skysight-inc/HackerNews huggingface dataset:
SF is now the most expensive city to live in, in the US base on a few sources. While it's true normally growth and new jobs is seen as a good thing, here, it's specifically the tech sector that is growing with the majority of hires and wage increase focused entirely on developers mostly.

Imagine if rent goes up 300% or more in the past few years and you work as a waiter or any other number of non-tech jobs. Increase salaries and demands for hires in the tech sector would have nothing to do with you nor would you probably qualify for a job yet you suffer from all the consequences of the growth and demand happening around you aka your wage is the same but trying to rent a place now costs several thousands of dollars more than it did 5 years ago. That's essentially the problem locals who aren't in the tech field are facing.
Instead of a magic notebook cover, people do this with a magic pen:

http://www.livescribe.com/en-us/smartpen/
You can use CORS and withCredentials to use simple cookie-based browser sessions for authentication. It's still hard against CSRF because as long as you properly origin-check the request you don't have to worry about form forgery.

Wrote about this some at http://www.divshot.com/blog/static-apps/cookies-and-cors
David Pollack is known as a bit of a hothead, so take the one-sided (post-ban) explanation with a grain of salt.
Yeah, it's not really accurate for the PIGS , and even in northern Europe, it's not as high as in the States.
>First, an "appeal to authority" is fallacious when the authority isn't relevant. In a discussion of cryptosystems, an appeal to Colin Percival's authority is a valid argument! It's obviously not dispositive, but it's not something you can simply dismiss; you'd need to rebut it with countervailing arguments. Technically, the authority I appealed to in my comment was my own. I happen to think that's also a valid argument, albeit one requiring fewer countervailing arguments. :)

If you read my comment, you would see that I said it was probably valid in this case due to tarsnap's reputation. I was just clarifying the argument you were making to see if you actually had already performed a code review of spiped. However, an appeal to authority is still not valid (in academia at least), it's just a useful tool to shortcut arguments. When it gets down to the nitty-gritty of talking about showing that something is secure, if something is not dispositive, you can and you must dismiss it without regard.

>I am absolutely prepared to have a debate about the relative safety of spiped and OpenSSH. Please, feel free to marshall some arguments in favor of OpenSSH. A comparative code review of the two projects sounds like a pleasant way to spend a lazy Sunday.

Reread my comment in response to his, you should understand that the burden of proof lies with anyone claiming product X is more secure than OpenSSH. You cannot come in and claim spiped is simply more secure than OpenSSH on an argument of code-size alone. The security community is better than that.

Also, I already gave an argument in favor of OpenSSH in its current state from the economic perspective. There is a nearly limitless treasure chest of computing power and bandwidth available to people who discover vulnerabilities in OpenSSH. In that regard, it's received orders of magnitude more scrutiny than spiped. From the academic side, OpenSSH is a popular target for experiments in static and dynamic analysis because a new automated method that discovers a vulnerability in something like OpenSSH will guarantee citations and top venue.

On a related note, vulnerabilities so egregious that require you to shield OpenSSH using spiped implies that OpenSSH is fundamentally broken. If that's the case, what's the expected method of installing spiped and the symmetric keys on something like an EC2 instance?
Ask HN: What's your favorite book on marketing?
There is room in OpenStreetMap for this sort of data. Parks and playgrounds are already frequently marked (along with stuff like museums), and there are at least a few people trying to figure out things like changing tables.

I guess it would take a while before people were chasing details like kids menus.
Ask HN: HN and attacks
There is currently an entry in the New page,
https://news.ycombinator.com/item?id=7542920 ,
that I find interesting and relevant to hackers.

Based on that I would upvote.

But the pastebin post in question contains not only a description of an attack on antivirus software and the bitcoin database, but also urges to carry out the attack.

Considering that, do we want to promote this?

I personally want information like this to keep showing up on HN, but I don't want that to negatively impact the antivirus- or bitcoin infrastructure in any significant way.

