, or vice versa?

I can see that scrypt has an obvious advantage over both, since it is memory-intensive unlike the others. But when comparing bcrypt with pbkdf2, I can't seem to find any reason to prefer one over the other.

bcrypt is everyone's darling at the moment, but why so little love for pbkdf2? PHP 5.5, for example, bundles a very convenient password_hash() function that defaults to bcrypt, whereas hash_pbkdf2(), which is also new to PHP 5.5, won't even generate a salt for you.

Is pbkdf2 broken in some way, or do people simply not trust it because it's just a bunch of iterations of sha256?

On the other hand, has anyone discovered a weakness in bcrypt and/or the underlying blowfish algorithm?

On my computer, pbkdf2 with 20,000 rounds of sha256 takes about as much time as bcrypt with a cost factor of 10.
A better solution is gcc's which forces you (if you enable the restriction) to put an extra pair of parens around inline assignments.
Facebook reports its profile numbers to Wall Street and as such fake profiles make them lots of money. Google reports nothing about YouTube accounts and has no incentive to look the other way at fakes (and indeed with AdSense in the picture Google has an incentive to crack down).
Good enough to be used as personal workstations for what were the first DTP systems.

Surely if those systems enjoyed the 30 years of commercial investment that certain languages compiler backend's enjoyed, the performance would be quite similar.
He is probably suggesting that it should be served from large CDNs so it wont go down
SPEEDDaytona 500 Live Stream FREE Watch NaScAr Great American 2014 ONLINE
SPEED™®Daytona 500 Live Stream FREE Watch NaScAr Great American 2014 ONLINE
This is only one misleading graph, which, to be honest, I find misleading.
Congrats a ton Sam.

Best of Luck.

With the Mobile part ofcourse, you'll do brilliant with rest, no wishes needed there :-)
> would directly cost a lot

Not sure what you have in mind. Standardised thing would still be hand washable if you can't afford machine that washes and stores them.

About your ironic remark... I'm not sure if you consider current state of dish washing technology an optimum that we need not to progress any further from, or that you are perfectly happy at the current pace of the progress of dish-washing technology. I don't. And if we already had washer cabinets, I'd be wondering why they can't be integrated into a table or why we can't have mobile robots to collect the plates. Although I wouldn't call lack of robots a disgrace because robots are hard. I believe combining washer with cabinet is not and it doesn't exist mostly because of silly cultural thing called "but my plates would be boring then" and "what would humans do with all additional free time"?
Microsoft (MSFT) to Slash Price of Windows 8 Licenses by 70%
It won't work for pot like it does tobacco. If they tax it too high people will just grow it at home, illegal or not. This doesn't work for tobacco, which would require a small field to grow your own.
True, but what if 10 people wanted to co-own a real physical house? I believe there are laws against that
That is why UNIX took us into the wrong path. If those languages were already widespread back then, then we would enjoy the ca 30 years C has enjoyed from compiler development support from the industry.
While the plural of anecdote is not data most of the programmers I know have at least 1 large screen at home to connect their laptop to (and at least half have a set up like mine which is a fast desktop connected to three screens).

The "average" hardware profile does seems to vary across the type of programming done/age of the programmer and industry they are in (it would be an interesting survey).
Ukrainian President's opulent residence
Wrong, please look at the etymology.

I'll walk you through it.

Valedictorian used as a noun in 1832, adj in 1834. American English. From Valedictory adj. and -ian variant of -an, Middle English -ien from French loan words, -an "pertaining to" from Latin -anus.

Valedictory first used in the 1650s, from the Latin valedictum from valedicere and -ory from Latin -orius, -oria, -orium "to have a quality proper to the action accomplished by the agent".

valedicere from vale, imperative of valere "be well" and dicere "to say". See also "Valediction" from 1610s.

Validate v. from 1640s from Latin validatus, from validus, from valere "be well", "be strong" (connoted)
bcrypt has a fixed output size, which makes it less than perfect for generating encryption keys from passwords. That's the primary function of PBKDF2, while bcrypt is mostly used for simply comparing hashes.

You could also feed the output of bcrypt into PBKDF2, but as far as I'm aware, nobody is recommending against straight PBKDF2/SHA256 for key derivation.
Wikipedia's robots.txt is quite verbose:
http://en.wikipedia.org/robots.txt
An Open Source Library For Turning Journalism Into Podcasts
Eccouncil page hacked
"Defaced again? Yep, good job reusing your passwords morons jack67834#

owned by certified unethical software security professional
Obligatory link: http://attrition.org/errata/charlatan/ec-council/
-Eugene Belford

P.S It seems like lots of you are missing the point here, I'm sitting on thousands of passports belonging to LE (and .mil) officials"
> But isn't he simply refusing to accept, on an emotional level, that everyone gets older, everybody dies?

Why? Why should we accept on an "emotional level" that we are about to die? Just because it's currently "inevitable"? Seems like a cop-out to me. I think humans are meant to be better than just "accepting their fate", and that we should always try to improve our lives and conditions.
Telecom firms mine for gold in big data despite privacy concerns
I actually use Arch although I do like Debian too.
One point the article misses: Ray is a director of engineering, not the director of engineering. There are more than one engineering directors at Google.
Not to stand up for spammers, but this initiative looks like it is designed to work with "the good guys"; organisations that use services like Mailchimp and have unsubscribe mechanisms that work and so on.

