skysight-inc/HackerNews huggingface dataset:
That's cool, I'll have to look into this at some point. This approach would simplify compile-time code generation, but it doesn't help interpreted languages that have no compile step at all.

> As an added bonus, we're using the same infrastructure to generate trace hooks for precise GC in Servo, which eliminates a major pain point of integrating systems-level code with precise garbage collectors.

I don't know what this means, but it sounds really interesting, do you have a reference with more info?
When is the last time entitlement spending went down in aggregate? Any 'cuts' I've seen have been merely been reducing the rate of automatic growth.

Clarification Edit: You made the assertion that entitlement spending is being cut by the influence of the 1%. I'm asking for where this has been the case. Vague allusions to population growth, college costs and inflation aren't sufficient. Growing college costs could even be indicative of an increase in entitlements.
Is the pixel density is now high enough to compensate for the suboptimal PenTile/Diamond subpixel structure? The last Samsung OLED display I've seen in person was on a Galaxy S3 and there were noticeable artifacts on some content.
Yelp is going after startups that crawl their site[1]. I don't want to make Yelp the poster site for this because other big sites do this too.
[1]http://www.courthousenews.com/2012/01/27/43403.htm
You can build a newer version from an official Ubuntu source package. Start by adding a line to a file in /etc/apt/apt.conf.d/ that pins all your packages to 12.04, "precise":

APT::Default-Release "precise";

Then add a line to your /etc/apt/sources.list to include saucy (or trusty), which has the right version of node.

deb http://archive.ubuntu.com/ubuntu saucy main restricted universe
deb-src http://archive.ubuntu.com/ubuntu saucy main restricted universe

Saucy won't be supported after this year. You can either use Trusty now, or wait for Trusty to be officially released next month and then switch.

Next, run these:

sudo apt-get update
sudo apt-get build-dep -t saucy nodejs
sudo apt-get -b source -t saucy nodejs

This puts the packages in the current directory. Now just install the one(s) you want:

dpkg -i nodejs_0.10.15~dfsg1-4_amd64.deb

Edit: wow, I just noticed how many packages that build-dep step pulls in. I hope that doesn't step on anything important :( At that point, you might as well just add a file /etc/apt/preferences.d/01node with these lines:

Package: nodejs
Pin: release n=saucy
Pin-Priority: 1000

Then "apt-get install nodejs" will get the right version and all dependencies, no need to build from source.
I took a look on the website as it does sound promising, but couldn't figure out what's going on (even with the precursor info on this HN thread).

I could totally "get" why it's the number one under used service. I wish I could just as easily grasp how to use this service.

pkgr.io does a way better job explaining what the service provide, why it's a good idea to use it, and even a quick overview of how to use it.
Python, through SciPy/NUMPY is well positioned for the future of web development, which is a numerically driven world. I see Ruby as better PHP,. Lastly phython is more universal, which is good. So I do think Python is a really good choice for introductory programming.
Show HN: Get scores and stats for baseball games on Twitter and App.net
Except that you can't do that in JavaScript, which is the language the article is (directly) talking about.

But he takes lessons from a language that has no access control to member variables, and tries to apply them to all OO languages. That's the problem with the article, IMHO.
Thank you for that insight. Yet another unintended consequence I hadn't considered.

I'm eager to see how many young, healthy people are signing up for health care under ACA, because if the registrations are primarily from sick people, the system can't work, right.. or at least, not without further raising rates for those who can afford it?
Has anyone used this to make the board for a reprap?
thirsteh summed up my feelings in his response to your comment but I'd also like to add that a preference is an opinion and not a fact. You may prefer apples over oranges. It is not a fact that apples are better than oranges.

For instance, what if your null pointer in language x causes a silent fail? Now your apples are beginning to look like oranges.
I wonder, if the goal was to build a hacker friendly PCB tool: written in python[1], easy to develop for(via extensions), open etc.

What would be the amount of work needed to get to a basic version ? could that be supported by a kickstarter ?