So do I upvote this, or flag it?
Is there an established community response?
That's one of doing it...the other would be something like this [1]. Not ashamed to say I had to beat the whole thing the first time I saw it because it was so brilliant. And I normally hate pointless puzzle games.

http://light-bot.com/
> a pithy, if slightly inaccurate, description of VP8 would be “H.264 Baseline Profile with a better entropy coder..."

and

> Overall, VP8 appears to be significantly weaker than H.264 compression-wise.

don't seem to go very well together, to me. How can VP8 be a better H.264 and worse than H.264 at the same time?
This is super cool, and surprising to see since last week I implemented something similar in ClojureScript. Mazes are awesome.

http://jeffcarp.github.io/maze/

Code: https://github.com/jeffcarp/maze/blob/gh-pages/maze.cljs
That depends on where you are. In Germany it is perfectly legal for a cyclist to pass waiting cars at a stoplight on the right if there is enough space, because it is safer for them to wait a the front of the line than somewhere hidden between cars. Especially if they can get to a marked waiting area like this: http://commons.wikimedia.org/wiki/File:Radaufstellstreifen_%...
a simple, motion-sensitive sleep alarm. i just tried to find one, but they all require a phone or tablet. they're nothing simple and stand-alone with a very basic interface.
How does it translate any legal writing into a simpler form? That sounds like a damn nearly impossible language processing feat.
It's a miracle I can even use a computer!
UK, outside of London the average salary is roughly £40k for an experienced programmer ($66k). It does seem to be climbing rapidly though, 3 years ago £35k was more the avg, now I'm getting recruiter emails claiming up to £45k.

So unsurprisingly it's just a sliding scale depending on your local GDP, there's not some universal pay grade.
BAD ASS!

I see in the near future a folder named "commands," on your iPhone filled with long name apps just for automation. Are you using https or some type of SSH keys to authenticate?

I know you said your running wired instead of wireless, but it sounds like you have to run some type of lightweight server to listen to the http requests. I guess you could just port forward/trigger internally through the router.
NASA's entire Apollo Lunar Surface Journal video library:

http://www.hq.nasa.gov/alsj/alsj-video.html
In my experience it's actually rarely used negatively (ymmv of course) - I only really hear it when the context is "these people (the boffins) do something about which I don't understand", so it's almost self-deprecating to call them boffins. On the otherhand it's also not particularly positive, either.

As an example: Stephen Fry uses it, and he is a.) a geek and b.) not the kind of person to insult people for that kind of thing - when he uses it he always just means that they're people doing something complicated that he doesn't know about.
But trucks tend to last 10+ years. Not sure what the lifetime of trailers are though.
Oh for sure, redundancy for the load-balancers, app servers, caches, and database servers are a must ... if it can fail, it will at the worst time ;-)

My point was more that the frequency at which I and others are having DO issues seems to be higher than AWS recently (I can't independently verify it until I've used AWS myself) and truth be told it's a subjective/opinionated statement. I do remember a time when AWS was extremely flaky when they first started, so I'd like to think it's merely growing pains for DO, but at the same time ... I have my own growing pains to worry about.
Show HN: Same Picture of Dave Coulier Chrome Extension for pranking
Is this true? I checked and I seemed to have lost my history from before 2012, and assumed I'd messed up somewhere in transitioning between computers. I couldn't find any info about Firefox doing this (arbitrarily deleting history from the past), but I'm almost sure it does.

Edit: This time I found it: https://wiki.mozilla.org/Firefox/Projects/Places_async_expir...

I find it rather annoying, however, that this isn't obvious. I like keeping all my history :( I'd rather I could at least keep the history somewhere, even if it didn't stay in Firefox's history view.
It isn't really the normal use for it, but I made my own subreddit for this - I only use it as a personal repository of information, but it would suit pretty much all of your requirements, and it has stats on usage etc built in :P
A solid linkage between the handle and flap is available.

