skysight-inc/HackerNews huggingface dataset:
> One of the more interesting observations out of Haidt's work is that conservatives can reliably articulate the ideas of liberals as a liberal would. But the inverse is not true. Liberals have difficulty emulating perspectives that include concepts such as the divine.

In the interest of not setting off a flame war, I'm going to point out that this phenomenon can be explained in at least two directions (the obvious one and the reverse) and leave it at that.
Others have linked tutorials. I'm going to leave some advice: pretend like you're learning to program from scratch. Not just mentally but in how you invest. It will likely take some amount of time, it will likely happen in stages of progressively receding complete astonishment and confusion, and you will be served to be proud of silly things like getting simple programs to even compile.

Sounds kind of miserable, right?

That's why you should also prepare for it with some of that early curiosity and wonder that drove us all to learn programming to begin with.

Haskell is probably unlike anything you've used before.
Without going point by points to counter every reason I would like to say I absolutely love continuous scrolling when I am shopping or looking at items on a retailers website.

>Users will lose the page length orientation - the browser scrollbar become useless.

This is entirely untrue I can still use my scrollbar to get back to the top of the page again, it can also be used to easily skim the results that were displayed.

For most retail shopping I actually would rather have this than pagination especially if I am lazily browsing on my ipad, no reason to change hand positions.
After LYAH I learned a lot from doing as many of the 99problems set for Haskell as possible.

http://www.haskell.org/haskellwiki/H-99:_Ninety-Nine_Haskell...
Who are these people and why did they name their software after the Red Hat installer?
You mean, has anyone formally audited SELinux to make sure the NSA didn't load it with backdoors? No idea, but it was accepted into mainline Linux kernel ten years ago. So if you don't trust SELinux, you can't trust Linux.
Not really. The submitter here replied in a post "Why and How to Start Your SICP Trek" [0] with how this app could assist, and now it's a blog post.

[0] https://news.ycombinator.com/item?id=7546244
Woah! I did not know that was going to be included! Here's to hoping it makes as much a splash as OverloadedStrings did!
Isn't Rust a newer language with a ton of recent activity? Isn't it in a different space than Node.js? I'm not following your comment.
Just Ship Already
Big words from a poster that didn't just get canned.
For SEO use the next link relation[0] e.g. <a rel="next" href="/resource?page={next_page_in_sequence}" />.

I am assuming more results are loaded based on scroll-depth < 100% + an overlay to stop the user clicking.

Google/bots will be able to activate the link and request the next set.

Uesful resource http://www.iana.org/assignments/link-relations/link-relation...

[0] http://www.w3.org/TR/html5/links.html#link-type-next
They don't assume that.

I don't see why people think that NSA is simultaneously genius-level forces of the Illumanti architecting events that will culminate years later, and yet would make the rookie level mistake of introducing a backdoor that is protected only by obscurity.

They know other security services understand how to decompile code (or read the original source).

More importantly, they know that critical government services they can't predict will end up possibly running things like their broken version of OpenSSL. There's a FIPS standard, of course, but note that the Heartbleed page made quite clear that FIPS is vulnerable too.
No, I will not sign up for a trial of your product when you don't provide me any concrete information on how it's used/how it works. And yes, I am a potential customer for products in this market.
Hi elecengin,

Zidisha is registered as a 501(c)(3) nonprofit only, and does not have a securities license. For this reason, our terms of use do not offer lenders any guarantee they will be able to withdraw repaid loan funds. Legally, Zidisha lending accounts are not financial assets, and any payouts to lenders are treated as voluntary promotional payments offered at Zidisha's sole discretion. That is one more reason we try to keep the emphasis on philanthropic impact, rather than the financial aspect of the loans.
wow, great link thanks for that, i wish they were exportable to PDF, i too prefer physical (paper) books, but was given an e-reader for xmas and have been reading lots of pdf's on it.
If you think about the sheer number of logical load balancers they have to update (tens of thousands?) and the time it took them to update all of them, I'm incredibly impressed by their quick turn around.
That comparison is off. HTTPS secures communications; this bug exposes memory, you still want the first without the second and HTTP doesn't offer it. Minimizing complexity is a worthwhile goal but definitely not the only one since otherwise we could simply opt not to have communication that needs to be secured at all.
Totally agree,
Btw, HOP is coming just after SICP in my favourites. Great that you mentioned it :). It's great way of seeing same concepts applied to more day to day stuff like html parsing, walking directories, or regexps.
Great ... maps is a worthy addition to the language :)
Thoughts on Test Driven Development
I don't think this has to do anything with Amy being a woman. I personally know about 2 cases where a silicon valley big corp company interviewed employees before an acquisition and let go some of them. Maybe because they are not that important for the job.
The good news (sort of) is that it's an ordinary buffer overflow attack. We've known that these are a problem for decades and we've known how to check for them automatically for decades. Even in C's niche there are research prototypes for safe C-like languages. And yet there seems little effort to make them production-ready and deploy them; what kind of market failure is that?

