skysight-inc/HackerNews huggingface dataset:
Stop with the buzzwords. How does it work? Tell me and I'll pay you.

As it is, it looks like a bunch of BS. And Disney uses it? Really? Do you want me to email some exec from Disney to verify this? Because I have a contact.. don't make me do it!
After reading the story I just have to recall stories from the guys who flew and serviced F4s, they joked they could fly without either wing simply because it was just a rocket sled.

We had one guy knicknamed Major Cablecutter as he "clipped" the guidelines of a radio tower one time. He also had come back more than once with branches stuck to his F4. Being that they were only "Recon" they tended to be aggressive during war games and this game guy over stressed his airframe turning into some F18s trying to tag him.

So many military planes have such high thrust to weight ratios I do not doubt that wings merely become the means to stable flight
Let us know what else you might find useful ;]
Suspected Russian spyware Turla targets Europe, United States
Programming Conversations with Alexander Stepanov
Oops, I wrote this when I was very tired last night. Meant Leah McGrath.
Alexander Stepanov and Paramjit Oberoi have started teaching an weekly course on programming for software engineers at A9. From their internal announcement "We plan to cover a wide variety of topics, starting with the nature of programming, and continuing, in no particular order, with benchmarking, algorithms, data structures, caches, instruction level parallelism, generic programming, variable sized types, and Platonic ideas."

The course will be offered in a series of 2-hour lectures that will be published on the A9Videos channel on YouTube (http://www.youtube.com/user/A9Videos/playlists), typically on friday afternoons. The first two lectures are now available.

Previous classes from Alex, "Efficient Programming with Components" and "Four Algorithmic Journeys" are also available on the A9Videos YouTube channel.
The Onion in the Varnish
Here's an example which might explain the decoupling a bit:

// You may call this syntactic sugar
var p1 = new Promise(function(response, reject) {
setTimeout(function(){
response(Math.random() * 1000);
});
}).then(function(val){ console.log(val); return val; });

// But here's the magical decoupled call
p1.then(function(val) { console.log(val); });
We implemented it in b2g aka FirefoxOS and the user experience is quite nice there. I agree that it should have been done on firefox desktop too.
Your comment is great ... but it belongs with a different post.
I've heard that writing equations on a whiteboard paces the talk and give the audience time to digest. With a slideshow most presenters will go at a pace comfortable for them, but that typically ends up being too fast for the audience.
I don't find the pricing confusing at all. Why would they allow users to build a complete website for $14? They make the money on the hosting.
Aw, not all email is spam. Be conscious of the customer; while developers (you) prefer less/no email, many non technical people find it very valuable and have a different tolerance.
Fantastic. You rock.
Your assumption that the "hole" should be magically filled by every library writer like OpenSSL is simply wrong. If the operating system doesn't know how to provide enough initial boot entropy, OpenSSL can know that even less. Remember, OpenSSL can be initialized by practically unlimited number of applications practically unlimited number of times after one boot. Do you claim that all these invocations should actively wait on /dev/random? Even if OpenSSL manages to keep the global state, doing this only once after the boot (how can it know that?), then every other library would need its own global state and its own new /dev/random call for not knowing that other libraries already did this. See how it becomes always less reasonable?

Once again, kernel can't manage to do it only once after the boot, in general. Library/server application writers could not be expected to do more or better. UI applications can at least collect mouse movements, if they actually know they have an access to a mouse! Enough initial entropy is a hardware problem not the question of "simply calling the right calls, and 'random' is righter."
It should work. If you have serious trouble with that then there are also devices like the Bus Pirate[1] that can do the same thing (Though I have yet to do it myself).

It's really neat how easy this kind of thing has become recently with all of the hobby electronics guys driving the market and opening up doors that 10-15 years ago looked bleak at the time (though that could just be my memory coloring it).