It won't really help with people who just send stuff over and over to a home-made list that is kept in an Excel spreadsheet and never clean the undeliverables or unsubscribes out of it.

And it certainly wont help with the pills and stocks brigade.
That's the reason I've started 10 projects and finished 0 in the last year. I did awesome for the first few weeks starting a project, but then I don't "feel like" finishing.

Since I'm releasing nothing... I decided to take on smaller and smaller projects. Instead of making a mobile app, I'm now making a small plugin to release on CodeCanyon.net. I put all the CSS for the demo and the actual plugin in the same file to begin with, and now I don't "feel like" separating the demo's CSS in a separate file because it's frustrating and boring. I'd rather code new things than mess with this stupid CSS on a project that probably won't sell, that took way longer than it should have.

But this time I said I'm not doing any other project until I've finished this one. And now I've done absolutely nothing for 2 weeks(except my part-time job), and procrastinated by watching TV shows and studying Japanese.

As someone who always changes their opinion on "what should I really be working on" - I think I need something more than "asking the right questions." I'm still not sure what that is, but I'm hoping that one day I will find it.
does that huge lag bother anyone?

it might just be an out of sync screen recording, but it seems to me like there is an input lag.
The idea of San Francisco losing its soul was much of the content of Herb Caen's columns in the San Francisco Chronicle for decades.
http://sandbox.libvirt.org/quickstart/

Or even just:

http://danwalsh.livejournal.com/28545.html

...an selinux sandbox without the containers stuff.
I thought the NETSEC conspiracy theory was Angelos Keromytis working for the FBI.
AJAX was flavour of the month in 2004. JSON has been flavour of the month since ~2006.

While that makes it about 10 years younger than Postgres and MySQL, it's still not a flash in the pan.
I think credentials do count. As an example, I have worked with many people who have studied at MIT. They have all been very effective. I now find myself with a strong positive bias towards MIT grads.

That said, someone I used to babysit when I was a teenager dropped out of college and sold his last software company for over $300M, and this was about twelve years ago when three hundred million dollars was real money :-)
This is not true. Correlation means that there is some kind of relation between two variables(for example, how they change over time) but it says nothing about the mechanics of the relation, which is the causation.

Let me investigate this example:

the observation: Students who watch less TV have better grades.

It's not like pirates v.s. global warming, it actually makes sense at first and if you are the minister of education whose goal is to increase the grades among students and you don't have an idea about "Correlation does not imply causation" principle you may actually suggests to ban TV's to improve the education. You can even draw a fancy graph to support your idea.

However, after further investigation you may find out that this would not work because it's not the TV that is causing the lower grades. Maybe the better students tend to watch less TV because they prefer to read books instead of watching TV.

This time it may seem to suggests the opposite: Increasing the students success in school reduces the time the TV is watched. However after even further investigation you may find out that your better students are from poor families(maybe the schools in your country are accepting the best students without tuition and are not selective about these who can pay) that just don't have a TV set, or maybe these better students also need work part-time to support their families, thus they just don't have time for TV.

Thus, you can't really change one value by synthetically manipulating the other one. Turns out, the correlation did not meant causation.
Let's not forget SF was founded for one purpose: the Gold Rush. So in reality, it's getting its original soul back.
This isn't "Doing it right".

A. Your Salt should ALWAYS include a feature you have to store anyway about the user that would be unique to your service. Use multiple if you need to. This applies no matter what Hash mechanism you use. Also include a calculated value that isn't stored.

Example:

UserName + PassWord + User ID + CreationDate + <Numerals from a Base64 encode of the users first and last name>

Don't put all of this in the same database, so that a Data Breach won't give an attacker all the data they need.

No Rainbows for that combination. If a user changes their user name update their hash.

This is why in good services you have to provide your password when changing your username even when you are logged in.

B. To Validate the User Name:

Step 1 is always "Check that the password meets your password Criteria. If you have a requirement that passwords are 6-24 characters, contain 1 upper, one lower, and one digit, then make sure the password has those before you do anything else. No database lookups for bad passwords. No running bcrypt on a 4 megabyte section of post data. This is how you keep Denial of service attacks from crushing your service.

C. MD5 and Sha1 are only bad because there are rainbows for them, and because you can calculate every possible combination of values for a user/pass quickly if you know a single user/pass in the system you can calculate the salt methodology if you have access to the source code as well.

I won't tell you to use either of these, but if you lose your source code, and two databases worth of data so they have user, pass, and user data, you did something else horribly wrong, or it was an inside job and nothing would have saved you. (bcrypt is expensive if you have millions of users a day logging in and not any more secure if you did the other things above.)
It's always shocking to me how many people just assume that a login/password system should store everything in plain text. This was a pretty good explanation of the right way to hash.

One problem though with this guide, some experts think it makes sense to add some extra computation to make it a little bit more difficult to compute the hash, for example creating a hash loop which rehashes 10,000 times or something similar.

In the past, I've found the following php tutorial really well written, and comprehensive:

http://forums.devshed.com/php-faqs-and-stickies-167/how-to-p...
Yes, all other things being equal, you should prefer bcrypt, which forces more effort onto attackers than PBKDF2 given similar parameters.

The reality is, bcrypt, scrypt, PBKDF2: throw a dart at them and you'll be fine no matter which you hit.
It seems entirely possible that he was dead at the time that the lynch mob was hurling accusations at him, unless I'm missing something.
"Ancient" Chinese Instrument Sounds Like 8-Bit Mario