skysight-inc/HackerNews huggingface dataset:
To serve as a ledger for any major system, you need an architecture that has very high throughput. So if you ever wanted to run, say, the NYSE's ledger, you aren't going anywhere if you cannot process many thousands of messages a second, accurately and without duplication.

Bitcoin's architecture doesn't really let you get anywhere like that. Adding more computing power won't really help, because you are still maintaining one single ledger, so you have the same synchronization problems as you'd have if you were trying to run a distributed queue with global ordering. There's no way that adding more load will let that sucker scale linearly: Eventually, even if you had infinite computing power, so that it only took you a couple of milliseconds for the next hash to be found, you still have to ferry all the data around to all the nodes of the network, or they can't work: IO becomes a major problem pretty quickly.

Big systems like this, but without the crypto requirement, are always IO bound. So to get any serious kind of throughput, you'd end up wanting to have most miners co-located. So a distributed system that anyone can join, as long as they have rackspace in one of 5 buildings, owned by companies that own most of the miners.

Doesn't sound all that empowering to me.
My C is a little rusty, but it seems like this web server is definitely not safe. The very first function in the code has a local stack variable and uses sprintf() to fill it. That's almost a textbook example of a buffer overflow vulnerability, if I'm not mistaken. Even if they try and compensate for that by checking the data length before it's passed to that function, it's still scary to see someone using sprintf() instead of snprintf() these days. It's like walking a tightrope without a net.
I don't believe the OP ever said the code was worth $25K.
I want to learn a bit about web servers and I think that study the source code of a functional one may worth more than try to build something from scratch at first glance. Since I'm seeing too many comments on the security issues of this particular project, can you guys recommend something more reliable?

Thanks in advance.

Edit: I "know" C and C++ and would like to remain in one of these languages, if it's not asking too much.
360 degrees around what axis?

Backup cameras allow you to see low objects directly behind you, which no mirror system does on any passenger car I've ever seen.
California man who lasered two helicopters to face 14 years behind bars
I think the correct answer is: "Don't bother"
It'll be interesting to see if this announcement actually helps increase the price of Bitcoin which has taken a few hits over the last few months due to countless exchanges being hacked and collapsing (one of those being Mt Gox), to the IRS's announcement proclaiming Bitcoin is property not currency and other bumps in the road.

Initial indications seem to suggest this far the announcement has done little to raise the price of Bitcoin. Time will tell and I personally think this is a great step in the right direction, eventually even Paypal will allow you to accept Bitcoin, it is only a matter of time.
The part I thought was interesting: "If I vote down a story that you voted up, your vote should count less in my rankings of stories. And vice versa. The same holds for comments."
The bad news for the Tech World is when people think Hacker News/Silicon Valley is the Tech World. There are 1000s of small companies and people who are part of the tech world, have never heard of Hacker News and are doing well. HN is just one community and it's serving its community well.
Coinbase says the name is optional, so only people that chose to share their name are affected.
This is one of the most uplifting and positive stories I've read via HN.

Whilst I understand that's probably not the most common take-away, I read it as a story of how software development is slowly changing to a field where sexism is no longer acceptable.

I think it is fantastic that the developers stood up to Matti, and refused to give him the story he was looking for.

People will continue to argue all they like over if software development is a meritocracy and/or if different genders have differing natural inclinations towards the field.

All I know is that on that day there were two female developers who had gained enough respect from their peers that no one would fall into the trap of "providing a story" for the show.

I think that does all the developers involved credit.

Edit: Adriel Wallick (one of the developers involved) has written a blog post about it. I thought this bit was great:

I will not put my face and my “stamp of approval” on something where this is even a question. No, we are not at an advantage because we have women on our team and no, we are not at a disadvantage because we have women on our team. We all have advantages and disadvantages because of our varying skills and strengths. Having the audacity to be a woman does not hinder nor help any of these things. Being a woman simply means that we are women.

http://msminotaur.com/blog/?p=187
Keyword being "up to". There's a reason Intel hasn't really upped the issue width much, despite x86 having higher code density than ARM -- memory bandwidth. It's hard to keep wide execution cores saturated.
A micro compiler in Ocaml
Thanks for the context. I wonder what you call a person who is willing to do anything and everything for personal gain, because he sees the people around him as nothing more than means to an end?
Regarding raw addresses, I would encourage you to look into the payment protocol (BIP70). Once that is widespread (it is already implemented in some wallets), the average BTC user will never have to worry about raw addresses, without the downside of having to route everything through coinbase. As a plus, the UX is IMO, better than that of typing in a CC number.
The original title of the post was something along the line of "I just open-source $25K-worth of code." It's since been ninja-edited.
Well, wouldn't you respect him less, if he simply changed his views for political expediency?

And last time I checked, when Prop8 went through, wasn't he with a majority of Californians...lol.