I have used similar stuff to fix up routers (though haven't had to interface with the flashrom directly) and install openwrt.
I think you meant to comment on this post:
https://news.ycombinator.com/item?id=7360011
Post title misleads: the article does not say the Lakota have "adopted" this currency.
https://github.com/qq99/echoplexus

Echoplexus is an anonymous, web-based, IRC-like chatting platform that makes its best effort to respect your privacy. It allows you to create public or private channels. You can encrypt your chats. You can secure a pseudonym for linkable anonymity. You can code and draw together in real time. You can make free and secure Peer2Peer video and voice calls with the people in your channel using WebRTC.
The power of Lisp is that it has a word for this concept.
I could be mistaken (as I haven't actually researched this), but I don't think there is any way around needing OSX to package for iOS. Even tools like cordova/phonegap hook into a base Xcode project when it comes to compiling and packaging.
No developer is making a mistake by using urandom. Every Nacl user, for instance, is relying on urandom. Every Golang user is relying on urandom. Those are two crypto libraries with impeccable pedigrees.

I don't understand the rest of this comment. You build an argument about I didn't write "use random them urandom". But I did; I just didn't word it the way you seem to want me to have. Specifically, I wrote: "But [the problem is] also easily fixed in userland: at boot, seed urandom explicitly".

Developers should use urandom to the exclusion of all other CSPRNGs.
(Note: I haven't worked with Ember, and this probably doesn't jive with how they do things)

This sounds a lot like traditional async Model/View programming. I've traditionally passed a model around, and use subscriptions to listen for "data." That has the added benefit of being reusable, with the model dispatching change events. Promises in this case sound like they are fulfilling a similar role by your description.
If this was integrated with Kerbal Space Program my life would be complete
I used to love splicing corners and shadows into massive nested table layouts. I didn't realize that skill would someday be useful to me again :D
It looks like a clone of ChartBoost and AppFlood. As an indie game developer, I have found these sorts of things somewhat handy. Often you don't really want to bother monetizing a game with ads and the like while it is growing and you would only make a couple hundred a month anyway. Instead you can show these cross promotion options instead. Basically it is like selling ads and using the money to buy ads for yourself, but more efficient since you are cutting out the middle.

Cross promotion methods are part of how larger companies get their games so many users. E.g. farmville will advertise cityville, etc.. So options like these help smaller guys compete with some of the powers of larger companies.
>In fact, ideally, do this before the lecture. That way, many of the students will have already read through it once, and will be able to ask more thoughtful questions.

"many" is an overestimate.
Just a note from the non US world: Please have such keys customizable. z is an especially awkward choice, because with qwertz it is between the t and u and thus far from all the other keys you might use for your gameplay.
Chord – $1300/meter Ethernet cables for audiophiles
Ask HN: What's with posting StackOverflow questions here?
I see a rise in people posting StackOverflow questions on HN. Is it to get more answers to your question? Sometimes it's a link to a rather obscure programming tidbit, and that's ok I guess. Other times it's a question that fits well on SO, not so much as "hacker news."
This is 6 grafs of concern about the Linux first-boot process that can be addressed by 1 line in an rc script. Seed urandom at boot from /dev/random, and then forget about /dev/random.
Have you tried Envy Code R?

http://damieng.com/blog/2008/05/26/envy-code-r-preview-7-cod...
http://live.reuters.com/Event/World_News/108537123
I'm not sure, but if so I have doubts it would be admissible in a higher court. "Not an official record" and such.
I just successfully changed the lego movie from dont waste your time to see at theaters by clicking a ton....

here:
t.string "ip_address"