If it could, maybe the rest of the way to altium can be built incrementally ?

[1]there's boldport(https://bitbucket.org/boldport/pcbmode) a python pcb tool , might be a good start
App.net version: https://alpha.app.net/mlbscorebot

French versions:

Twitter: https://twitter.com/mlbscorebotfr

App.net: https://alpha.app.net/mlbscorebotfr
Apparently this is true enough, with the added qualification that for the first year or so it was largely secret from Apple too. :) http://www.theregister.co.uk/2012/06/11/apple_project_markla... http://www.quora.com/Apple-company/How-does-Apple-keep-secre... (Though of course the fact that the OS X codebase had been kept cleanly portable was neither one person's secret project nor a matter of chance.)
This is one of the better ideas I have seen on here in a while. Definitely makes the hardware space far more approachable than in the past. I can't wait to try it out!
Have you checked out OneName? It runs on the Namecoin blockchain, so it's quite decentralized.

I've not actually tried it yet, but it looks pretty damn cool.

https://onename.io/
Plus Apple's executable file format already supports bundling multiple binaries for each target arch. https://en.wikipedia.org/wiki/Universal_binary
I know someone who had, of all people, Facebook hot-linking to his stuff. He redirected all visitors to his homepage. Then Facebook's legal department called his home number, his wife answered and got nervous, and it all ended there.
About that (even a little more over 28 bytes makes the big change) we can agree: The paper http://dualec.org/DualECTLS.pdf shows that exploiting Dual EC takes hours (without additional bytes), but that RSA (intentionally or unintentionally) managed to adjust the BSAFE C implementation to enable especially easy exploits: in seconds vs more than an hour on the 16-CPU AMD cluster for other implementations (Table 1 in the PDF). The reason:

"due to the use of the requested
number of bytes rather than the number of remaining
bytes after pulling from the cache, the concatenation of
the 32-byte session ID and the 28 pseudorandom bytes in
the server random always contains a full 30-byte output
block and between one and 30 bytes of a subsequent block."

So the 28 default bytes take hours, just adjusting that a little to push always continuous 58 bytes from the PRNG resulted in reducing the exploit time to seconds. The small number of bytes more, the big difference.

Paper's conclusion: "Our analysis strongly suggests
that, from an attacker's perspective, backdooring a PRNG
should be combined not merely with influencing implementations
to use the PRNG but also with influencing
other details that secretly improve the exploitability of the
PRNG."

This is exactly why having the "extended_random_value" too was so convenient to the NSA.
> Its scene roots are still very anti capitalistic.

While this sentence is obviously a generalization, I'd say it applies more to the city in itself than to the startup scene. "The scene" is quite heterogeneous - yes, you'll find anti-capitalistic parts, but then there are also many people who once worked for one of the Samwers companies, the corporate incubators (axel springer, telekom, ...) etc. These people are probably not as hipster (although the corporate incubators try hard...), but they're everything but anti capitalist.

Of all the bigger scenes in Berlin, the startup scene as a whole is in my experience one of the least anti capitalist.
Still no serialization, sorry. This is getting close to being my top priority though. It's a hard problem to design the kind of generic visitor I want while being speed-competitive with the fastest stuff that's out there.

Probably can't use a lot of outside help, but thanks for asking. What's taking so long is a very intense process of refining the design. I am often reminded of this bit from "Worse is Better":

"The right thing takes forever to design, but it is quite small at every point along the way."

This is exactly the approach I am taking. It's taken forever to design, but over time it becomes more and more capable without the core growing in size very much. I hope that this intensive design work will pay off soon.

Thanks for your interest and I hope to soon be able to reward it with a highly compelling parsing/serialization experience!
Are you channeling Ayn Rand?
As the article pointed out, what if your key (AES_k) is compromised? I mean what is the point of storing `AES_k(p,q) if k is random` unless you keep k somewhere?

What do you use that for?

