skysight-inc/HackerNews huggingface dataset:
Point taken on the 90%, updated the post.

I don't think anyone is saying node is aways awesome and never sucks, I am just pointing out that it solves one of the most common problems with network/web applications. Which you also point out, (the platform) "being stupid with I/O".
The Gut Microbes of African Hunter-Gatherers
I don't think either jacquesmattheij or me said this was really bad, he just said that the tone could be better and I agree. I think people are reading things into our comments.

I agree that it wasn't especially bad, it could just be worded a bit better to spare feelings.
LiftPort – space elevator
Chrome Remote Desktop goes mobile
Contacting a complainant who is complaining about being contacted is probably the wrong thing to do.

Email addresses are personal information and companies should work to best current practice, not just whatever they can get away with under the lax laws of their jurisdiction.
Wow...e=1? That makes me feel better about my biggest crypto goof, which I had assumed was the stupidest mistake anyone had ever made with RSA, but e=1 is worse.

Briefly, I was doing a single RSA encryption on the client and corresponding RSA decryption on the server as part of a login procedure, and using e=3 (which, at the time, was considered acceptable by most experts). Due to licensing issues the client code had to be all ours, so I was using an old arbitrary precision integer library I had written years before. It was not super fast. The multiplication wasn't too bad (Karatsuba), but division was the classical division algorithm. On the server there were no licensing issues, and I was using gmp.

So I had this "brilliant" realization. Why not do the division ON THE SERVER? The client could simply compute M^3 and send that to the server. The message would be 3 times longer but bandwidth was cheap. The server could then do the modular reduction.

I quickly made the change to the client and then started to revise the server code, when it occurred to me that since the client had made no use whatsoever of the modulus there must be a way to decrypt the message without using the modulus--like by just taking the cube root. Doh!
Ubuntu's `command-not-found` is terrible but it does not affect bash-completion. CNF runs after you have told bash to execute a command. Tab completion is before you tell bash to run the command.
I wouldn't really say it's a significant announcement. It takes up about two sentences at the end of Microsoft's announcement of new Office Online features:

http://blogs.office.com/2014/04/14/more-office-online-commen...
I feel like most people care even less about privacy since the Snowden revelations... that makes me sad.
yea i can't really speak for experience other than the few minutes i got to try it out, but from what i've been told he really likes the hardware (more than just the screen), but hasn't mentioned the sharp edges
I definitely and totally judge the article.

It's exactly the kind of junk I invariably see when a good journalist attempts to write about any kind of science - they try to draw conclusions from the study that the study does not draw, because the conclusions drawn from a real study are never interesting to a normal readership.

The study most likely does not prescribe behaviors or approaches on the parts of parents when raising their children. The study ought to be purely about how individuals react to controlled and described stimuli - the study will draw reasonable conclusions, make appropriate cautions about the mapping between reality and experiment, and be very careful about inferring any real-world implications. I haven't purchased a copy of this particular study, so I can't judge it on its own merits, but it's from a reputable source, and the abstract makes reasonable claims.
> A "list of instructions" is simply a "set of instructions" with an order.

No, its not, since an element can be repeated in a list but not in a set. To represent a list of instructions as a set it needs to be something like a set of (position, instruction) pairs -- like lines of code in old-style BASIC, with mandatory line numbers.

> If you want to be pedantic, the instructions inside the brackets ultimately get converted to opcodes and their numeric arguments, which do form a set.

No, they still don't. The "opcodes and arguments" are just instructions in a different language, and are still a list; you can have the same combination of opcode and arguments more than once, and the order still matters.