@link = Link.find_by_code!(params[:id])

then if that link.hits.find_by_ip_address(request.remote_ip) == nil
Continue with adding a .new(:ip_address => request.remote_ip)
I love this thread and concur with the others that it should be made a regular occurrence.
Show HN: Google Conway's Game of Life
One of the best CS classes I took in college was an introduction to scheme that used 'The Little Schemer' as its text book. Having only worked in imperative languages it really opened my head up!
When you say implement in Firefox, did you mean instead of a popup, Firefox simply display an integrated login button in the browser?
Mozilla Identity dev here. The reason for that was due to a large degree to time and priorities. We were close to shipping Persona preffed off in Firefox over 18 months ago. Then FirefoxOS came along and our focus was changed to implementing Persona as the sign-in system on the device (which we did; it's natively supported there). FirefoxOS has been a massive effort on behalf of the whole company, and it has diverted crucial resources from the Persona effort on desktop. Then we shifted our focus again to Firefox Accounts and revising Sync. A native implementation of Firefox Accounts should be landing in FirefoxOS 1.4. As a result, we have native BrowserID support (both Persona and Firefox Accounts use this protocol) in FirefoxOS and as a backbone in desktop Firefox. There is a lot of persona in Firefox right now, but sadly you can't see it. Despite these massive efforts, we still have not been able to land the last patches to surface this in the UI on desktop.

And you're right, it appears to send the message that Mozilla did not see enough importance in federated, user-controlled identity on the web to make sure it landed in the desktop browser. But Mozilla, like all organizations, has to balance its priorities. There's a lot going on, and the decision was made that other projects would take priority. I hope the decision is revised in the future.

If it looked half-hearted, I can assure you it was not from lack of effort or dedication from the team. We believe in Persona and poured our hearts into it.
That's why i cant use Mozilla techs,lot of projects started,few finished.(XULrunner ? Tamarin ? ...). Nobody is going to use Persona now.
Writing a whole iOS game in Scheme is about as crazy as flying an F4 with only one wing.
This is really great! Nice job!
Hard to say, timing the market is hard. There are reasons it could continue to go up (if the economy continues to improve, limited housing stock, lots of high income tech workers). There are reasons it could go down / level off (it is a bubble, interest rates rise, fundamentals as to what middle income people can afford).

As someone who is looking to buy in a couple years, my take on it is:

a: housing prices cannot rise exponentially forever, there has to be some relationship between the price and people's ability to pay.

b: if interest rates do go up a lot, then prices should come back down again, especially if it starts raising people's ARMs a lot. This would make the loan have a higher interest rate though, so it favors having a big down payment.

c: Maybe I don't care about timing the market, it seems hard to do anyway. When I find something I can afford, I'll be holding onto it for decades, so how much I could sell the house for later on ought not to be a factor. Price is not the same thing as value.
Found Menlo for Windows and gave it a shot. The "i" italic is way too slanty, it looks weird with syntax highlighting.

Then I found Meslo, which is some guy's attempt to copy Menlo and make it available for windows; this fixes my problem with Menlo, and also fixes my only problem with DejaVu : the dotted zeroes as opposed to slashed zeroes.

Current monospace font recommendation: Meslo
https://github.com/andreberg/Meslo-Font
can you shoot me an email? alaxic@communly.com
Overall, great font! The only thing that I don't like is the lowercase i, but maybe I am just being picky. All of the characters are very easy to distinguish.
For getting an idea of the impact: this is one person in a small town, not something at the level of a state. It's news because it's rare.
>I wish this had been recognised as indicative of internal complex state rather than laziness and vacuity and then I might have been encouraged towards developing those thoughts properly.

Agreed. Instead of being encouraged to following our own path and letting our creativity flourish, we've been beaten down for the sake of fitting in.
Any plans for a WebFlow style editor for e-mail? That would be awesome.
I just got a 250k BitAngels grant for a project I'm working on. I'm in Austin, but I've also been considering a move to a less expensive place as long as it had good broadband and an active developer community. Chattanooga is definitely on the short list.
NSA created 'European bazaar' to spy on EU citizens
I seriously doubt all these instances of OpenSSL are generating keys; if they are, you are doing something else totally inane, and there is a better fix. The only situation where the blocking argument is a reasonable argument at all is something like a webserver: where you are generating keys over and over and over again (what I describe as "under load"), and in that case seeding it once per webserver start seems like a no-brainer. I don't understand why you are seriously advocating running with scissors when there is a sensible and simple alternative. If every single process that generated a key initialized /dev/urandom once, your desktop system or server is unlikely to flinch, and given that your router is probably only running three such programs (and one of them probably only happens the first time you turn it on), you are unlikely to notice either (especially given that the thing probably takes a while to boot anyway for unrelated reasons).
It's the halting problem - all it takes for someone to embed in your data code that loops forever (wait infinite), or recurses (crash), or discover some vulnerability... Not directly related to saving files as lua, but say as bytecode: https://www.youtube.com/watch?v=OSMOTDLrBCQ
This has most of the signs for another bubble, including people talking about why this time is different.