I don't get how the supporters of gay marriage something think (or try to claim) that their view is automatically right, arguments be damned.

Marriage has been defined as a man and woman for thousands of years.

Yes, that can be changed, and they're well within rights to do so - maybe the human race is changing.

But to claim that, we don't need to stinking arguments, and just say, we must be right seems a bit stupid.

Surely, if you're going to redefine something that important, you'd want to lead with your arguments, and not, oh, it's just natural we're right, and your position is untenable.
Maybe not right now, but you've got to take care of technical debt sometime, and a few of those points are quick wins.
> the others have found things to do mostly because people like doing stuff rather then because they's starve otherwise.

I've seen variations of this statement many times on HN, that is, "there's no such thing as disutility of labor". I'm a bit skeptical. I believe a lot of software people enjoy their jobs, and some keep working even though they don't hve to, but I doubt that's the case for the bulk of the world's urban population.

Also, people have many other material demands (sometimes called "needs") besides food and shelter. Viz. the common complaint by SV developers that "a 6 digit salary isn't much".
She Left Cisco To Lead A Startup And Is About to Have her Payday
>substitute coinbase's iframe with your own, when you use coinbase button

How would they go about fixing that? Verified by Visa is the same - you get redirected to some random domain "arcot.com"?. There's a verification code, but that's viewable by anyone that has your credit card (including the site operator where you just input your CC number).

Wouldn't Coinbase need to fully redirect to their own domain, or popup a window with the URL visible in order for users to know they're really dealing with Coinbase?
if by intense you mean "strange because it uses ideas I've yet to learn, but will really enjoy once i've mastered", sure :)
I love HN for the content. But I do find it ironic that people who value openness are content to have the control of people's speech to be done in private and without oversight from the community being controlled. Especially when there's no a priori reason to trust the body doing the controlling.
No, those are all outcomes. What does your thing do to achieve those outcomes?

I'm sorry to be so blunt, but if that's your elevator pitch, well, right there is your problem.
Marriage has been between a man and a woman throughout the history of humans.

I see this repeated often in these discussions, and it's a breathtakingly arrogant assertion. How the hell do you know? Have you spent years studying anthropology?

In fact, sexual mores have varied quite substantially throughout the thousands of years of human history and the hundreds of civilizations that have come and gone in that time. I think if you actually look into the matter, you'll discover this "fact" you keep repeating is anything but.
HN is very useful, I don't think the author was denying that. The point he was making was that there is no community oversight into how HN works - which is important when it comes down to effectively censoring people's speech.
I donated both money and time to Mozilla in the pre-Google days when they were really struggling. I'm also gay and a resident of California. When proposition 8 passed it really hurt. Finding out that an organization I've supported now has chosen a leader who explicitly acted to take away my rights, that really hurts too. It's a betrayal. I would hope that you can understand why or at least have the empathy not to belittle those who do feel strongly about it.
Next milestone: for me to stop confusing the two...
LinkedIn is looking for a Senior Punch Card Programmer
Yes - clearly that is more visible and open for community comment
They addressed that here[1]. Sending invoices to lists of clients is specifically something they want to allow.

And anyways, an attacker could simply sign up for multiple accounts.

I don't think much of Coinbase technically (terrible execution in the past, use of MongoDB), but this breathless report is really overhyping an minor design decision on Coinbase's part.

1: https://hackerone.com/reports/5200
I'll share my coaching criteria as a manager:

an acceptable Junior Software Engineer...
uses tools to make properly formatted code

produces readable code, mostly self-documenting

becomes a 'goto person' on code after spending 2 total weeks in it.

rarely goes 3 days without obvious progress or output to the sprint team

is comfortable making estimates about new work

is comfortable re-using existing patterns for new work, even in unfamiliar code

can explain the 'why' of processes and rules, and be able to see situations where they may not apply

understands agile development and participates effectively

----------------

a Senior Software Engineer...
is also a Software Engineer with everything that comes with it

is a team representative of code, projects, and end-users

has a running list of 5 things the team or the team's code is weak in, and could be doing better

considers edge cases well, writes bulletproof code

understands integration points with other teams and projects

reliably resolves tickets in team's estimated timeframe.

does code reviews and design reviews that are kind and instructive

is able to refactor code to improve maintainability without being too aggressive and causing additional problems

is able to help any other dev with problems in any of the team's code

is capable of teaching a new employee about all of the team's code, projects, and end-users

brings innovative ideas back to the team from reading, experimentation, and conversations in addition to normal work

is a student of agile development and can effectively coach and mentor others in agile development

maintains good relationships among cross-functional team members

can boldly estimate very low or very high for new work, keen prediction for the very easy and very hard

can sense CPU, memory, and computation time problems in code
invents new patterns and solutions rather than always using existing patterns

sees the give and take in processes and rules, uses them as a tool for guidance not to be followed rigidly 100% if not best for the company

understands feelings and history about codebases and projects, not just the immediately apparent facts

is not just extremely knowledgeable, but also with passion and proper application and improvisation of concepts
Dog Whistles and the Myth of R&D Slack
Interesting.