I like the idea of a common way of proving one owns certain social identities. It is probably worth pointing out that the level of trust we give varies - Google "trusts" I own the domain when I put their random key on my homepage. Its not the kind of trust we would send (a lot of) money using, but its the level you guys seem to be aiming for - its a good level in a fair society.
There was a keybase security vulnerability reported last week as well. I'm not sure if it is 100% relevant because it had nothing to do with js crypto, but it could have allowed someone to impersonate 'liz' as 'iiz'

github report: https://github.com/keybase/keybase-issues/issues/397
blog: http://ejj.io/keybase-io-vulnerability/
Maybe you're right (that that is what he meant)... but all it takes is the criminal to withdraw cash (or have someone do it for him) and that money is long gone.

I was more getting at the fact that the money is probably not retrievable.
Four Things I Wish Every Chart Did
BMW i8 to feature laser light technology in headlamps
Imagine that Keybase is compromised. It starts serving a password-prompt page that looks identical to the previous, but now sends your decrypted key straight to the malicious attacker.

Storing your private key on Keybase allows Keybase to become a single point of failure, which pretty much defeats the whole point of distributed social verification in the first place.
Sounds great. I think we'll aim for a May deadline on the ML talk.
Aha, good point! Hmm, have to think about that more.

It might be cool if there were an open source tool (from keybase or not) that would do this check for you. Most people in the target audience aren't going to be able to do it yourself.

That might be something cool for keybase to provide. (Yes, of course you'd still have to trust the open source tool, but that's why it's open source, etc.).

Before sending something particularly sensitive, you could run the tool to check that the public key you have still matches what was posted on their twitter, facebook, etc. (And yes, if someone can hack the old tweet on twitter, then of course, yeah).
http://en.wikipedia.org/wiki/Executive_Order_6102
Someone? More like an entire division with an own budget. Looking at the video of this gig, they have a helicopter(!), a crew of actors (maybe employees) a full-sized camera team and a few GFX-artists.

It's understandable why Google is one of the "hottest" companies in tech right now.
I have yet to hear anyone speak positively about their experience working at SpaceX. The common theme seems to be incredibly high turnover with intense burnout. However, looking at Glassdoor right now, it seems things may have improved. Or there has been a lot of recent astroturfing going on. The reviews were pretty negative last I looked, a year or two ago.
The system does not work like this.

To put it shortly: it's not Keybase that verifies that `liz` is a certain Facebook account. `liz` generates cryptographic proofs and publish them on Facebook, you get them and verify them. Keybase.io can't switch anything, unless also `liz`'s FB (and Twitter, and GH...) is compromised and the proofs switched.

This is a common and understandable misconception with Keybase threat-model, they should probably try even harder to put it up front.

What OP says is that she does not trust the way the tool to generate these proofs is distributed.
I just signed up on keybase.io.

It seems that I can authenticate, get a few people to track me, than revoke my key and upload a new one.
I can also, obviously, recover my password via email.

And at the end of the process, people who were "tracking" me will still be tracking me. I am not sure this is supposed to happen.
5 Mistakes Every Entrepreneur Makes
Yes, Your Xbox Can Spy on You
I agree - if some tiny % of Apple's 80k employees are poking Samsung in the eye via lawyers, no way the other ~80k employees are somehow useless or starved for attention or money. Especially since the $160B cash hoard implies each employee could have ~$2M at their disposal - without using any credit.

Seriously, even small companies can do more than one thing at a time - why can't a big company.
On Value Capture
please correct me if I'm wrong, but I think this is not really decentralized.
It's a single authority that owns a namespace in namecoin and is giving out sub-names.
It's decentralized in the same way a twitter account is.
Stroopwafel.me: Redefining SaaS (Stroopwafels as a Service)
That's because this article, like many others, idiotically conflates "income" (money received as payments) and "wealth" (things of value in storage). Income is typically liquid; wealth, often not so much. Your Bay Area director might have high income but relatively little wealth. Gates and Buffet probably get substantial dividend income but it's their wealth that's so staggering. Grandma might have lots of wealth in her home but if she has no income to pay the taxes, trouble.
Makes every other startup seem so trivial ...
The Galaxy S2 had very high build quality. It was all plastic, but felt and looked great. It extremely light and higly durable, and a removable back is very useful.