(If you include the offset in memory at which each instruction will be loaded along with the opcode and arguments making it up, then you'd have position-instruction pairs, and you could represent it as a set. But that's not what you are writing, and the fact that there is an equivalent set representation for something you are writing as a list doesn't make set delimiters natural delimiters for the thing written as a list.)
its success
Then I've got great news for you: http://gorillagadgets.com/

I've got one myself and it works exactly as you describe -- heavier, nearly twice as thick, but with roughly twice as much juice.
Nice. Never seen that manifesto. Just pushed it out to all my devs.
URL from an earlier HN comment by sgustard:

https://news.ycombinator.com/item?id=7593131
That's just not the whole story. Significant whitespace can itself cause issues - for example, it can be really easy to accidentally indent to the wrong depth when merging or copying and pasting Python code.

Ultimately, well-formed indentation and whitespace is important, as you say. But whitespace significance is not a panacea.
hmm, OpsDev sounds like sloppy dev who carelessly breaks stuff and says Oops!
Anyone who has ventured into software from an engineering discipline takes it for granted that redundancy is necessary for reliable and robust systems. Another aspect of the engineering mindset that is relevant is the acceptance of burden of rigor in service of the end user.

In ('haute couture') software, the matter is up-ended. It is the 'comfort' of the developer that is a key consideration and not the reliability of the product. They don't wish to be "bored" with "boring" "boiler plate", etc.

I think the problem boils down to this: given the infancy of this field and the (still) primitive tooling available to support the mind-work, the field requires and attracts high percentile minds who are then tasked with building (again and again) what is in most cases glorified book keeping or plumbing systems. Naturally an outlet is required for self expression (which is a very basic need for high power minds) and that increasingly translates to need for 'bling' (thus the periodic migrations from the last "cool" stack to the new thing), and aesthetic 'elegance'.
Ask HN: Ex-Intuit Eng. Building Free Income Tax Software. Join Me?
I'm a well known developer in San Diego (where TurboTax is made). I spent the last 2 seasons on TurboTax as an engineer and learned how to make free software that still pulls revenue - about $20M at scale.

Looking to transmit returns for next year's tax season.

Interested in joining? Check the site & blog for more!
http://taxcompactor.com

Email me: ecolner at gmail dot com
"No officer, these aren't drugs, they're a distribution of drugs with some userspace fillers bundled."
What? No, of course not. I'm just saying that, at least, for some transactions, there is some credibility.
yay, thanks for the spellcheck... I'll make sure to do that next time.
I used to work at Twitter, so I was able to request it internally. As I mentioned, you were only able to request a handle that met some strict 'inactive' policies.

I left in 2012, so I don't have much context since then. The root problem is that you want to give handles to people who will genuinely use them. But if you open up any system for reclaiming handles, it's just going to be abused by people trying to snag and sell handles (just like domains). Since there was no obviously correct way to ensure only people who would use the handles got them, it was just done internally for people who requested it (and their friends).
Show HN: Massively Multiplayer HTML5/Node.js Game
Nice-- I would love for there to be a big, comprehensive hub for this kind of thing (as a person starting to get serious with Python). One issue I see here: it's not clear to me how wide a net you're casting. For example, would it be appropriate to submit links to MOOCs that may or may not still be available in the future? What about books that make particularly good entry points?
Fanfootage.com puts fan shot videos to good use
No. The problem, though, is that it is difficult for a court of appeals to determine whether an unconstitutional act occurred when a party does not raise the concern before the lower court. A court of appeals does not collect evidence and is constrained by the factual record developed below. I don't think we would be better off if courts of appeals resolved a constitutional issues without the issue's having thoroughly investigated and litigated.

