skysight-inc/HackerNews huggingface dataset:
Infinite scroll can be implemented well, but more often than not it's implementation is just terrible. Take Soundcloud for example. I love their service, their UI is generally pretty good, their site is usually fast, and in most cases, their product is a pleasure to use. But their implementation of infinite scroll is terrible. I'm not sure what it is, I haven't troubleshooted it too much but when you scroll a playlist with a lot of songs, every so often, the pages repeat themselves. And sometimes when you scroll down below a certain point it will just restart at page one.

So if I open a playlist with ~400 songs and I want to reach the bottom, there is no way for me to do it but to just scroll really fast and wait for each page to load. Okay, fine. But when I do this, usually about ~30% of the time it will start repeating pages or it will just start feeding the playlist from the first song again. In this case, I think infinite scroll does ruins the experience. If anyone out there from Soundcloud is listening, please consider implementing pagination.
One thing to keep in mind: Haskell is different enough that it's almost as hard as learning to program the first time.

To learn something that hard, you need to be exposed to it multiple times. You'll probably get overwhelmed even with LYAH, but give it some time and come back to it.
Eh, I remember how about a month ago when that recent GnuTLS bug was found the almost dominant sentiment on HN was along the lines of "how come anyone is using GnuTLS instead of OpenSSL", "GnuTLS codebase is horrible, use OpenSSL", "the guy maintaining GnuTLS is an idiot, use OpenSSL", "OpenSSL has more expert eyes on it", etc. Although I prefer OpenSSL (for no particular reason), this all seemed so obviously stupid and shortsighted, not to mention some of it factually wrong. And what do you know, a month later we get an order of magnitude worse bug in OpenSSL which was also probably an order of magnitude easier to detect. I made a comment[0] then along that line, thinking to myself that I'd really hate if I got to say "told you so" but that unfortunately I probably will get the chance. I didn't think it would be this bad though.

[0] https://news.ycombinator.com/item?id=7346879
Dear SaaS, you can actually make money out of your phone support
"Talking through her tears on Monday night, Amy said she didn't know if she'd be able to recover from what she considered the worst setback of her professional life. After what happened at Google, she wasn't even sure she could bring herself to interview for another job."

One of my friends lost his job during the dot-com bust. He was married only a few weeks earlier. He was on an H1B and about to get kicked out of the country. He couldn't find a job anywhere because of the bust. He paid money to a body shop to keep his H1B "active", and then he got whatever jobs he could for 2 years, moving around CA taking the shittiest jobs just so that he had money for his family. He went from a software engineer to pumping gas during the midnight shift in Redwood City and getting paid under the table, just so that he would have money. Finally after two years, he got a break and got a job at a big tech company, moved to Austin, and is thriving in his job, made senior manager, and has 3 kids. He suffered great indignities just to survive and to make money and his perseverance paid off, thankfully.

To hear this person say they don't know if they can never interview again because they weren't good enough to join Google, and they would look bad in front of their rich friends, frankly it sickens me. No wonder the hate of Silicon Valley is increasing in these past few years, it's producing people like this that can't take the fact that their feelings were hurt.
There is another interesting structural phenomenon built by ants, mass graves.

I have first hand observed that when a ant pile/mound is damaged (pour water on the mound, spray with ant poison, or just kick the mound), the ants over the next few days will simultaneously rebuild the original structure and relocate the dead ants to a newly build structure. Though I can not recall if the new structure is composed entirely of the dead ants or if dirt is involved as well.
> From the outside, it has looked for a long time as if avoiding issues that matter is the whole point of your political system. No offense,

None taken; I find that a problem myself. Though I'd characterize it less as "avoiding issues that matter" and more as "over-inflating issues that don't, crowding out everything else".

When I look at politics elsewhere, though, I tend to see the same issue, just shifted elsewhere on the spectrum; I don't think this problem is unique to US politics.
The post is from 2012 and says "we're currently planning on disabling online revocation checks in a future version of Chrome", which is presumably what happened.
MITM is only one type of attack, which is largely irrelevant to public sites serving non sensitive information. But server memory is always private and could assist in escalation of a further attack.
New From 3M: Boiling Liquid to Cool Your Servers
I'm currently reading "Ant Encounters - Interaction Networks and Colony Behavior" by Deborah M.Gordon. It covers a lot of related material and is a very engaging read.
> Moreover, the experience can be completely asynchronous. You don't have to both be available to make progress.

Studying SICP (or anything) can involve different "modes":

Reading and doing exercises will often be solitary. Q&A could definitely be asynchronous (IRC works great for that!). But we're talking about explaining what you've learned; only in synchronous conversation will you get the back-and-forth "wait what? How's that work?"