I think this is the final nail in the coffin for the ideas that "many eyes make all bugs shallow" or that code review alone by "experts" is enough to eliminate even the simplest of bugs. Use static analysis or go home.

There are plenty of other ways to screw up with crypto but they don't pass out the server's private keys just like that.
When I learn something, I would like to simultaneously read several books on the same topic, so that I could learn same things from different perspective. It works great for me when I learn Haskell, Scala, and other things.

Here is the list of materials I used to learn Haskell:

1. LYAH, http://learnyouahaskell.com/

2. Real world Haskell: http://book.realworldhaskell.org/read/

3. Programming in Haskell: http://www.amazon.com/Programming-Haskell-Graham-Hutton/dp/0... (No one suggests this book, but I do think this book is well-written and concise.)

4. Video tutorial by Erik Meijer based on Programming in Haskell: http://channel9.msdn.com/Series/C9-Lectures-Erik-Meijer-Func...

5. Advanced topics: http://www.haskellforall.com/2014/03/introductions-to-advanc...

Edit: Format
Google Services Updated to Address Heartbleed
Take a serious look at the US Military. Lots of smart guys have leveraged that experience to build highly successful careers. In exchange for serving your country, you'll get first-rate training, solid experience, & a chance to see some of the world.
Thanks. For others who are interested, that course apparently uses a different piece of software called LensKit http://lenskit.grouplens.org/

Could anyone summarize the difference between Pig and LensKit when applied to recommendation systems?
One ant colony and the next are persistently engaged in bloody war.
AsciiFlow Infinity: Powerful In-Browser ASCII Art Editor
If you think humans are inherently good and orderly, you obviously don't have children.
I'm confused: I thought that Chrome didn't automatically [edit: by default] check for server certificate revocation (under Preferences->Advanced)?
This post indicates that it does, but that the process is flawed.
Number 7 is exacty what you want: http://www.nirandfar.com/2012/08/the-webs-slot-machine.html
The addition of maps is really awesome. In my applications I've had records, which are kind of like C structs, being passed around to represent state. But if I need to add features the records become very constraining, because adding another key to them invalidates any previously existing records when you do a hot reload. So you have to jump through a bunch of hoops to get the records migrated, or just restart the whole system, which is less than ideal.

With maps this whole class of problems goes away.
Yeah, that is a blatant imbalance.

Why, OP, are you not working as a developer?

Honest question, not trying to be negative or anything.
Can you please suggest why you need a recommendation engine for datadog?
Read the comment above by coldpie about WineHQ project. The same is true for the ReactOS project.

In 2006, an overenthusiastic contributor caused troubles. The aftermath slash back the project for several months and stressed the relationship with Wine for some time. Since then, every possible effort is made to keep the code clean and disallow tainted developers. (that's why I wrote the comment above, to warn others) You can read a short summary on Wikipedia: http://en.wikipedia.org/wiki/ReactOS#Internal_audit
Wouldn't that just be intelligence?
I think machine learning boils down to 2 fundamental issues:

1) Having a model class that is powerful enough to represent the data.

and

2) Being able to find a "good enough" optimal solution over that model class.

In principle over-fitting can be addressed through the choice of the particular optimization criteria in (2).

Neural networks are used because they are powerful enough to represent many data sets of interest and because there exist good algorithms for finding LOCAL optima.

Unfortunately they are complex non-linear, non-convex functions and hence finding a global optimum is most likely NP-hard.

We are left then with the heuristic of hoping that the local optima we are able to find are "close enough" to the global optimum to meet our needs.

This seems to work reasonably well for certain types of problems, like image classification, where the underlying data possess a certain simplicity or "smoothness", but less well for other problems, like logic problems where good and bad solutions may not be "near by" in any sense that the local optimization algorithms are able to discover.
Don't.

There's no benefit to handcuffing yourself to the platform. Just install ghc and cabal, and enjoy yourself.
Apache CouchDB 1.5.1 Released (security release)
good lord, typing without my glasses on the phone: s/sad instinct/interesting/g && s/colloidal/colossal/ig.
A few minutes' thought doesn't turn up a counterexample, so I concede the point.

I still wouldn't bet on it, though, as we haven't had a lifetime's experience with such widespread use of relatively homogeneous software. The failure of Enigma wasn't worldwide, but for those who used it, it was a security calamity.

If anything, the limited message I'll take away from this is that defense in depth is good. It's only the web's reliance upon OpenSSL that makes this particular bug so bad.
> Would a clause in LGPLv3 that exempts the publisher/distributor from limitations beyond their control (console/iOS restrictions) help?