In considering this, remember that the record might sometimes be deficient in ways that the court of appeals cannot identify on its own. And it seems likely that inadequate development will cause courts of appeals to things wrong as often as it permits them to get things right despite the procedural "technicality."
Haskell also features a white-space syntax.
Fast and Efficient Parallelized Comparison of Redis Databases in Python
I believe the free plan allows you to export up to 5 times.
We wanted to track user behaviour on our web application. At first we were a small startup that didn't have the time to code for all the behaviours we wanted to track. Then we sold our company to a large public software behemoth. Then we had many more resources, but management still kept them focused on developing the core product, even as our user base grew further. So we still didn't collect the detailed user behaviour we wanted to track, and we didn't get to run insightful reports in Mixpanel or Google Analytics, and we didnt learn from our experiences.So when we left to start a new venture and ended up building a solution that solved our problem. In fact we found it so exciting and got such great feedback we decided to build our entire business around it. So whats my question? Simple. I'm looking for sniff testers, tire kickers and nay-sayers that might be interested in having a deeper dive and giving some honest feedback. No matter what I've shown her, my mom still says my ideas are great ;}<p>Check us out at http://trialfire.com - We're currently looking for testers to be part of our closed beta.
paper lens?! are you trying to signify the other side of HN that upvotes kickstarter links without even reading? :D
Sure, nothing is new under the sun, but it's hard to argue that node has not brought it mainstream, where others have not.
Yeah, I wouldn't mind seeing some lunchtime, (or breakfast meetups).
Its more likely that a lot of them are running unaffected versions of OpenSSL
$50 Project Ara modular smartphone coming in January
Every update on my iPad just seems to slow it down.

I learned this the hard way with my iPhone 3G. By the time I upgraded it to iOS 4, the phone literally wouldn't work anymore. It would ring, I would touch the answer button repeatedly and nothing would happen. By the time the slow-as-molasses phone responded to the answer button, it would go to voicemail.

It happened to a lesser degree with my iPhone 4 and I didn't have my 4s long enough to experience it. Basically I think Apple just assumes people are going to upgrade their Apple phone every 18 months, which is a stretch considering major US carriers have clamped down on subsidized 18 month upgrades.
I'm just getting sick and tired of people in the crypto community dismissing projects because they're not done by one of the "ordained few".

Your criticisms of the book are indeed valid, but the obvious derision you apply when calling professional efforts such as this book and Cryptocat "amateur" is precisely the kind of behavior and attitude that keeps the state of crypto so backwards and slow, and is exactly the kind of drama you (correctly) lambasted earlier in this comment chain.
Miscito Paradise [video]
Given the legal credence given to, say, statements or items on your Facebook account, I can't imagine the legal case would be different.
Agreed on both points. Maybe starting with ICQ back in the 90's has overly biased me; things certainly seem to work well enough as they are.
Yes, that actually happened:

https://github.com/saltstack/salt/commit/5dd304276ba5745ec21...

There's an interesting real-world RSA bug related to yours: in the absence of proper padding, it's possible that e=3 RSA of a small plaintext might not wrap the modulus. A similar cube root operation produces a signature that naive implementations (the ones that check the digest embedded in a signature block, but not the padding) will validate, despite the attacker lacking the signing key. That bug bit Firefox's NSS library; for a little while, it was possible to use a short Python script to forge any certificate.

(That bug is due to Bleichenbacher, who called it a "pencil-and-paper" attack in the rump session he presented it in).

e=3 RSA isn't insecure per se, but it does magnify the impact of other vulnerabilities, and so it's best avoided.

As my literal not-making-this-up favorite HN commenter and someone who has previously expressed an interest in crypto, I'd love it if sometime you could take some time to demolish our crypto challenges. I'd be happy to send them all at once to you.
Makes me wonder how many malicious nodes on the network might be doing a reverse Heartbleed attack on vulnerable clients.

It could be an effective way of unmasking the identity of hidden services, if they happen to have chosen such a node as their entry guard.
PhonoPaper: Play Music from Paper
I had this issue a few times, and each time it was due to an app being stuck on an initial setup screen. Going through the prompts solved it. Strangely I had the same issue on android a few times. My 920 gets two days of battery life.
Here's a video of the app in action: https://www.youtube.com/watch?v=-GAJ9e8ifYU
Akamai Update:  Heartbleed: A History
btw there are 3 different tuition deductions!