That's a pretty serious disadvantage over VMWare.

But I guess the limited attack area of Windows Server Core means many people can avoid applying patches much of the time.
Can you be more specific?
I was trying to be helpful and my comment got down voted to oblivion.

I was using Azure today and they still use Silverlight for admin - which mean i can not use it on my Mac.

Remote Desktop is the DEFAULT access - they DO support SSH, but the service is not on out of the box.
hehe, your server is HN'ed :)

I'd replace the homepage (temporarily) to the absolute minimum during the time it's bombarded with requests, unless you have a vserver/cloud-host that you can scale up. Or change the server your DNS records point to, if you use CNAME, to one at rackspace, github homepage, or anywhere else with a minimal homepage.
But I'm sure the guys @HN have better tips :)

I don't know much about legal stuff and licenses, but I would allow anyone to use your software as long as it's code is shared, except for enterprises. Companies who want to use it commercially and have more than 1-5 employees would need to obtain a license. Open Source doesn't mean that you cannot put a price tag on it.

But as you said, prepackaging the stuff as a deb/rpm and allowing white-labeling for enterprise customers would be a good way get some money back from this. Just saying, but you could, if you wanted to, add advertising into the opensource product and disallow it's removal unless a license is obtained. If you were an SaaS, you could collect data and metrics, that you could monetize, but I'm glad you aren't anymore :)

@pg I think there should be a sticky informing website owners on howto react, when their website is HN'ed. Somewhere in the footer of the homepage or so.. This is happening a bit too often and many aren't prepared for such high traffic peaks.
Airbnb to collect hotel taxes for San Francisco rentals
Nobody?! Uganda? Russia? India?

http://religion.blogs.cnn.com/2014/03/31/how-evangelicals-wo...

"Evangelicals took to Twitter and Facebook to threaten to stop sending money to their sponsored children unless World Vision reversed course."

All this over a word?! An etymology war... #not.
I thought Strip Search was about the contestants learning about how to run a web-comic business, not necessarily learning to draw comics.
I said 'most' not 'all'
Why risk-averse Chinese mobile tech firms are suddenly going all-in on global
Thus making your application build process require full Internet connectivity, and making it require that every dependency hosting site is working.

Committing dependencies is a solid decision to avoid taking a dependency on a bunch of third parties.
I agree with this. I typically feel the most creative and energized at around 10am: after I've had some breakfast and a coffee, and gone for a short walk.

If you've got flexible office hours, pick a few days a week where you come in after lunch and work later. If you are worried about how it might affect your work, front-load the day with things that will take the most creative energy and save the evening for things like catching up on emails.
The problem is the types. Those methods do know how to handle 0-sized collections, but they must be operating on nullable types.

Enumerable.Empty<int?>().Average() returns null.

If you have a sequence of integers, you can get the behavior you want by converting the elements to nullable types like this. seq.Average(x => (int?)(x))
>because they believe financially supporting Proposition 8 is prima facia evidence of homophobia

And they're wrong.

>without actually having any knowledge of Brendan's beliefs

I'm going on Mozilla employee's reactions, people who actually interact with him on a day to day basis. No one else seems to pin him as an "unrepentant homophobic bigot" (as per your other comment) except you.

>Your "maybe he's against all marriages" argument has been shot down -- don't try it again.

I'm in favor of redefining marriage and abolishing all civil unions because they're fundamentally unequal. And no, it hasn't, we simply don't know what his opinions are.

Your demeanor in comments really doesn't lend any credibility to your anecdote compared to the experiences shared by Mozilla Co. employees.
You keep saying this throughout the thread. You are misinformed. Marriage and civil unions are legally different things with different rights, responsibilities, and scope.
That is completely a stylistic preference. When I write C#, the opening braces are placed on the same line as the preceding control structure.
If you put in an order for $49.99, that is the price you said you are willing to pay. It is not fleecing you if someone meets the demand you express.

If you really wanted to pay $49.97 then you should have put in that order instead.
Sounds fishy. It would take days for any kind of legal action like this. Doesn't FB push code like every couple of hours? A code patch would have been many times quicker.
Introducing Merge by Mailchimp: Free, direct emails from Google Docs and Sheets
Introducing Farmhash
This is hardly in the category of "lightweight and secure", but for impromptu stuff, this Ruby+Rack one-liner serves directory listings and static files from the current directory:

ruby -e 'require "rack"; include Rack; \
Server.start :app => Directory.new(".", \
Static.new(nil, :urls => ["/"], :root => "."))'
This seems a lot like OpenVBX[0] just powered by Plivo, not Twilio[1]. OpenVBX is also open source.

http://openvbx.org
http://twilio.com
Having NSA employees standardizing TLS extensions is about as surprising as having Google employees standardizing HTTP extensions. The NSA isn't just a bunch of spies; they're also the managers of the US government's crypto infrastructure.