(The toilet in the room a little ways from where I'm sitting has one)
Have you done the math for running it on windows rather than mono? Depending on your projected workload, it maybe fairly cheap.
Scheme with graphics (i.e. a LOGO module) sounds very good. Kids are much more impressed by getting pictures to appear than seeing a number output.
That would require either replacing malloc as well, or programming to the hairy details of your system's libc (ie knowing how and where it lays out the buffer metadata). The point is not that either are impossible, but that you can't replace realloc without doing one or the other.
God that article was/is riveting. I still recall the first time I read it, in one sitting, this ridiculous fat magazine in my hands. The world would be a better place if it had more journalism like this.
Super rich benefit from ‘status quo bias’
I can totally relate to this, but it gets better, doesn't it? Today Internet is often faster and cheaper in the eastern europe than in the west. We no longer need computer books so much. As for brain drain, it's more of an opportunity if you're a developer.

On the other hand, we have every piece of software available in the pirated form and had no shame of using that. Haven't we?
Good stuff and congrats. I'm always amazed to see young kids get into coding and math. I think that's awesome.

I was so pleasantly surprised when she got the whole variables thing. I think drawing analogies to real life stuff is a sure way to get kids engaged, especially if the props you use are toys. About the attention span - yeah I noticed my 5 (almost) year old wanted to try when he saw his sister having fun, but then he got bored after a couple of minutes.
*> ... what if the tabs could pop back up at a certain day/time or if you could just snooze tabs?

There are several GTD-type web apps that support "desktop notifications" that might fit the bill.
I don't follow F1, but surely with anything that's going to give a team a big competitive advantage, a.) there always has to be a line between "haven't used" and "have now used" and b.) to delay other teams efforts to copy, the later that point comes the better.
This is much help! A university degree is not something I thought I have always wanted. The only reason I even started going to school was because it was already paid for so I decided to take some calc/chem/physics since I was not sure what I wanted but I knew a liberal arts degree was just a waste of my time. Then when I was taking some of the upper level physics I really just found it boring so when I mentioned to relatives they just said hey go into engineering, you are already half way there and finding a job wont be that hard.

This semester the engineering courses are just as boring as the physics one. Its really just rinse and repeat from certain principles, which is what boring means for me. I find the part time job really far away from the rinse and repeat stuff. You can always optimize your code, you can always find a neater way of doing something--its just cool. I also have smart people around me so when ever a have a hunch I am going about something the wrong way I usually consult with them and I always end up learning something new.

Regarding the friends thing, I feel a strong pressure in my stomach all the time, this shit has really been driving me nuts--cant sleep etc.... When we end up going out I try to just motivate them to talk to girls and have fun. Being social has become a chore for me because all I am thinking about is what the hell am I going to do. The friend I did speak to said to me I just look like I always do lol--that he also has that fear of settling for a wage and doing something more fulfilling.
If it were me I might look at building somthing on top of notmuch. I use the emacs package for notmuch and it's awesome, it has search and tagging capabilities very similar to gmail and handles conversations nicely.

http://notmuchmail.org/
Thanks man!

Currently it's security through obscurity... so not great. I'll make the arduino only accept requests with a token next weekend.

Yeah if you take a look at the arduino code on github it's a super light http server. Currently I just do port forwarding to access it.
OVH is a multinational broadband ISP in addition to colo, cloud/vserver, dedicated, voip, domain registrar, etc.

Looking at the columns at a glance, there are almost no events "in progress" (most are Closed) and the vast majority of the open events are early warning for maintenance windows affecting very specific services.
H.264 Baseline Profile

https://en.wikipedia.org/wiki/H.264/MPEG-4_AVC#Profiles
For Android devices, there's also MIT App Inventor, which is a very scratch-like environment for writing mobile apps, available here:

http://appinventor.mit.edu

In addition to basic I/O and animations, it's able to deal with a lot of the device capabilities, including SMS, GPS, dealing with the camera, and so forth.

