skysight-inc/HackerNews huggingface dataset:
So, it all depends, right?

If you have little commits that just change some config settings in your fork of a common jQuery library, that's not a big deal.

If you have little commits that change some deep magic in sizzler, okay, that's something we should talk about.

If you rewrite a software rasterizer, just for funsies, that's something to talk about.

If you write yet another web framework in Ruby, or lightbox plugin for jQuery, I'm going to call you out on wasting time.

If you can explain why your implementation of half of the functionality of Rails is desirable, and satisfy me that you're doing it for engineering/business/safety reasons, I'll be really impressed. If you admit it was for the lulz or to learn or because you didn't know any better, I'll admire you for your honesty. If you did it because async is srs bsns guise also activerecord more liek activerecrud amirite, I probably will let somebody else have the joy of breaking in a cowboy coder.

It can be very, very hard to commit work to other people's projects--I skipped even the modest task of putting out a Visual Studios make system for somebody's Minecraft clone, for example, because I just didn't want to have the "Cmake? Fuck cmake!" argument.
The code has been specifically made for that particular animation and, to be fair, it wasn’t even modular enough for my own needs :D Joking aside, I’d love to blog about it and more generally about animations in UIs.
The bad news about bitcoin just doesn't seem to stop.

I wonder if the suicide was related to the bitcoin side of things, or personal matters. Is the site still up and functioning normally?
Sounds like a smart move. Don't lower your expectations on the next job because you're eager to get out of the current one. Good luck.
Thank you, I'll need it :-)
Boundless (http://www.boundless.com/) did this first, and I think we did it better IMHO.

https://github.com/jelder/doors
http://doors.boundless.com/
So do you mean that (until now) they just failed to find them, or that (until now) they were only found by people who did not have the incentive to report these bugs?

Because in the top post you call the bug "simple and basic".

But then in that same top post you imply (in your last line) that GnuTLS gets so very little attention, but now you say that lots of people have tried to find bugs in it.

I'm not trying to criticize you here, but trying to figure out what you're trying to say?
Let's not use sensationalist this way, I think maybe you were looking for 'hyperbolic' or 'intense' or something. I agree with the others, too, no point in mincing words, as you have done for him.
Thanks, you can see the rest of my apps here: https://itunes.apple.com/us/artist/rizwan-malik/id687592255
Chrome Developer Tools
I avoid F2P games just like

I just wish Apple would give me a way to bypass all F2P games in the App Store search (not all IAP games are F2P, e.g.: Carcassonne). Right now, I have to click through and see if any IAP has a "coin" feel to it, and if so, I simply ignore the game.
I appreciate the quick feedback - I myself would love to use such a service. Just to clarify, I don't have the development experience to build this myself yet (I just switched to CSE from Finance this year) but if anyone else would be inclined to give it a shot, I'd love to help. Otherwise, free idea!
And you can use it for just 5% of any profits made on it.

but seriously, have at it. Guaranteed there's prior art.
Oh, God, a Visa-owned Paypal... They'd ruin it in less than a year.

Paypal is the best option for small and medium size online transactions at the moment.

Amazon, Google, Apple, and Square all want to own the payments space, and Paypal is still the only one that actually works worldwide.
Not a constructive use of one's time.
great job on getting an app created and out there. however, personally i don't think i would use yet another app just for the sake of sharing links. i already have whatsup which i use on my android to share anything and have the conversation in the same window or group chat.

but again great job on creating the app and good luck!
shrug

That doesn't sound like very much data for a fleet of vehicles to collect over the course of a few years. Pretty sure it was just a handful of packets per (unencrypted) access point, but please correct me if I'm wrong.
This method of speed reading relies on you not having to move your eyes, so unfortunately adding phrases to the mix would likely sabotage it.
Big speedup for Random Forest learning in scikit-learn 0.15
> Getting a high score is about knowing how to take the test, and this is learned by taking it many times.

This is silly. One way to learn to get a high score is to take the damn thing many times and waste hundreds of hours. The other way is to have a rich life full of deep conversations, lots of reading and writing, play with various sorts of puzzles and games, schoolwork taken seriously, real extracurricular projects, etc.

About half of the people I know who got above 1500 on the SAT, including a few who aced it, never studied for it explicitly, beyond a couple of practice tests given directly by their public high schools.
"and it pretty much just boils down to intuitive addition, multiplication, and division."

Or does it? After all, probability is one of the very first mathematical tools to be divised, but a rigorous theoretical underpinning for probability and statistics had to wait until measure theory, millenia later. And this was not for want of trying.

Part of what makes things "boil down" to the simple and intuitive is years of hard work. Reading Newtons original work on the calculus is painful and convoluted, it took many hands to polish it to the point you might have seen it in.