If the USG wants to make some devices--secure phones, say--that use TLS in a weird way, but wants other devices--commercial off-the-shelf routers, say--to be able to interoperate with those devices, then the USG gets the NSA to draft a TLS extension allowing the routers to consider the behavior of the secure phone normative.
The only "process in the market" for this kind of work is individuals or companies breaking random things in public to build their reputation as auditors (e.g. homokov), or selling vulns. But as you point out it's only really awesome when you follow the Cryptography Research model: find a new class of attack, develop the countermeasure, package (potentially patent) the countermeasure, then make scary demos of the attack to get responsible parties to buy your countermeasure.

In this case the mitigation is so simple ("don't use PKRNG; avoid RSA, Inc. going forward.") that it's not monetizable, so it's really only for reputation points.
You seem to be arguing as if "surplus of labour" means that as a whole the world has enough good stuff, and having more people work won't add value.

What it actually means is that there are people who want more good stuff, and are even willing to do work to get it - but that's not an option for them because there are no jobs available. It's the sad state of people not being organized to work to provide their own needs - and it's caused by wealth being so concentrated in the smallest group at the top that economic activity is frozen for everyone else.

A basic income would take wealth away from the few who have more than enough, and thaw out economic activity for everyone else. Poor people would be able to spend, AND work because others are spending.

All of this has nothing to do with robots. Except.. One of the fears of robotics is that they'll work so well that even more wealth will be concentrated to a few. Basic income is the antidote to that concern.

In the long term it gets even better.. Eventually when robots are doing most of the work, a basic income will mean that work is optional for everyone, and people will do work they find meaningful instead of necessary, or will just spend time with their families.
Civil Unions don't grant the same benefits as Marriage does. So it's not the same thing.

There's no etymology war, you can keep the word "marriage", just give everyone equal rights to marry and have their marriage recognized everywhere.
it's easy to know what it is doing, it isn't using any LinkedIn exploits, it's scraping the name, url and company from the LinkedIn page then constantly running every possible combination against Rapportive and checking to see if it gets any returns and then compares the linkedin url of each return to the linkedin url it got from scraping. Rapportive is ironically a LinkedIn owned company so basically he is just dogfooding LinkedIn to exploit them

Identical to something like this but with with a few added steps

http://www.emailfinder.io
The data structure they mention using is an 'inversion map' which in their case is a mapping of numeric ranges to values.

I did some quick searching and didn't find it... I wonder how they implement a key search in the inversion map. I assume you do something like populate a tree with the range transition points and then you can search in O(log n).

A search on the tree would have to find the node with the highest value that was <= the requested value, or the lowest value that was >= the requested value.

I assume the work of constructing the tree would have to be amortized over multiple searches to make it worth the effort. Could you do better than O(n) without building a tree?

In creditcardjs.com's case, they have overlapping ranges, which means you can possibly return multiple values for a given key.
This kids, is what happens when you recursively ask the question, "Why?" and and answer it seriously. Made my day.
I would be very interested to see some ARM results in that chart in the future; at the moment, all the RISCs there are pretty dismal.

Not so long ago I remember doing some calculations on the SPEC results, normalising them to a single thread and clock frequency to determine the per-cycle efficiency of various CPUs, and x86 came out at least a factor of 2-3x ahead of the rest.
Since someone's going to ask, this post fell in rank and eventually was killed because users flagged it. We didn't touch it in any way.

More generally, the truth is that we go out of our way to avoid censoring stories connected to YC. That was the very first thing that PG told me about HN moderation.
It's on the high end, but it's only a factor of three off of the roughly $7 million the EPA uses in cost-benefit analysis. Perhaps a bad call, but not wildly innumerate.
It's hard to see how that wasn't an "infrastructure" problem. Mt Gox was the largest BTC exchange - an integral bridge from old world to BTC world.
With Python experience, you might find Go a bit closer to what you are used to. However, if you do any appreciable amount of browser-side JS, then Node.js might also be comfortable.

Personally, I would evaluate what frameworks, etc you need for a new project and then choose the language that better supports the project. Keeping in mind, that Google don't use Go for all their systems, only where it provides advantages over the alternatives.
I think those are different Dan Grossmans. (Dans Grossman?)
Would they also be sad if Occulus never pulled it off due to financial constraints?
Human gravity generator invented at Facebook HQ
Is there a safe generator (CS-PRNG) where more state disclosure does NOT compromise the generator?

What if you needed to disclose 1MB of state. What about 1TB?