However, we aren't yet seeing the massive amount of money-losing IPOs.

So, when in doubt, trust Uncle Steve http://steveblank.com/2011/06/17/are-you-you-the-fool-at-the...
Question: how is this any different than the scheme Microsoft instituted in the 90s to artificially keep Office and MSIE superior to alternatives? Wasn't it this same regime which ultimately was ruled as anti-competive?
The one here in DC has (already) earned a decent reputation, and its very new. I'm currently enrolled in a "Data Science" course (which is really an "intro to machine learning and quantitative statistical analysis" course) and I'm very impressed with:

1) The instructors: They are sharp, highly engaging, both active participants in the local start-up and open data communities.

2) The location: It's IN the biggest start-up incubator in DC, 1776.

3) The integration with people who are hiring and non-profit DC organizations who want help with their data. We are already having start-ups coming in to recruit with test projects (which is in my opinion the ideal way to hire)

I think the shittiness of the SF class has more to do with SF and their ridiculous VC bubble and talent shortage than anything else.

Edit: I meant to add this: Most of these type of courses really don't think about industry WORKFLOWS. This course, instead of relying on people submitting their assignments to instructors via email or a website, is instead forcing students to learn Git (if they don't already know it) and then merge their answers into the official class repository as if it were a large codebase. This is one small example of the industry focus of this course. I think the reason this course is so good is (unfortunately) the reason the SF course referenced above was so shitty: they give free reign to the instructor without over-burdening them. This allows a great instructor to shine but also lets shit instructors to really tank.
I could be too late... but I'd love an invite too. I'm excited to experiment with extending Atom using Javascript, since I'm a web developer. cunninghamd@nosleep.ca.
Yes, without any Javascript, real native chrome.
Or HashDOS attack - http://lua-users.org/wiki/HashDos
Create a thanks for following me Twitter bot using ruby
CPM, CTR, CLV... Let's start a Stack Exchange site for digital marketing.
How To Give Proper Credit To Your Employees
If you could update it so you could make the scripts edit fields full screen that would be awesome! it is really hard editing then in the tiny boxes they are at the minute.
Now that's a great experiment! I think the use of Powerpoint is useful and mandated under certain circumstances (e.g. if you want to show experimental data), but when discussing a concept with your peers, working on a whiteboard is better for various reasons:

1. It forces you to think more about what you want to say and how you're going to write it down beforehand.

2. It sets a uniform pace for your presentation (writing stuff down is harder than advancing slides)

3. It lets your audience follow the train of thought that lead you to the results your presenting and allows your content to unfold before their eyes.

4. It invites participation and allows for easy modification and adaption of your content during your presentation (try that with Powerpoint).

That said, structuring a good whiteboard talk/presentation is hard work too and I've seen many people (including professors) fail at it.
Or, you could say that it was never illegal...
Ask HN: How can I sure my blog will live after I dead, forever?
Is there any service provide my blog and post will live forever after I dead?

How it can be done?

Is there any solution?
Most devastating website attacks (Video)
Gravatar image url generator simple method
Do you know what types of relaxations there are on software for experimental airworthiness certificates?
Something like that definitely needs to exist. Possibly down the road a bit... :D
I wonder how much this has to do with the involuntary commitment legal developments of the 1970s.
Ah I see, I missed the water landing part, sorry.
The deeper the nesting, the longer it takes a "Reply" link to show up. Wait a bit, reload, and it will be there, or follow the "link" link and it will be there immediately.