If we've done our jobs well as mathematicians, eventually the essence of an idea will be easy to understand an apply. If you really want to understand it though, you may have to dig into some much deeper work. And often, as with many thing is in mathematics, human intuition will just tend to be wrong about it (e.g. the Monty Hall problem).
Persona is dead: https://wiki.mozilla.org/Identity/Persona_AAR
I'm going to agree with you there. The browser environment you set up for your non-technical friends and acquaintances should include a script and flash blocker that supports both whitelisting and blacklisting.

You simply shouldn't allow a script to run on your device without some amount of trust in the site that gave it to you or a thorough code inspection by multiple experts. Even then, it still might have a hidden exploit.

Because of this, there ought to at least be a landing page for script-blockers with a bit of explanation as to why they can't make use of the site without allowing scripts.

I am firmly of the opinion that scripts should strictly be an optional addition solely for the purpose of improving the user experience of visitors. HTTP 1.1 is good enough that about the only thing you do actually need scripts for is persistent and/or two-way communication channels. Almost everything else can be accomplished on the server side with a stripped-down user interface (as one might use with screen readers, text browsers, or even SMS or WAP on feature phones).
Game made in 2 days as learning project
Reviews and suggestion are heatedly invited.
Such that the contestant chooses 1 door, the host then opens 98, and they are given the opportunity to switch to the last remaining door?

That's actually a pretty brilliant way of explaining it. With numbers like that the answer becomes much more intuitive.
That's motivation to find a business model that can support a healthy work environment from day 0 and mentor folks coming up.

http://www.virgin.com/richard-branson/run-businesses-like-ho...
FizzBuzz Sans Alphanumerics
If the title is changed, currently it's "Found it on TechCrunch. Reads like a markov-chain-generated series of buzzwords."
Well, I'm not trying to snark ... I just don't see the distinction. When BDD first came out, it was based on the premise that, yes, we're really just doing the same thing as TDD, but we're using better words. We use "spec" instead of "test," for example. And merely the act of using more precise words has a deep effect on how we think, and therefore that alone is worthy enough of a basis to launch a new movement called "BDD."

I liked TFA for its clarity and I believe it is accurate. But it still feels to me like it articulates the same thing I read when BDD was new. I wonder if possibly the author has rediscovered, independently, the same thing that motivated the launch of BDD in the first place.
functions don't conform to specs, the API and library as a whole should conform to the spec. It's perfectly valid to have one function that supports strings and another function that supports binary data.
This is a horrible graphic. What are the numbers written? Is it a mean, median, etc.? What's time frame? And if there is a single number, why is it a bar? I'd like to see a box plot.

Not to mention all the junk in the background. What do the dotted lines even mean? Tufte would have a heart attack.
>The point for me is, if the site uses so much javascript you can't even just see the text without javascript enabled, it's probably a bullshit experience. Or a neat WebGL demo. This is the former.

I totally agree with that, but I think it's a tangential point to the one I was making. I certainly think that developers should only use javascript where it's actually more convenient to do so than to use CSS, HTML and server-side code.

I personally find it extremely irritating navigating to sites which use javascript for something which naturally lends itself to another technique (like sites which request all text using javascript, as 'bphogan' pointed out above). When I visit sites such as these, it makes me feel like creating a parody site which draws the entire DOM in javascript just to illustrate the point that javascript is but one of the tools in the developer's toolbox.

The reason I get somewhat annoyed at noscript proselytizers (which I fully admit doesn't apply to any of the commenters in this thread), is that I've seen what happens when developers are forced to attempt to produce a stateful, interactive experience for the user without using (too much) javascript, and that thing is ASP.NET WebForms. As the line shrinks between desktop apps and web apps, we'll have to find ways to make overcome the web's shortfalls in interactive application development, namely state management and responsiveness. If the use of noscript increases, then this becomes harder to do, and makes it a lot less possible to make interactive web applications look like anything more than a poor mockery of interactive desktop applications. I truly want to see a time within the next few years where I can barely tell the difference between a desktop app and a web app, and unfortunately for noscript users, such an experience will probably require javascript.
Create and Fight Python Robots
well, you gotta try the app to see its potential. Why do so many people use snapchat when you can send pics to friends already through imessage/whatsapp? Because of the interface.

Look simplifies the process of sharing links, pictures, and apps and focuses on sharing cool things, not starting discussions.
Congrats to the Vizify team!
I have Google Glass and this is horrible. Your singular eyeball will be toast after a few minutes.
Historically pricing a game too high hurts sales because many people have a limit of some sort on how much they can spend on games. If a single game costs a huge percentage of that (say 50 or 60%) they are reluctant to buy it even if it's well-reviewed because it might turn out to be bad, and then they have no more games budget left.