A hard part of learning is figuring out exactly what you don't know; conversation is remarkably effective at elucidating that. Where do you feel uncomfortable while speaking? Where does your partner look especially confused or skeptical? The human connection gives you expression, body language, tone of voice, etc. in a quick feedback loop.

(disclaimer: not involved in creating Understudy, but I'm a happy user!)
I hate flickr's infinite scrolling because of this. It's impossible for me to browse more than a few pages worth of images on flickr.

And of course flickr doesn't have any good tools for fine-tuning search results, so infinite scrolling is the only way to try and find what you want.
I think infinite scrolling would be much worse in that case.
What are the financial terms? i.e. would people who don't convert lose everything due a a 1 year cliff?
Ask HN: Audio-visual programming for tablets?
Hello, HN :)

I recently got a tablet and wanted to use it for programming. There seem to be two options: get a hardware keyboard, which means using your tablet will be just as comfortable as using a laptop (read: not particularly), or get one of the better IDEs that have their own specialized software keyboards. I'm not very keen on using a software emulation of a paradigm developed for typewriter keyboards attached to line printers.

So this is what I was thinking: speech recognition is hard because a) the diversity of the words that must be trained and recognized and b) the ambiguity of human language itself. Programming languages have almost none of these issues.

Combine this with a visual programming language and you can say "define class shape", tap the class box that has appeared, say "define variable color, is equal to null", tap the class box again, say "define method set color, arguments new color", then tap the method box, tap the `color` instance variable from above, say "is equal to" and tap the `new color` box that was created when you said it's a function argument.

What do you think? Could this possibly work for creating simple games on the move, automating some tasks, etc.?
You may search for things, but you probably overestimate the number of times you actually find anything relevant. Most of the time, you'll find a page about the exception class itself (fine; not very useful), or you'll repeat your search with something more specific, and get either nothing, or you'll get some blog post (or worse: forum question) talking about how someone once encountered an exception, without any relevant answer.

What we're trying to do here is make it possible for people to search for exception messages, and find the code where those exceptions actually get raised. It's something I've wanted for a while, personally.
Windows 8.1 update: Good, but no XP killer
Are the alternatives much better? GnuTLS has had it's fair share of embarrassing bugs too and I can't think of a 3rd open source product that's as mature.
As someone who double majored in Math and CS, I have to disagree.It has given me more choice.I can program,but also have the choice of going to graduate school in either Economics,Physics,Math,CS or basically anything requiring a mathematics background.
HeartBleed Tester and Exploit
It may not have been any better for her if she joined. A friend of mine was an evangelist of a startup, acquired by Google for their technology. She was humiliated by having to essentially re-apply for her job and be ejected a few months later. (Incidentally, this woman is an accomplished programmer and project leader, but not quite the C++ rock star that Google looks for).

As for the OP's case - we only have only her side of the story. If the team jettisons one of their own when acquired, it may be that they are contemptible, or that she is and they were happy to get rid of her. Or, possibly both.
Please see my comment above. My perception is that the two major parties are controlled by authoritarians, leaving anti-authoritarians no good alternative. They can either vote with the religious fundies or vote with the Nanny statists. By the nature of the system, anti-authoritarians are disenfranchised.
Coordinated release of patches in closed-source software is possible because the people dealing with the source code are NDA'd. Rails attempted a coordinated release of the YAML bug and it was a total clusterfuck: they "soft-released" the bug with a vague notice about potential database corruption, and 1000 people simultaneously re-discovered the bug over the next two days by looking at the code. Then, everyone involved in Rails got the scope of the bug slightly wrong, and variant vulnerabilities followed for the next couple weeks.

Once you have a whiff of where the bug is, it's dramatically easier to find it. You don't need to know exactly what the bug is; you just need to reduce the problem from "read all of OpenSSL" to "read a small subset of OpenSSL". Once that narrowing of the target space happens, independent discovery is inevitable. The people most motivated to do that discovery work don't have any of your best interests at heart.
You can get a sickermule sample pack for $1: http://www.stickermule.com/products/sample-pack
Faced with a similar prospect in my small company, the founders agreed (in writing) to set aside a portion of their proceeds (including a portion of gross salary) to ensure that payments were made to anyone on the team who was not hired.

In my opinion, even if your teammate doesn't "need the money", it's important that you express how valuable they have been to you (for even just believing in your journey and sticking through it).
Can confirm this. Went to link and scrolled all the way down. it's not too bad.
What you describe is a Burkean brand of conservatism, though there are others.

