skysight-inc/HackerNews huggingface dataset:
AMA: I worked on the frontend for eventbrite's seat designer tool.
CodeKit 2 released
If you'd like to learn more checkout Peer5's open source projects [1] for pure p2p file sharing, And [2] for a flexible AJAX api built on top of the same stack.
[1] github.com/peer5/sharefest
[2] github.com/peer5/P2PXHR
Which seems useless to me.. it's still the same idea, the same thing.
Show HN: A Speed Reading Bookmarklet
There is a small UX bug. It's because you didn't set up your country as a User. First go to your http://ctf365.com/users/edit and add your country there. Then the system automatically will register that country. That because as a Team Leader you'll fight for the country you came/declare from. It's Beta, we'll fix that too. :-)
Congratulations Todd and team!
How do you reconcile earning money with giving them "the best game possible" for free? Donationware never worked, so you have to hold something back from them that you monetize. And you have to make sure that thing is desirable.

Of course some developers are going to be gross when doing that, but it is absurd to extrapolate that all F2P games are manipulative and deceiving. If even in the most visible, sophisticated and successful examples of the genre, a huge percentage of people are playing for months without paying a dime, you can't honestly say that the primary element that defines the game is "deceiving and manipulative".

No matter how much technique is put into the monetization design of a game, NOBODY is going to pay if they are not having a good time and being entertained.
I imagine that, that would mainly leed to the thing starting spinning more and in the end make the crash even worse.

if they could fly a quad copter with only one rotor, the engineering behind that is according yo me good enough to allow a patent.
The gain is non-trivial once your eyes and brain speak HAML fluently. It may vary person to person. Once you know both HTML and HAML fluently, your brain is going to find one easier/quicker to grok than the other. My brain happens to parse HAML a lot faster than fully bracketed HTML these days.
TDD is BS*
Mineable Crypto-Currency Market Capitalizations
Demo Fail: When I tried to download the 200MB file, Chrome is reporting server errors...
For 4. lets not forget to add the disclaimer: "But it will most likely be in the 4, 5 or maybe even 6 digits."
I don't use Haml much, but I find CS easier to parse visually. There are fewer distracting elements, like braces, brackets, etc. This results in the intention of the code coming through with a louder voice compared to syntax requirements.

CS also eliminates boilerplate code like hasOwnproperty() checks, loop variable initialization, null checks on object properties (null soaking), etc. It's visual clutter.

I can code in JS just fine, but it looks rather busy compared to CS.
Happy to answer any questions if you have them!

Also, if you find sites which it doesn't work with, please report them here so I can triage them:

https://github.com/Miserlou/OpenSpritz/issues/8

Project source code:

https://github.com/Miserlou/OpenSpritz/
Wasn't @steveklabnik doing something like this a while back?
Yes, the spec says the field can be string or binary. The API only handles string fields. The API should be (and was) updated with a function that handles binary fields, but there's nothing wrong with the original function.

If this was C++, and the function took a std::string, would you say it was horribly broken because you serialized a 4 byte IP address into a 4 byte std::string buffer and the function didn't handle it correctly?
Thanks - that was it.
> Asking people to write tests before they write code is like asking them to test-drive a new car before it even exists. This isn’t possible.

This is an incredibly bad analogy that really doesn't stand up. You can write tests before you write the implementation of them, to define how you want the end result of your program's interfaces to look. The rest of the article arguing the semantics behind calling them tests or specifications doesn't add anything but confusion to the testing discussion.

This:

> Calling tests specifications makes the concept more intuitively available in several ways.

Is entirely subjective.
SEEKING WORK, USA, remote.

Full stack developer. I like working with Rails and Node on the back end, Angular and Backbone on the front. D3.js for animations. Iv been building web apps for 5 years and before that got a degree in Computer Science.

Portfolio: http://www.gregkerzhner.com
The encrypted result of this tool contains all the code necessary to decrypt itself (in a web browser).

I'm not too familiar with GnuPG, so I don't know if that's different.
In the end its all a matter of taste, and not any actual objective gain in developer productivity, which loops us back to the original point.