Tivo would just create a complicated enough corporate structure to provide the same shroud for themselves and will then be able to satisfy all requirements.
Do we need to change all Google account passwords? I think I saw somewhere that Gmail was vulnerable to Heartbleed for example. And if we do, why haven't we been notified about doing that yet?
Homeless Lose a Longtime Last Resort: Living in a Car
If you go through life believing that any prejudice (sexism, in this case) is dominating your career growth, you will always look for it in the tea leaves, project it onto any situation, and in return invite it. In truth, the person who is prejudiced is you.

For better or worse, disadvantaged minorities always have to consider this. It's probably one of the biggest privileges that white males have in day to day life -- they rarely need to consider if race/gender played a role in any decision they encounter.

There was an interesting experimental study that showed that a white male just released from prison was as likely to get a job callback as a black male with no criminal record [1].

There are typically multiple factors at play for any employment decision, but race and gender loom very large -- large enough that ignoring it is just ignorance.

And note, that the domain matters. Jeremy Lin faced discrimination as a basketball player being Asian. But for most domains, being a white male is preferred.

[1] Discrimination in a Low-Wage Labor Market: A Field Experiment, Am Sociol Rev. Oct 1, 2009; 74(5): 777–799, http://www.princeton.edu/~pager/ASR_pager_etal09.pdf
there are plenty of more important sites than FB and twitter, sites that store credit card info, bitcoins or generally any sensitive info. FB and Twitter are essentially public sites, if you post something there it is likely for public consumption (limited public but still there for people to see). If someone gets a password for your FB account it is far less serious than if they get your amazon password or your banking password.
True, real numbers would be helpful.

My perception is that, in the U.S., the fiscal conservatives would be more logically aligned with the social liberals since the freedom to live as one wishes valued by the latter is more consistent with the small government ideals of the former. It seems that whether a person with such views ends up in the Republican or Democrat camp depends on if they are better able to hold their nose in the face of the odious social policies of the religious right or the equally odious and equally authoritarian fiscal and social policies of the Nanny statists.

Regardless of the reasons for the current situation, the study being discussed suffers from its poor choice of categories. As an example, consider abortion rights (a topic I chose to avoid politicizing the discussion further ;-). I fully support a woman's right to choose and for abortion to be safe and available. I've donated to Planned Parenthood in the past. However, I also think it is reprehensible to force people who believe otherwise to pay for such procedures. Am I a liberal or a conservative?
As with most other articles about politics, it's easy to miss the forest through the trees. There's one most important, indisputable point: that we can generally be divided into two groups politically, and those divisions go well beyond opinions developed over time.

How you classify these groups (liberal vs. conservative, individualist vs. collectivist, voluntaryist vs. statist -- I tend to use the language of i vs. c) doesn't really matter. The two groups exist and are verifiably distinguishable.

The important part (and I say this as a libertarian) is that both groups are necessary to the health of a functioning society. It is both useful and necessary for (I'm generalizing here) one group to focus on individualistic pursuits while the other focuses on the well-being of the collective at large -- and we probably would have a healthy, functioning society if each side could appreciate the other's differences of perspective.

Instead, both sides are mutually antagonistic, and exploited by the political class, which almost always acts in its own exclusive interest.
CTO / Technologist / Healthcare hacker depending on the audience.
You're absolutely right. The author of the post is just whining for the sake of whining. For every post hating on amazon there's one hating on heroku<http://www.holovaty.com/writing/aws-notes>. Best course of action is to just deal with it.
I agree. The wages are artificially lowered, one of the few ways to get a higher pay is if you move from one employer to the other. And of course if you are close to the H1B expiry, the filing for a green card is a half decade long ordeal in itself and you are effectively locked in.
The thesis of the blog post wasn't that liberals are psychopaths. It was this:

"You can blame the general news media for being lazy and/or retarded. But the authors of the study are directly to blame for purposely skewing the results to the conclusion that conservatives are cowards.... When you write something, you must be aware of how people will read it. Since it is very obvious how this study will be taken, it is the authors' responsibility to prevent it from happening. Notice that they did not, anywhere write the equally plausible possibility that liberals inexplicably exhibit much less fear than would be expected"
Chapter 7: Real-Time Communication
Mike Judge Skewers Silicon Valley With the Satire of Our Dreams
As I said in a similar post, their proofs show that their implementation is logically correct--their implementation will behave according to their formalization of the RFCs.

This says nothing about how secure it is with respect to side-channel attacks. For example, they admit that they did not model time in their proofs, so they have NOT proved that they are immune to timing attacks. Moreover, F# runs on top of the unverified CLI--bugs in the CLI can be used to break miTLS.
> What action do you think you need to take?