If conservatism was purely about defending the status quo, it would be liberal to enact a flat tax, restructure school funding to work through vouchers, or replace social security with private savings accounts.

There are many other reasons that people are conservative or liberal. I would argue that the most prevalent are various flavors of identity politics.
What if I only have a first name?

Why are the profile images so large for such a small little circle being displayed? (on the sign-up page)
We did it, twice; one of our product efforts is still alive and kicking.

37signals --- err, Basecamp --- is another example of a company built on the "consulting->product" strategy.
'Transparent' Land Rover hood shows the rubber meeting the road
I can recommend reading SICP first if you know nothing about functional programming. It will likely help a lot.
And forget everything you know from C-like languages (I'm not joking).
This depends on which CA you're using. Some do not have a way to reissue/rekey at arbitrary times (StartCom, in particular), and charge for revocation. Most allow free reissue, and often don't charge for revocation and replacement issue.
First, not everyone here is a white male.

Second, statistics that measure the state are not direct evidence. Individual cases may or may not fit. There may be statistics that measure a company that demonstrate a bias, but unless you have direct evidence of that, it's better to not burden your mind with that negativity.

Third, you aren't a statistic. You have to keep developing and getting better. Don't internalize the statistical oppression. Internalization is the worst form of oppression.
Redesigning IMDB – Creative Idea, Product Design, etc
Would Neel Mehta be ineligible collecting via his employment at Google?
I know it is not equivalent—that is why I proposed it as a sensible alternative to what the PEP proposes (which I quoted). The punctuation may have made it unclear, but what I was trying to say was:

> … a sensible alternative to [PEP proposal]; namely, just contract on the inner indices.

and not

> … a sensible alternative to contracting on the inner indices.

My argument for why it's sensible is precisely what you mentioned, namely, that it is what a mathematician would expect.
As I fill out information why is there a circle next to my typed information? Is it portraying some information via color? If so, it's lost on me (and many other color blind people, presumably)

I filled out the three text fields and clicked to sign up without gmail and it said "Issues with information below". But they all have information?

What's the plus sign for? It seems to want me to upload a file. For what purpose?
Your Best Mentor Isn't Always the Most Successful Guy in the Room
Depends tremendously on experience level, whether or not the designer can implement in code (ie, works in HTML/CSS rather than Photoshop), and other important factors.

Having recently hired both designers and engineers, I can say with confidence that the pay differential is a hell of a lot more than 7%. Double is absolutely plausible.
Ask HN: does Heartbleed effectively compromise most SSL certificates (MITM)?
From http://arstechnica.com/security/2014/04/critical-crypto-bug-exposes-yahoo-mail-passwords-russian-roulette-style/ :

myforwik writes:

"""

Remember the servers involved have potentially been leaking their private key for their certificate! This means anyone can 'fake' being them.

It is not enough to do new certificates. All of the old certificates could now be used for man in the middle attacks! 2/3rds of the Internets certificates potentially need to be blacklisted! This is a MAJOR disaster.

"""
Dropbox at Work
Anyone know of any comparisons between this and Apache Mahout? I've used Mahout's Item-Item recommender in the past, and it's worked well, just wondering if there were advantages to this recommender.
Solution 3: cease trusting StartSSL certs issued before 2014-04-07?

This is implied by the request itself but is it possible to implement?
Assumming there are no other upcoming priorities or life commitments and the only issue is to decide what to do against what can I survive with, I recommend that you think about the following questions:

1. In addition to the things I love to do (product development), what am I naturally curious about? (This is a curiosity driven passion that can take your further).

2. what are you blessed with? Look inside you for strength and personality traits and look outside you for opportunities in areas that can match the inside and outside.

3. Ask yourself are you in the explorative stage? If so, then investing time to deliberately figuring it out is not a bad idea.

Keep going and good luck.

Always find a way to do what you love.
Thanks for the clarification. I'm in agreement with your opinions regarding false promises of open source, and also that this is increasingly a problem. However, I don't think that actually applies here. Specifics:

1. Everything in this github repository (https://github.com/mortardata/mortar-recsys) appears to be truly open - it's just a bunch of pig scripts, some java UDF definitions, and some python management code. There doesn't appear to be any dependencies on proprietary MortarData anything. All the code is licensed under the Apache 2.0 license.

2. The blog post states: " You can run this code anywhere. It’s built on widely-adopted open source technologies—Hadoop, Pig, and Python. But we think you’ll want to use our platform."
It is sometimes amazing how words of wisdom from 100 years ago still resonate today. Thanks for that quote, I've never before seen it.
“Copyright troll” Prenda Law completely bombs at appeals court
The problem is that just "getting a fix out there" isn't enough. People have to deploy that fix for it to mean anything. And the way you get people to deploy a fix is to make them aware that they need to.