This is a deliberate feature to slow down "discussions" that are actually unproductive back-n-forth arguments.
Lack of Turing-completeness can be a feature. Take PDF vs PostScript. The latter is Turing-complete and therefore you cannot jump to an arbitrary page or even know how many pages the document has without running the entire thing first.

By limiting expressiveness you also gain static analysis and predictability. It's not about limiting the potential of computers, it's about designing systems that strike the right balance between the power given to the payload and the guarantees offered to the container/receiver.

For example, it is only because JSON is flat data and not executable that web pages can reasonably call JSON APIs from third parties. There really is no "better way" -- if JSON was executable then calling such an API would literally be giving it full control of your app and of the user's computer.
Jeez, how much longer until we can codify into law that solitary confinement is cruel and unusual?
As somebody who has spent lots of time trying to find free (for academic use) data in natural language processing, I really hope this becomes quite popular.
Well they can give the rest of us a good laugh - and only the rich, who can afford to lose the money, will get taken in.

I love the idea that an Ethernet cable could be presented as "directional" - made my day.
Solid architecture. For those not familiar with payment industry terms PCI stands for Payment Card Industry. You usually know this as PCI DSS (Data Security Standard). Basically all the payment card providers got together and said that you need to follow these rules if you want to accept credit cards. The rules are pretty straightforward ( have a firewall, don't save CVVs, encrypt credit card #s at rest). You then pay an auditor to audit against PCI DSS.

If I were looking for vulnerabilities I'd probably start with any XSS. Chances are the credit card data is locked down tight and encrypted. But what if I can scoop it up as it gets transformed into a token? Also look at where you store the encryption keys to decrypt the card data. There are hardware devices you can use that are especially hardened.

The problem with bitcoin is that it necessitates an even more secure architecture because you don't have a 3rd party to run to if things hit the fan. Suppose all your credit #s got stolen in this case. You can run to Visa/Mastercard and they will invalidate the card #s in bulk. Or at least do monitoring on them. What do you do when all your bitcoins are stolen?
Propositions as Types [PDF]
It's already in the works, actually! We'll post it here on HN pretty soon.
www.posthaven.com
IMO, this is key — although I'm biased, because I'm asking you to cater to me. However, I think I'm not alone: someone a little tech-savvy, but neither a true developer or designer. I think there are lots of people like me who have been forced to wear many hats at work and dabble in many technologies without a ton of expertise, so the ability to quickly meet a small need (in this case, an HTML5 animation) without tons of training or money is enormously valuable.
For the billionth time: is the user actually doing this, and does the user or system integrator realize they should do this? Apparently, the answer is no, based on real-world systems that don't do this. In some situations (such as an Android phone) it might not even be possible to do this (locked bootloader). Why risk this when the solution is so simple? I maintain that you are encouraging a situation where this kind of mistake happens, when there seems to be a negligible cost to working around it as a developer, protecting your users from their own stupidity and protecting your users from the stupidity of their system integrator.
Tickle, The App That Saves You From Awkward Situations, Doesn’t Really Exist
Open sourcing kraken.js
NaturalNode: https://github.com/NaturalNode/natural
an NLP toolkit for javascript. we're always looking for more algorithms and broader language support
I would love to hear more about what you're working on to bring these concepts to the Javascript world, since we at famo.us are interested in the same.
>There really is no "better way" -- if JSON was executable then calling such an API would literally be giving it full control of your app and of the user's computer.

Of course there's a "better way": running the code in a sandbox. You could do so using js.js[1], for example. (Of course, replacing a JSON API with sandboxed JS code is likely to be a bad idea. But it is possible.)

[1] https://sns.cs.princeton.edu/2012/04/javascript-in-javascrip...
It would be awesome to see this kind of salary transparency. Worst case, you end up paying someone closer to the top of the range than you would have had to. But you save a whole bunch of unnecessary work by both job seekers and application reviewers.