If you have a team of people who love and want to do haml/coffeescript. have at it. If not, its just another thing to learn for people who'd rather not.
Does it claim to be better? The main advantage I can see is simplicity, even non-technical users should be able to figure it out.
Agreed, sometimes a post can just be good enough that all it takes is a few words to show your respect. Any commentary to the nuances of the project feels like arguing about whether or not Monet did a good job picking a paint store. This is definitely that kind of post.
Yeah, but using the right terminology makes the concept more self-describing and therefore more accessible.
i am currently using $20/mo dreampress you know whom. how does it compare to it? I had HN spike, and website (wordpress) was pretty much calm. they say it beats $500/mo wordpress.com VIP and they are a reputable webhost. whom i am using since 2007
Did you just confused "(great software engineer's) website" with "great (software engineer's website)" ?

If everyone just used lisp or RPN this kind of operator precedence bugs would be gone long ago ;)
While some usage comparison between GnuTLS and OpenSSL is good, it is important to remember that each project support different features. For example, OpenSSL do not support OpenPGP.
Donate to send me back to school
HealPay ports ruby app to Backbone.js and Node.js for DB performance at scale
Sad to hear that their company and product failed. Did anyone use their paid service?
Are you sure the defusing of Petraeus was the first example of the use of "parallel constructions" to ruin potential political rivals?

How could we (those not in the know) distinguish some politician's real, stupid, online sex solicitation bust from a parallel construction? That is, Larry Craig probably wasn't a victim, but maybe Eliot Spitzer was, eh?
You may have some warnings on XHR expirations if you're coming from a slow connection. What is the error?
Good stuff, Clark! A surprising amount of haters in the comments. Keep crushing it at Redbeacon! Redbeacon Mafia coming soon...
Sad. Another company failing and shutting down with its employees going to work at Yahoo.

Sorry, I mean they got acqui-hired.

EDIT: There are other comments saying that people are being unnecessarily negative. Maybe so. But this is a company with customers that is shutting down without a single apology to people that depend on their service. Overall, the post just feels like doublespeak, talking about "your transition" (to what?), and:

"we realized we’d found a partner who shared our passion for user experience, design, and visualizing information."

...which is why they've told us to shut down all the work we've been doing for the last few years and start something different!
I disagree and happen to like the majority of the icons - besides the QR Bitcoin one. Also, not everyone who creates a website wants to or can spend time customizing their own icons specifically for the site. Even if I wanted to do that I don't think I have the knowledge or "eye" for it even though I have designed and developed many commercial websites over the years.
If you can train your mind not to let the brackets and closing elements add to your cognitive load, then it's not so bad with raw HTML.
Mathematical notation is not easily computer parseable / checkable. And I'm not sure it's really standardized (no standards body that I could find) or even unambiguous for that matter. You could maybe call it a de facto standard.

Please read my other comment: https://news.ycombinator.com/item?id=7348666
I'll point out that Ansible can do this just fine. Assuming you've got a non-root user set up in your node list file...

ansible [server] --sudo -m copy -a "src=filename dest=filename"

Other parts of Ansible might not be great (specifically, fully automated datacenter orchestration isn't possible without writing your own tools on top of Ansible; I use Salt for that), but it's really good for ad-hoc management without having to put additional infrastructure or daemons in place.
Why is hash power required to have 'savings in bitcoin'?

Because without hash power the currency can be manipulated (e.g. double spent), which means that people won't accept Bitcoins, which means their savings would be worth their weight in Zimbabwe dollars.

Everyone holding BTC has an incentive to keep the hash power high.

Regardless, you haven't refuted the 'no technical security' assertion. It's just a question of incentives, dealing, and collusion, which comes down to human nature.

Which is the same thing preventing another Executive Order 6102. You can't escape human nature.
Wow, you're daft. Everything is, ultimately, getting turned into machine code. Not even Lisp Machines could get away from this fundamental fact: http://funcall.blogspot.com/2009/04/some-lisp-machine-minuti...