I think it's fair to say that the build of S2 was cheaper than the competition, but the quality was also much better than any of the metal or glass(!) designs.

In later models they switched from elegant to ugly IMHO.
So a "legit" crawler has no recourse but to resort to implementing technology that'll circumvent anti-crawler code? Can't say I didn't try to go legit :)
You don't start at 0. You start in the negatives. Those that are uber wealthy tend to start with a massive, massive head start.

Combine massive debt loads, poor job prospects, and you get a hopeless generation of youth. They would rather buy video games and beer to forget about how crappy their life is than to invest and plan for the future.

Basic human tendency is to ignore and/or avoid pain.
My guess is that if your company will pay for your phone (some companies don't bother with desk phones so they will buy you a corporate cell phone) it doesn't really matter which phone you get.
The point is that in a terminal window I have no idea what comes from the keybase binary vs. the gnupg binary it calls out to. You could throw up a convincing looking prompt, steal my passphrase (optionally crashing or passing it on to the real binary to delay suspicion), and then send the key and the passphrase back to your servers.

Realistically, I'm not going to validate the keybase binary, npm, etc. every time I update the app. (and even if I am, many users won't). And a "user of interest" could be given a "special" binary pretty easily.
There's a triad of things that must be done together to make one of these "no preexisting conditions", cover everyone grand schemes work:

Guaranteed issue are the words of art for not considering preexisting conditions.

Community rating (https://en.wikipedia.org/wiki/Community_rating), means charging everyone the same amount, although that's often "Adjusted"; for Obamacare, by smoking, and maybe somewhat by age.

Individual Mandate: everyone must be part of the system.

It's the latter two that are politically difficult. Community rating means the healthy young ("young invincibles" is the current phrase) must pay a lot more to cover the less healthy older folk, also men must pay more to cover women. And it's not hidden in taxes like a single payer system.

The mandate of course means you can't escape the game for the sorts of reasons you've noted. And it's political poison, e.g. presidential candidate Obama, unlike Hillary!, was against individual mandates. And as you've noted, it's relatively easy to zap and in due course kill the rest of such a system.

Three guesses what's going to happen in 3 years when the mandate ramps up....

Ah, another critical line of attack: "BAILOUTS FOR INSURERS!!!", the "risk corridors" that will prevent them from going under this year, and the next one or two, due to insufficient signups and more importantly payments.

"Official" enrollment figures for Healthcare.gov were those who've put a plan in their cart, as of a while ago not even those who then hit "sign me up", and the communications between it and insurers are horrible, and I doubt the government even knows who's "signed up" but never paid, or stopped paying, or didn't pay their first huge bill that started to satisfy the huge deductibles of lower grade plans.
> "maybe the top .1% is more numerous."

You may want to rethink that.
We agree this is a problem, all of those who try to access their private key during the compromise would be in trouble. Those who stayed offline would be safe.

BTW, this argument does not extend to the CLI or other uncompromised clients. People who sync their private keys across devices with the CLI are unaffected.
I didn't see anything in the article that was negative or hateful about the 1%, but it sounds like you're reading it that way. Do you think the 99% have a reason to hate the 1%?
I just switched to a Moto-X. The "Active Display" looks quite nice, indoors, and I like the "nudge the phone" status updates.

However. It received numerous plaudits for ergonomics, but now that I'm using one I find the thin edge -- even with a case on it -- difficult to grasp. Also, the curved back means I can't set it face up on a table and "poke at it" -- the body would rock due to the curve.

The display looks nice, indoors. But while taking some photos during a walk, yesterday, even with the sun low in the sky it was very difficult to see the image on the display. (And, the camera lends a very saturated and "reddish" tint to the result, at least at default settings.)