Unfortunately, I don't know of any similar environment for programming iThings --- Apple fairly famously rejected a Scratch port from the app store in 2010:

http://wiki.scratch.mit.edu/wiki/Scratch_Viewer

although a "Scratch player" for Android is in alpha, and apparently, people are also working on pure HTML versions.
Coding with Kids (2012)
A child using language functionally to get what he or she wants is essentially a form of programming. Example:

1. result = ask_parent_or_candy(mom, nicely)
2. if result != candy:
3. ask_parent_for_candy(dad, nicely)

I studied analytic and philosophy of language, and i feel that many people in CS don't see the forest through the trees when it comes to programming as such. While some code (e.g. C) handles much more technical aspects of what is actually happening, scripting languages are much better suited to the human mind, and i think creating a natural language language (<-- that seems a bit redundant) is an achievable goal.

If i had a child, i would start her out on python, because python is essentially in english, and english is the only code i'd prefer to write, given the choice if there were a formalized english scripting language.

Even in python there is a bit of jargon that i think is an unfortunate holdover. Int vs float may be necessary, but "string" is a poor term for what is essentially text. I'm not saying we should change anything, because coding is becoming more like natural language organically, but again, if i were to teach my child coding (and i don't want to step on any cuteness of this story), i think a child would understand python better than anything with brackets and semicolons.

Full disclosure: i genuinely like python better than most languages.
There needs to be a Godwin's corollary for invoking racism about discussion of issues not involving racism at all. If you can't reason about a political issue without comparing your opponents to Hitler or slave owners, then you probably have a terrible opinion.
Ah. so you would need a sockpuppet account for such a thing.

I retract the original question about downvotes.
Doesn't sound like much. What lifestyle do you afford on this? Any improvement prospects?
Not a startup here. But my formal qualification is a bachelor of economics, and a bachelor of arts with majors in philosophy/religious studies. I started doing computer science, but changed courses after first year because, frankly, I found it WAY too boring. I was getting pretty good grades too, but couldn't see myself sitting through two more years to do the kind of programming work they were trying to impose upon us (basically preparing us for faceless industry production jobs in my opinion, this was around 2000 or so, don't know if its changed since then) :P

That's not the most common mix, so i've probably just de-anonymised myself :P

At the time of writing this I'm employed by the government to write algorithms, do analytics and produce numbers. I guess I'm pretty much a data scientist. I wrote this: https://communities.sas.com/docs/DOC-2462 in my spare time, and now i'm working on a similar/analytics project written in Common Lisp.

I can't really speak for the philosophy degree itself, but I definitely prefer working with other people who are philosophically inclined. People with a wide array of interests and questioning, skeptical minds. I've found you'll hear a lot of things from the tech community which are taken on face value, which could be said for most areas of life. Personally, there's a whole bunch of marketing material and propaganda out there in machine learning, stats, big-data and AI circles at the moment on what things actually do or can actually do, and I feel having already been involved with some of the philosophy of such fields helps me separate the wheat from the chaff because I've already considered the nature of knowledge, what we can know, and what we can find out.

But on the other hand it can be somewhat frustrating, because there's another personality type that appears a lot in compsci/numbers/engineering who most certainly does not want to deal with theory/ambiguity, and indeed they were attracted to the field in part because they thought they wouldn't have to deal with such ambiguities.

That and I find myself analyzing/taking apart whatever system I'm in, and i quickly become uncomfortable with it, which means moving around jobs/projects alot. But that might just be a general intelligence/hacker thing, and not specifically a philosophy thing.

Well, that was rambly...
I think the reason is the existence of move/copy constructors, i.e. it's invalid to just move a C++ object in memory (as a realloc would do), in general.