Maybe its also an indictment of the tax code, but I don't see why I should give turbo tax a break.
Fat guy is dancing like a bitch
Ask HN: If you worked with a grad from a code bootcamp, how effective were they?
A close friend of mine is deciding which code bootcamp to attend. Talking to graduates has been useful. But if the goal is to be a good developer that people want to work with, the most objective source of information for applicants (and hirers) is probably previous graduates' coworkers.

If you've worked with a bootcamp grad, please take this < 1 minute survey. Results will hopefully be really helpful for a lot of people, and they'll be available for download in their entirety.

http://fluidsurveys.com/s/coding-bootcamp-grad-peer-assessment/

Disclosure: I have a secondary motive in that I'm a cofounder of Statwing, and I think the results of this will be a really interesting dataset to let people play around with (like the Stack Overflow survey: https://www.statwing.com/demos/dev-survey). I do in fact have a close friend making this decision right now, though.
I'd actually love it if this idea extended far enough to let me double my "phone" as an impromptu laptop/desktop. I know that we can use a bluetooth keyboard or whatever and kind of simulate things. But I'd love to carry around a single computing device that I can drop into a cradle at home and it's using my two big desktop monitors and nice keyboard/mouse, and when out and about, head into a coffee shop and swap the screen out for a larger screen and keyboard, and then head onto the subway and just swap the screen back and use it like a phone. Then end of the day, head to the gym and swap out a few parts and have it just play music for me while I work out. Head out for a hike on the weekend and configure it like the Gym, but put in a better GPS unit and a bigger battery or something. Go to the store and swap out the GPS unit for a barcode scanner so I can comparison shop a bit. If something breaks, I can fix it myself. Go home and plug it into an HDMI port and watch movies or play games or something. Want to read a book? Swap out the screen for an e-ink screen. Going on a trip? swap in the GPS device, big battery and the Nokia camera module so I can use my nice lenses and find my way to the sites. Swap the screen for the bigger screen later so I can review and edit my photos for the day.

I could trade my notebook, camera, desktop, console, media devices, mp3 player, e-book reader and tablet in entirely.

But all my data is present for me and I can work on it, context appropriate to the interfaces I have available at that moment.

I wouldn't mind having a few bits and parts floating around my backpack if it gave me the flexibility to do that kind of thing.
There are top cheap VPN providers, to find a decent one check out list of http://vpnwebsites.com/.
I get in trouble regularly with my wife because I've been trained my whole life to think in a particular way, and that's not how other humans are wired:

if (a) {
b;
}
if (c) {
d;
}

versus

if (a) {
b;
}
else if (c) {
d;
}

She has mostly learned to put up with me by now, but the difference (how programmers think) still comes out sometimes.

Edited to explain: programmers don't think exactly like other humans.
1TBS = One True Brace Style, had to look up that abbreviation [1]. Puts the `{` on the line with the `if`, `for`, `while` text and the `}` on its own line, and requires the braces even for one line blocks. (I knew the rest, just hadn't seen "1TBS" before.)

[1] http://en.wikipedia.org/wiki/Indent_style#Variant:_1TBS
It's encouraged with NaCl to cache the results of the Diffie-Hellman operation. Thus the protocol can be conceptually stateless, but the cache solves the problem of having to do per-packet, public-key operations.

From a quick skim of the code, it does appear that they might be doing this. They are calling the right functions for it (crypto_box_curve25519xsalsa20poly1305_afternm. (See "C precomputation interface" in http://nacl.cr.yp.to/box.html)
> I challenge you to explain why speculation in equities is an "investment" but speculation in real estate isn't.

Speculation in equities is also not an investment in my book. I was referring to buying stock long-term for the dividends, not short-term speculation.
What a pedantic article. The effectiveness of to do lists, or any other work management tool, is extremely sensitive to both the nature of the work and the nature of the person.

Some people can be effective thinking about 3 things all day? Great. I envy them. I'm not one of them. To do lists help me minimize the transition time after I finish something and quickly prioritize. But that's not everyone. I'm sure there are others best served by thinking about 3 things.