Waiting until Debian gets its shit in order is not sufficient for a number of friends of mine who work at places that take security very seriously. They disabled access as soon as it became public knowledge.
Generally I agree. The whole temp agency compensation is another issue. But I can't help but feel that its extremely unfair to ask a bunch of $8 hour workers to give up ideas that can make the company a lot of money when generally speaking the company will be able to sustain itself irrespective of what these people say ( short of doing their day to day rote assembly and testing tasks ). Maybe writing workers a check for a big idea might be absurd but I think its equally absurd not more than the scenario I mentioned in the post. I think the real issue is that the upper manager who is responsible for productivity gains is in a position where he doesn't have any better incentives than the pizza party. This isn't necessarily because he's a good/bad manager, he's probably in a position that doesn't allow for much else. Regardless if its due to the situation he's in or an overall lack of creativity; either way the 'incentives' are kind of mediocre relative to the potential 'big' gains that could be made.

edit I would also like to add that many of the people in the room felt the way I did thus it wasn't just my opinion. I was simply the only one that said anything. In that regard I kind of did the manager a favor allowing him to possibly adjust his approach.
Ask HN: looking for some career advice
Hello HN,

TL;DR: I graduated from an Engineer school, I became a web product manager, and now I'm not sure what to do.

I recently graduated from a top Engineer school in my country. I know how to code, but what I like the most is coming up with ideas, designing nice looking apps, optimizing funnels, etc.
That's why I become a web product manager, but I quit my job a few weeks ago because I was only doing some boring tasks.
Now I'm building an iPhone game as a side project, and I'm having a lot of fun so far.

What should I do now? The main options that I see are: a) become a developer, b) be a PM in another company, c) become a game designer, d) be a consultant in a big company, e) freelance.

a) and d) looks kinda boring to me. b) and c) I don't know. e) is interesting but risky, and in what should I freelance in?

What should I do? How can I choose? Any advice?
I'm a little lost... Thanks for your help!
As a long time HN reader, you should know that the condescending "super sleuth" mention was unecessary. It should also be apparent that your highly defensive comment with a very new account would raise eyebrows. The "hope this helps" ending also comes off as passive-aggressive. We can do better.
It is not the worst Internet bug in the past 10 years.

It's among the most widespread Internet bugs, but:

* An identical bug impacted nginx a few years ago

* A far worse bug impacted Debian (when they commented out the randomness in their CSPRNG), which coughed up code execution on tens of thousands of machines; lots of companies that didn't officially deploy on Debian still had a Debian box somewhere vulnerable

* The Rails YAML bug was perniciously exposed in lots of places for months after the initial disclosure, and also coughed up code execution

Losing authenticators for "live" users and TLS private keys is bad, but it's not the kind of bad where you invariably need to nuke your servers from orbit and rebuild. Other widespread bugs were actually like that.
While I see your point, I think it's invalid to equate humans and ants in this context. I am not an entomologist, but I don't think ants have nearly the sophistication in terms of cognitive function and social interaction that humans do.

Without making a value judgment, I just don't think we're capable of being that kind of drone. We're too conscious of our situation and that of others around us -- with "around us" expanding massively following the advent of print, radio/TV, and now the internet.
I agree, but i've noticed that digital books have code typos too. Now, there are authors that will update them to do fixes. Some hard copies have online section that you can go and download "fixed" pages.
I really don't like continuous scrolling for retail shopping. its easier to remember what page something was on than a relative position. I don't mind it for pointless content consumption like Reddit and Facebook, because I rarely ever want to go back to something on those platforms.
I see OP is as confident of his recommendation as he can be in the complete absence of all evidence.
Request for clarification from those who understand the bug's workings:

The memory it can expose is limited to that visible to the process using openssl, right? Or does the bug reside low enough in the kernal stack to disregard memory protections?
I want to find a job as Haskell programmer!
The other 99%: dropping scalaz as a dependency
Could be any number of reasons for this. Salary is surprisingly rigid over time for many because people simply don't like negotiating. Women especially negotiate less than men. Maybe she had a $40k salary at her previous job and $60k looked like an amazing deal when in reality is is way below market. Who knows...
ISRO's bigger rocket GSLV Mk2 can launch satellites directly to geostationary transfer orbit (calculated apogee of 35,786 km), so there's no need to do orbit raising manoeuvres.
Unpythonic Python
Want your employees to cooperate better? Follow this ONE CRAZY RULE we learned from ants!
Systems administrators WILL NOT invariably fix security bugs no matter what. They'll apply patches as they are made conveniently available, and during maintenance windows. This bug demanded a faster remediation, and a more consistent one, than most bugs do.

Normally, to get out of the standard sysadmin patch rut and into an expedited state, your bug needs to convincingly cough up code execution. Since this bug didn't do that, but was nonetheless very severe, it makes perfect sense to me that additional marketing was required to expedite fixes.
Bad news. Your bank just opened a bar.
Convert Your Sass to Stylus