Games prices have actually come down compared to the bad old days of paying upwards of $90 for Super Nintendo carts, for example.

It is the case that production costs have been shown to be scalable; hundreds of millions go into developing a game like Bioshock: Infinite or the latest Call of Duty, and hundreds more go into marketing and sales. In practice, it is possible for a publisher to recoup that investment and earn more on top, even if it's really difficult.
Open source needs more of this. I've seen FreeBSD's model but I think there's room to maturely optimize.
> Which can only be defined subjectively. Something dark to you is not to others.

Dark patterns aren't patterns that you don't personally like, they are those that are designed to have a significant effect in getting users to take actions or behaviors that the users did not intend to have in the first place, such as leaking personal information or making unintended purchases.

> Only ones which are fraud, which is illegal.

Fraud is certainly unethical, but there are things that are legal and also unethical, this is just being obtuse.

> Yes, actually plenty of people are. Subscriptions are dark. Premium games are dark. Skill games are dark. Gambling games are dark. Ads are dark. Freemium is dark. Everyone can call anything dark.

You are diluting what is even meant by a dark pattern here to make it meet a definition of "I don't like it". Calling a skill game dark is absurd, a user playing a game would wholly expect that their playing skill may affect their gaming outcomes.
> Dell has responded saying that this practice is okay because the company is charging for the service and not the product.
But they say they are looking for people to go to brunch, wait in line, then return. That's two short spikes of activity next to each other once a day. A low pass filter would filter that out as a high frequency noise.

Even basic stuff like how long it takes someone to drive from one spot to the other before they can contribute to increased demand in Oakland when they are in SF seems more complex than a basic filter and in line with Kalman.
You know what? Sometimes, it's fine. You should not share a root account with other users. This advice comes from a time where you'd have the "root password" and log into remote servers that way. Then, when someone leaves your organization, you'd hopefully change the root password to make sure they person that left no longer has access.

However, there are some concrete cases where logging in as root is just fine:

- Making a database backup remotely. You have to give the backup user enough privileges to initiate a database dump, stop the database process, grab the backup, rotate the backups, start the database process up again. You can go through the giant pain of setting up the permissions just so, or you can put a separate SSH public key into /root/.ssh/authorized_keys and just let root do all of this.

- Initial VM setup. If you are automating something like provisioning EC2 instances, sure go ahead and set up individual users, but it's a lot easier to first connect as root using your own keypair.

- A remote monitor that logs into a single purpose VM to restart a process. Same as the backups example, but more broad. Once again, you could set it up using specific users, but the system would be more brittle.

- Lots of other cases where root is really what you want and doing sudo won't work because the session is not interactive.

I figure it this way: if I compromised a local account on a server, I'd just add `alias sudo=~/.bin/my-evil-sudo-that-emails-your-password` to your .bashrc. That way I'd get root without any local exploits in the kernel, etc. Basically, adding extra protection around the root account does nothing if you are a sudoer.

Some steps you can take to actually increase your security instead of following the advice that is so misunderstood:

- Set the root password to a long random string, then lose the string. `su` should never be used by anyone but root.

- Disable password logins. Period. Do this now, and do it everywhere.

- Disable password-based sudo. Use pam_ssh_agent_auth [1] to escalate privileges and ssh-agent to forward your key through your ssh session. I am not sure why this isn't the default, but it really ought to be.

- Make sure your local key is encrypted with a strong passphrase. Once again, use ssh-agent to not have to enter the password every single time.

- Set up a VPN to access your servers and only allow ssh from the VPN.

- For the truly paranoid, set up two-factor auth over SSH. This is easy to do with Google Authenticator (it's just a random number with the seed being shared and secret and the number being generated every 30 seconds), or using SMS which is just slightly more complex/costly.

[1] http://pamsshagentauth.sourceforge.net/
I think there may actually be some real content there, but it certainly is ...dense prose.
> The one with the most mining is most secure against 51% attacks

Do you mean: A. an attack by the rest of the earth's computing power (e.g. you try to have miners control 51% of the earth's computing power - highly doubtful) or B. an attack by colluding mining pools?

It seems like the B (collusion) attack is simply a matter of the number of pools which have to collude, and not actually related to the absolute value of CPU power. And for A, I'm struggling to see how much [non-colluded] miner power you'd need to fight off an external attack.
Nah, gamers deserve that hell.
Quick point:

1) Scalding has a DObject like type: ValuePipe[+T].
2) The reason you must explicitly call .group to go to a keyed type is that is costly to do a shuffle, this makes it clear to people when they do trigger a shuffle. If you don't like that, make an implicit def from TypedPipe[(K, V)] to Grouped[K, V]
3) You can easily use scalding as a library, but most examples use our default runner. We use it as a library in summingbird. But you are right, a nice doc to help people see what to do might help people (hint: set up an implicit FlowDef and Mode, do your scalding code, then call a method to run the FlowDef).
Dude your game looks good. But I think sound could be improvised.
Engineers are trying to upgrade the humble shipping container
Sell a well built MozBook with 4GB+ and a full HD screen and some nice extras like a backlit keyboard for double the price of a typical Chromebook and I am in. Perhaps. I probably would not have to queue for it.