> Bogus objects — properly tagged words with invalid addresses that pointed at uninitialized memory or into the middle of object of a different type — which would cause the GC to corrupt memory would be left in registers or on the stack. These sort of problems were everywhere in the microcode.

Go build your cabin in the woods now.
Cause we know the encryption key...
Should really highlight the fact that it could be self-hosted [0]. Typing a password and uploading a sensitive file is never a good idea.

[0] https://github.com/louissobel/ppmf
Correction, a software engineer from the 80's who never progressed with technology website.
Doubleplus Chutzpah An image search company uses the logo from TinEye
Yahoo To Censor Login Services For Google And Facebook Users
Could you point out to evidence that they both use coffee extensively?
By and large, I suspect the only Internet companies that would ever need to exceed Dunbar's number[1] are those that have to implement advertising and sales functions. What is the largest subscription-based or one-time-purchase site?

1. http://en.wikipedia.org/wiki/Dunbar%27s_number
Any browser?
You have to remember that Lego has two parallel businesses:

Box of bricks - the only thing they were when we were kids.

Models - when we were kids models required xacto knives and volatile glue. They don't make those models any more (at least they don't sell them in Target like they used to). Lego has taken over the modeling market, and I think in net their model products are superior.

You can still buy boxes of bricks, I do frequently for my Lego obsessed son. Unfortunately, in some respects, Lego is now more a modeling company than a box of bricks company. In other respects, I've seen it argued that the transition is the only thing that has kept Lego from shutting down, so the models enable boxes of bricks to still be sold.
The point of the article is that you actually write specifications, and just call them "tests". Which is confusing. "Testing" means measuring or checking the quality of something.
A Supreme Court ruling upholding linking as free speech would be incredibly important.
Rust seems like it might be a good choice in the not too distant future.
Swiftype Adds Live Analytics And Other Features For Marketers
good tutorial:

https://www.youtube.com/watch?v=0lTmFXOkcOc
Too much protein in middle age 'as bad as smoking'
I was around when the term TDD first appeared. And I don't think that originally it meant anything more than what you are proposing.

But then some dudes came along and said: "This is awesome, lets make it better!"

And before one could blink, a concept of 100% coverage was born. From there on everything went full retard.
There was an extensive discussion between Howard and nmav on that blog post a few months ago. nmav has completely deleted that discussion from the blog because he didn't like the fact that additional problems with the GnuTLS code based were pointed out in that discussion. It is quite interesting that someone who is so tied into an open source project is against keeping a public discussion available to the world.
While I don't have a Google Glass, I could see this being the ultimate reading interface for a device like that.
Not at all. Looks like they decided not to mess with things at least in the short term, hopefully that continues.
As soon as my file is readable by javascript it could be sent anywhere by your code. I'm not saying you do, but it could. Therefore this adds an unnecessary risk. I would have to disconnect my machine from the network and clear all the browser storage before reconnecting to even begin to think this was safe.

Just to be clear: I'm not saying it's useless, just that if the file I was encrypting was so important that I needed to encrypt it, doing it in a sandbox that is directly connected to an untrusted third-party wouldn't be a very bright move.
Sleek simple solution, just like bittorrent.

Wonder if it can be used to peer-to-peer other stuff, other than file downloads. CDN boosting ? Ajax broadcast content ( e.g. NewsFeeds, live marketing notifications )?
Hi Laura!

Where could I find more details/inspiration for your filesystem? It's great to see innovation in that area!
I don't like HAML as much as I did, but one thing I do know about preprocessors:

I can't get many HTML developers to write valid markup. A preprocessor that won't build your HTML file until you satisfy its syntax prevents that.

And I can never accept "because learning it is hard and what we know works fine" as a valid argument.
There already is a moral code for app content required for store submission.

https://support.google.com/googleplay/android-developer/answ...

Whether or not these guidelines should extend to IAP implementation is up for debate, I'm of the opinion that consumable IAP should be a blocker.
How important is the architecture / topology of distributed systems?
As usual, the first thing I type is 'make me a sandwich'. No luck.