So... I'm intrigued now with the S5 display quality. I'll have to look for camera results. And "cheap plastic" or whatever, if I can hold it securely and use it on a table and etc. Well, then, such functionality will exceed an "appearance" concerns I have other than display and camera output.

I wanted a "close-to-Google" phone that would remain updated, while also remaining on the only service that provides a reliable signal in some areas where I travel.

But "easy to hold" and "easy to see" and some basics... I'm seeing more and more why Jobs et al. resisted some of the design changes rampaging through the Android market.

P.S. Once I heard about the apparently legitimate security concerns, I sort of swallowed the disappearance of microSD expansion. But if/whan security concerns are ameliorated, I would much prefer to retain such a feature.
I like the gray tone, it highlights my mustache.
There's an extra dimension to what might or might not have been known in 2005: Known to whom?

Given that the standards in question are already widely believed (to put it mildly) to have been deliberately weakened by the NSA, which still has quite a bit of nonpublic crypto knowledge, you really have to keep that in mind as well.
It's a pity that gephi is loosing the edge recently. The development is quite stalled and few things have changed since 2 years ago. It's even pain to get it to work on mac as it works only with java 6 and will not work out of the box :(
This is a lazy and meaninglessly generalized list, like a "30 Best Languages for Programming" list. Why are the tools here "best"? Because they make attractive visualizations? Because they are easy to use? Because they are most flexible with data inputs?

I guess the buzzwordy-barely-English summary should have been evidence enough that this is clickbait:

> Technologies such as the ones profiled below are helping to reshape the insights function through making data exploration more accessible to users who lack the knowledge and are not trained as data scientists.
Sure, but asserting that everyone should be using random password manager X isn't super constructive.
Thanks for this respectful, detailed, and analytical contribution.

I agree that "Big Data" is a tendency that is worth talking about as if it is a new thing. There are edge cases that reside on the border between conventional moderate-n statistical analysis, and large-n "vacuum up lots of data and try to extract correlative information" approaches. Examples like the pothole-location collection and GFT are emblematic of something new, that's well beyond this fuzzy boundary.

So it's not surprising that there are new issues. Some of the fixes may be old-fashioned, but some may not.

We should also face the fact that the people doing this work often don't have any formal statistical training, so it's on the community to highlight the important pitfalls.
Yeah I gotta say, this blog post is a really terrible idea. A "reasonable person", if this came up in a court of law, would probably conclude that despite your disclaimers to the contrary, you know or should've known that this blog post serves as a recommendation or even incitement to share copyrighted materials over your service.
Agreed. We wish there was a practical solution to this problem, but at some point, it's turtles all the way down.
Celebrities on The Beach
Yes, under different user accounts. But you can't get referral credits this way.
A round of congratulations pies around!
You could load the data into a database and run queries, sorts against that. postgres has a COPY INTO command that supports csv inputs, which can greatly reduce insert time.
Set up a database (mysql or MS sql or whatever you use) and import the CSV. From there, use standard SQL queries to look for duplicates, missing, etc.
Link to previous discussion: https://news.ycombinator.com/item?id=3867059
Pleasantly surprised to not find a single post about Google privacy issues. keeping my fingers crossed
And worse -- it only needs to send that special password prompt page to a specific IP or user of interest, and maybe only when it comes from a mac box (if the victim is known to do auditing on a linux box, but uses it as a regular client on mac).

Shipping packaged software with evil inside to ~everyone is risky because at least one user is likely to find a bug (accidentally) and try to trace/reverse/whatever (or, at the very least, if you do networked evil, some kind of IDS/firewalling).

Per-user downloads, especially at time of each use, are vastly more risky; this is the "hushmail attack".
Just remember there's lots of people you're robbing of an opportunity because you're selfish enough to value your time so little.
Is Chrome Dev Tools really that much better than Firefox dev tools? What about firebug?