Mozilla are facing some real problems I am afraid and they aren't technical ones. They aren't the default browser on any significant platform so for people to switch they need to have something wrong with their existing browser. That is decreasingly the case with IE which has improved considerably and then they have to be the best alternative browser available which for many people is questionable.

Going the platform route is interesting but they are competing with Android with a massive installed space at the low end.

The elephant in the room is the Chromebook which I am writing this, and most everything else, on and the trouble with the damn thing is it is good enough. Not stunningly, mind blowingly amazing. But good enough and selling by the millions. And chrooting it and installing Firefox is not a typical scenario.
Looks like a nice product! Congrats on the launch.

One of the main concerns for any new book is marketing. Are you planning to address this issue?
It's all Steam's own dumb fault for having no refunds, turning Steam games into lottery tickets. My Steam library is made up of 90% junk I wasted money on and 10% good stuff I got a fair value from. That means I have to pay less for every game just to get a fair value out of Steam as a whole. THAT is why people want to pay $20 for games that truly are worth $60.
The article makes an analogy with shoes but in order for it to hold developers would have to be making identical games.

Many people wait for the next release in a series and many people buy on release day.

If you just want to kill a couple hours then sure, any game might be good enough for you as the consumer. But if you want to play Action Game 9: The Bad Guys Lose then that's your only option.

The authors big mistake is in equating a commodity good like shoes with a creative good like games. If you want to read the latest Game of Thrones, you aren't going to say, "That's 30 bucks! I'll just buy Harry Potter."
I dont get it - Why is this different from stripe.js ?
There's pretty much no way a race to the bottom benefits gamers. This has already been shown by what happened on the iOS and Android marketplaces, and the effects will only be worse on PC and consoles:

The existing industry is pretty much built around higher prices for games, and the things that come with them - large amounts of content, replayability, polish, story components with voiced dialogue, cutscenes, etc.
There are many developers who are able to subsist happily on sales numbering in the tens of thousands, because they can charge a reasonable price for their game while developing it on a low budget, while on the other end you have studios that sink hundreds of millions into AAA video games that they sell for $60 + additional DLC packs down the line. Both of these types of games exist in the same industry, roughly occupying opposite sides of it. In the mobile market, both of those game types get suffocated by the manipulative F2P games that milk as much money as they can out of players before they churn.
I know additional anecdotes aren't worth much, and I'm a very small fish, but the addition of the email address and the "remember me" checkbox was an unpleasant surprise for me as well and seems to have increased confusion/uncertainty for my customers.

I'm the author of "Learn Java the Hard Way". My customers aren't interested in a "relationship" with me or my site. They just want my PDF.

Since you implemented this change, 1) my total sales are down and 2) the fraction of users buying with PayPal instead of Stripe has increased.

My 'N' is pretty small, so I can't with confidence say the thing is statistically significant, but it's something I have noticed.

I would VERY MUCH like the option to hide both the "email address" prompt and the "remember me" checkbox.
> If you are using the Mozilla Mark(s) for the unaltered binaries you are distributing, you may not charge for that product. By not charging, we mean the Mozilla product must be without cost and its distribution (whether by download or other media) may not be subject to a fee, or tied to subscribing to or purchasing a service, or the collection of personal information.

Specifically the "By not charging, we mean the Mozilla product must be without cost and its distribution (whether by download or other media) may not be subject to a fee" part.
SlickEdit Inc. Defeats Uniloc USA Inc. in Patent Infringement Lawsuit
The issue is, unlike a bank account, the bitcoin address is not attached to a person. If I'm using Tor, I can make it almost impossible to trace me. If I'm using a bank, the government won't even need to do anything, as the bank will contact the FBI for large transfers or give them information as needed.
Not until WebP switches to VP9, which is not planned currently. VP8 does only support 4:2:0 chroma subsampling. Photoshop sets 4:2:0 only on JPEG quality 50 and lower, as comparison.
I got the name, but I still wanted to invite you to do something more rewarding with your time.
Here in Israel, we have a growing phenomenon of high school students studying for a B.Sc degree, especially in CS, during their last few years of high-school. Not only do they save a couple of years of their career trajectory, they also get a shot at significantly better placement during their army service. Israel's a small place, so most places have a pretty good university one or two bus rides away.

One could argue that high school is a bit unnecessary, and a good move would be to simply skip it.