(shrink_to_fit does need to (attempt to) get a smaller allocation, otherwise or wouldn't be shrinking the vector.)
Just read the full protocol description - does anyone know why PBKDF-SHA256 is used in steps 3 and 7? As far as I can tell, the input key material in both cases is high-entropy; what does a PBKDF do that e.g. HKDF couldn't?
> Also, Software Developers in the US and Europe don't necessarily make 100,000 Dollars. In some spots you'd be luck y to make half that.

This is correct. Moreover, European salaries are also often lower than those in the US tech hubs.

I would also go so far as to say that nowhere in the US does a median web developer's salary afford her/him a particularly luxurious lifestyle. Salaries are always adjusted, among other things, for regional cost of living.

When I made 6 figures in Washington DC, it afforded me roughly the same standard of living I have in Pittsburgh while making $30k less. That is to say : access to a studio or 1-bedroom apartment, a low cost vehicle and the ability to socialize occasionally while still contributing modestly towards my savings.
That would be fine if there were never a case where a package management system fell out of date due to a package maintainer not staying on top of things.
It's more that we have people working on it at several companies full-time now, including me.
When is this "Porn decides video formats" argument going to die ?

H.264 versus WebM wasn't decided by Porn. BluRay versus HD-DVD wasn't either.
Never underestimate the left's propensity to defeat themselves from the inside out, to choose a personal sense of moral and/or ideological superiority over coalition building and meaningful progress. Especially in the SF Bay area.
A social network where the users get paid for the advertising they do.
Possibly a dumb question, what does PIGS mean?
They make a nice whistling and wooshing sound.
An example using a Raspberry Pi and SiriProxy, which actually handles more than just the "open" command from a year or so back: http://www.raspberrypi.org/forums/viewtopic.php?f=63&t=25118.
The Discipline To Do: Why I’m Dead-Broke In the Mirror
You have to mail it in, but http://modnotebooks.com/ will scan your notebook and digitize the contents for you.
I think 'Ask HN: Idea Sunday' is a great idea, I am definitely looking for a project to work on and this is very helpful. Look forward to seeing this continue.
Have you actually used the database since if you did you would know that the write concern was set to FSYNC_SAFE by every single driver (before it was the default) and given the lack of configurability should have been known by every developer.

It never ceases to amaze me how few technical people actually "get it" even for products designed for themselves. Many, many people like things to be simple and easy. MongoDB fits this criteria perfectly and no matter how many times you call it a shitty product isn't going to dampen its popularity.
mbox is just all your email concatenated into one big text file. You can I'm sure imagine that gets unwieldy at some point.
That's why we've built http://DoerHub.com . We have hackers, entrepreneurs, surgeons, PhDs, and doers of all kinds posting and contributing to projects. The purpose of the site is to enable everyone to share what they are working on and grow it with help from others who care about the same topic (teammates, advisors, beta users, feedback, single-task contributors, word of mouth, you name it ). You can already message anyone, but we're adding group chat and anything else doers request that makes collaboration easier. You can just connect with GitHub.
> In the general case, however, if allocating 100 bytes fails, reporting that error is also likely to fail. An actual memory allocation failure on a modern computer running a modern OS is a very rare and very bad situation. It's rarely recoverable.

I call BS on this. First of all, it's not the 100 byte allocation that is likely to fail; chances are it's going to be bigger than 100 bytes and the 100 byte allocation will succeed. (Though that is not 100% either.) Second, the thing you're going to do in response to an allocation failure? You're going to unwind the stack, which will probably lead to some temporary buffers being freed. That already gets you more space to work with. (It's also untrue that you can't report errors without allocating memory but that's a whole other story...)

I suspected when I wrote in this thread that I'd see some handwavy nonsense about how it's impossible to cleanly recover from OOM, but the fact is I've witnessed it happening. I think some people would just rather tear down the entire process than have to think about handling errors, and they make up these falsities about how there's no way to do it in order to self justify... Although, when I think back to a time in which I shared your attitudes, I think the real problem was that I hadn't yet seen it being done well.