But to pretend that this method or any other is best for everyone is childish.
if (error_of_fifth_kind)
{goto fail;}
{goto fail;}

How do braces save you?
Mechanically, the adversarial justice system means that yes, the justice system is liable to a failure mode where it will accept illegal acts for reasons that are more procedural than philosophical.

(And vice versa, of course.)
He's on his soap box, again. Apparently, he's an expert in absolutely everything under the sun. Therefore we must listen to him, err, or something like that.

Treat it like a plain blog. Take it with a grain of salt as it's just one way, one person's opinion. If you like it, great. If not, move along... Just because he's got good advice on certain topics, doesn't mean we should listen to him on everything else. Classic intelligentsia syndrome.
Given that you want to "forget the 'human time' part" I am curious what you think the metric is for. Maybe you meant to respond to a different comment. In this thread I had asked if anyone had any numbers/estimates for processing time. I wanted these numbers because "It would be interesting to see how many minutes of human time are needed for the average paper return."
Test Driving iOS – A Primer
> Which one is safer, using PBKDF2 from a known implementation or the "bcrypt library"

What kind of dilemma choice is that? It should rather be:

"Which one is safer, using PBKDF2 from a known implementation or bcrypt from a known implementation?"

But even that question is erroneous. After all, why shouldn't we just use PBKDF2 from RSA's known BSAFE implementation? What could possibly go wrong with that?

Or if you don't like RSA because of da Feds, why not use the known-good OpenSSL for securing data in motion instead of something new and untested like stunnel or spiped?

Known implementations are a very good consideration factor. You should use TLS (though maybe not OpenSSL's) in general instead of designing your own secure transport. But being from a known implementation should not be the only factor you consider otherwise you're just cargo culting. You have to understand pros/cons of each solution, even if that means you have to learn a little bit about the problem space.
This happened to me (employee of the company took my username) with a different service, and a quick tweet to the founder had my account restored.

I'm not going to identify the website because the person that made it is a nice guy in general and he restored my account right after I asked.
Shouldn't != couldn't. In Haskell and the MLs, for instance, certain classes of mistakes shouldn't happen because of the type system and pattern matching, but a single wildcard could throw that off.
Heartbleed seems to be more plausible answer to how NSA has cracked Tor instead of the global whole-Internet-scale input-output analysis. Well, at least i hope it is so...
"define: commodity" on Google gives me: "a raw material or primary agricultural product that can be bought and sold, such as copper or coffee." By this definition, "commodities" are also materials that can be processed into something more complex, adding value, which makes them great investments. That's not why people usually buy a house.
I just added SQlite support back into master, I'll add it into the next release :) https://github.com/jamesrwhite/minicron/pull/70
Tend App – Organic, long-term productivity
Are Nation States Responsible for Evil Traffic Leaving Their Networks?
That's true but using branches is not always a good idea specially if you want to collaborate in big projects and have strong communication with your team.

Master can be used as a chat room (substitute english with code) and leave branches for very specific cases when that doesn't work. That's basically doing continuous integration. If you prefer, you can think of it as if you are still having branches with one commit each ;).

The important thing for CI is being sure that each commit is either hidden (through a feature toggle maybe?) or it doesn't break anything.
I find that Pololu pre-crimped loose cables are convenient, and they slip right into standard 100 mil pin header housings. For anything up to a few amps, this is a fine kind of connector for DIY projects. For higher power, I use screw terminals and stripped wire, which is not the most convenient, but for things that I don't disconnect often, it works and is cheap and simple.
This is such a nice product, I'm thinking you should be charging for it! I can't quite so who the market would be though. I guess there's not an easy way to target it to the enterprise market.
Ugh, please let Common Lisp be. There's enough bondage & discipline languages already so it is nice to have CL on the opposite side of the spectrum.
Depends on the locale; I've heard stories of officers showing up at the complaintant's door 2nd.