'sudo' is there, but without any notion of a correct password.
We have a business-class 100Mbps connection.

Chrome shows "Failed - Server problem" with chrome tools showing the request as "Method: HEAD - Status: (canceled)"
Au contraire: it makes software development a lot more fun, at least in my experience.

However, it back-loads the fun. With usual coding, the fun part is at the very start, you get to see something very quickly. But then the debugging starts, at least if there is any complexity involved, and the fun quickly wears off. You'll figure it out eventually, but by that time you are worn and tired.

With TDD, the not-quite-as-much fun part is front-loaded: you have to really think about what you are trying to do, almost always start with non-GUI code so there are no quick-wins to show off. However, once the you get all the tests to pass you are done and can check in and/or go home on a high note.
Static typing is easy for newbie developers. It sets hard boundaries, and when you remember those rules, it's easy to follow what the code does. You don't have to step through it in your head and think about it much to figure it out.

With that said, I think Apple are pushing the language in that direction, because recently everyone started developing for iOS, even people who didn't program at all. Apple is trying to make it easy for them. I see nothing wrong with that. It may not be the best from a programmer viewpoint, but I can understand it.

P.S. I think this is why Microsoft has embraced static typing throughout its developer ecosystem. It makes learning from scratch much easier and developers (although not very experienced ones) flock to your platform. Of course this same thinking created ASP.NET and shortened the lives of many good men. But you cannot judge them, really.
An interview we did with https://twitter.com/lancecarlson and https://twitter.com/ebzovi on rewriting their ruby app to use Cloudant's JSON doc store service. Flexible schema, and user permissioning implemented as a CouchApp.

(I work for Cloudant.)
Mt. Gox Timeline (with video)
Differences in degree produce differences in kind all the time. Some places you're allowed to have small amounts of recreational drugs, but if you have large amounts you're presumed drug dealing. Over the years we've allowed tips uncovered on undercover operations to nab unrelated criminal activity; now that the government is shown to be monitoring online behavior on most of us, we recognize it as a problem. Some places you're allowed to cut down a Christmas tree but if you clear cut the forest, people would look askance. The examples of quantity mattering are endless. Often the issue has to do with power. Once the quantity and efficiency of an activity affords vast new power, that power must be scrutinized and regulated.
We won't be charging people extra or forcing them to change their plan if you have a sudden influx of visits from Hacker News or another site. We will consider that a temporary traffic spike and we will be happy that you are in the spotlight rather than trying to charge you more! The plans are based on your usual monthly usage, so if you continued to get the same number of requests monthly, we would talk to you at that point about upgrading.
If you're willing to learn CS, it is objectively better. I've been able to more efficiently write, read, and maintain CS than the equivalent JS.

Having external factors such as a diverse team, or wanting to draw from a larger pool of developers should factor in to your decision to adopt CS. But as a language, I can say it's objectively better in my experience.
Hopefully they will fix this mess which is Zite on Android.
Contact lens-based Google Glass competitor unveiled at CES 2014
Exactly. What you want is "the fun of an energetic culture and the chance to make a ton of money when the startup goes public" but without taking the risk associated with that, which is precisely giving up your stable (high) paycheck and 9-5ish schedule.

*although, thankfully, the schedule-regularity theme is starting to show up more regularly in startup culture, which is a good change.
I haven't noticed it, so I took some screenshots. Here's how Glyphicons [1] render for me (FF 27.0.1, Mac):

http://snappy-app.com/s/show.php?pass=2423776c8599b57c05dc4e...

Enlarged:

http://snappy-app.com/s/show.php?pass=a1808d59f6efff53d1c847...

Am I missing something?

[1] http://getbootstrap.com/components/
The irony of what's happening here, that dogmatism about a belief is causing an inferior solution to be used, is infuriating and one of the reasons people have such a problem with dogmatic personalities like rms. It's technically illegal to use a better solution because of something as relatively unimportant as a license. Think of it like a Maslov's hierarchy - having strong security is way more important to most people than having a proper copyleft license. But instead of being pragmatic, we're stuck with a ridiculously dogmatic solution that ends up harming way more than the ill it was trying to cure.

It reminds me a lot of environmentalists going crazy to ban nuclear power in the 70s before we had as clear a grasp on the impact of dumping carbon dioxide into the air.
If a user doesn't trust Dropbox, why would they trust passwordprotectmyfile.com?

I know it claims the file doesn't leave your computer, and that might be true right now, but in five minutes if I visit the page the code could have changed. And it would hardly be user-friendly to ask users to check the minified javascript before using it.
> The syntax for functions that take parameters after
> an anonymous function isn't obvious.

Eh? A function is an argument list (), an arrow ->, and an indented body of code. Putting 'em together:

request(url, (response) ->
handle response
, (error) ->
handle error
)
I appreciate that testing a TLS stack is a major pain. But I'm a bit confused about "move to Haskell" in this context; sure, it would cut down on the buffer overflows, but TLS stacks usually fall to logic errors and timing attacks, not to buffer overflows. "goto fail" can occur in Haskell too: a chain of conditions can still incorrectly short-circuit.

Also note that Haskell doesn't exactly help in avoiding timing attacks. In a sane cryptosystem, you might be able to implement AES, ECDSA and some other primitives in a low-level language and use Haskell for the rest; but as you know, TLS involves steps like "now check the padding, in constant time" (https://www.imperialviolet.org/2013/02/04/luckythirteen.html). You could certainly implement those parts in C, too, and then carefully ensure that no input to e.g. your X509 parser can consume hundreds of MB of memory, and so forth, but you're going to lose some elegance in the process. (Those problems would admittedly be smaller in OCaml, ADA or somesuch.)

I'd be more interested in something like Colin's spiped - competently-written C implementing a much simpler cryptosystem. If only because even a perfect implementation of TLS would still have lots of vulnerabilities. ;-)

(I think the case for writing applications in not-C is considerably stronger, if only because TLS stack maintainers tend to be better at secure coding than your average application programmer. Like you, I do like writing in C, though.)
I still trying to understand how IAP are bad when I am obviously millions of others saw no need to make them. Its not a forced purchase.

Now I am all for not being able to obfuscate the actual costs of IAP. This method is used a lot by supposedly free to play MMOs. You don't buy items/upgrades/boosts with real money, you buy another currency to buy these IAPs. Worst, most purchase quantities are set to purposefully keep you from getting the exact amount you need.

Apps are merely doing what has been happening in full on computer games for years. The difference is that many purchases are made by children because insufficient parent oversight. So instead of putting the blame where it belongs we go after those who sell it?
Tested and working with recent Chrome, Firefox, Opera, Safari 6.1+, IE 10+. https://www.passwordprotectmyfile.com/faq.

It uses, among others, the Blob API so will not work on older browsers.
I agree sending someone to jail over a single shotgun shell is a gross miscarriage of justice and perversion of the law. Committing a second miscarriage of justice by sending a TV news commentator to jail does not make the situation better.

Now you have two people in jail instead of one. We should be trying to have zero people in jail who should not be there. We shouldn't say "Well, we put one person there for a bad reason, so we should put everyone else there for the same bad reason too". This is what you seem to be proposing. I get David Gregory doesn't share your politics, and maybe you just don't like him. That doesn't mean we should put him in jail just so you can feel better about some other person getting screwed. I doubt Irvin Nathan would feel any better about being in jail if David Gregory were there along with him. I'm sure he'd much rather just not be there.

Side note: You can look at actual data here - http://www.disastercenter.com/crime/dccrime.htm

The murder rate in DC was rising steadily since 1960 until the gun control laws were passed in 1976. It went down briefly, then exploded with the crack epidemic in the late 80s, early 90s. Obviously, there are many, many factors contributing to the murder rate and you can't control it by modifying only one input. I'm not trying to imply otherwise.
What's your Chrome version and OS?