Given how widely deployed OpenSSL is, and how many of those systems are run by part-time or amateur sysadmins who aren't going to be monitoring CVE lists constantly, getting the word out that (1) there's a huge problem and (2) here's how you fix it is of paramount importance.
The dynamic switch isn't without its pain points. In particular, the way we currently implement it leaves some things to be desired, and it's lead to some other rather unfortunate ramifications for Windows right now.

Truthfully, me and Simon now have reservations about if this is the right way to go, and we should instead invest more infrastructure into our own Linker (which, independently, got some nice bug fixes this time around - constructors and weak pointers now work, for example.) ELF support is quite complete (and very stable) for example. It's just a question of what's the most work.
The #1 paid app in the Play Store is a scam
I agree with you in a general sense, but I disagree with you in this particular case.

patio11 first made a business, then did consulting, and is now building another business.
Not really, it's quite easy to call Objective-C methods (or more correctly, to send messages to Objective-C selectors) and perform other Objective-C-related tasks from C. See: https://developer.apple.com/library/mac/documentation/Cocoa/...

This is actually what the Objective-C compiler does. It translates your Objective-C code to C method calls.
Congratulations on the launch! Now time to add some apps!
The condescension and passive-aggression was fully intentional and really the only way to respond to such an asinine comment. Hope THIS helps; I could do better. Next time perhaps active aggression will be called for?
So this is an integration SDK for credit card processing?
We don't use the recommendation engine but the underlying platform, which makes it really simple to write and run pig jobs. Though the majority of our business deals with real-time data processing, the ability to crunch numbers in batch without dev or ops overhead is attractive and well worth the price to us.
CallRed Gets You Help from Companies Terrible at Customer Service
Real numbers:

http://www.electionstudies.org/nesguide/toptable/tab3_1.htm

According to those numbers, there are consistently more conservatives than liberals, but about half of the population either identifies as moderate or doesn't identify with anything.
Same. Working Here!
It seems to me that you can self-host. There is reasonable installation documentation at http://mortar-framework.org/. You just have to set up the infrastructure yourself, which you would have had to do anyway if they didn't offer hosting. It also seems that you can use their platform for only the cost of AWS if you don't mind open-sourcing your recommendation engine, which sounds terrific if your project is itself open source. Honestly, I can't find any qualms with this. Their business model seems to be that you will probably pay them $100/year (or $500/year for team access) because it's easier/cheaper than DIY.
I know, just that they behave similarly to the pictures shown. My point was just that I think the reason liberal-type people don't react to the image can be either that the images themselves are not dangerous, or that the images do not depict actual scary situations (the model with the spider on her head is not actually scared or in danger).

(Whereas a psychopath, lacking empathy, would not react much to even real images)
The moment it was made public information, there was absolutely no reason whatsoever to hold back on marketing it. Even if your chosen Linux distribution isn't quite ready to go with an easy fix, by being aware of the problem you're a lot more prepared to deploy a fix the moment it becomes available.

The only people that holding back (after the vulnerability becomes public knowledge) helps are the attackers.
So nothing specific or proven actually?
I wish you were right. :(

http://www.pcmag.com/slideshow_viewer/0,3253,l=238614&a=2386...
> Marketing is useful to get sysadmins too lazy to subscribe to security announcement mailing lists to apply the already-released patches

Which, let's be honest, is the vast majority of people who admin servers these days.

With cloud servers, VPSes, etc., anyone can become a "sysadmin," and lots of people do who don't really understand what they are signing up for. These are the people running the unpatched boxes that Ars Technica recently called "the slum houses of the Internet." (http://arstechnica.com/security/2014/03/ancient-linux-server...)

Those people aren't going to patch their system just because a CVE was issued. They don't know what a CVE is. So marketing the problem is critical to reach them and get them off their duffs.
As opposed to starting with the MS Surface?

Well, I'd say the central theme is human connection, and then the question is what you need to make that work.

All I can say is that the iPad's screen seems to be over the hump for this! We have beta testers, and they honestly seem to be doing great. You can see a few tweets they've made at https://twitter.com/understudyapp . You might also be interested in this video of it in use - https://www.youtube.com/watch?v=KrdjKvka558 . If you look at it _statically_, it looks bad, but when you see it in motion, you see that it's effectively gesture.

You're trying to visually communicate and gesture, not create an artifact to refer back to. My handwriting on real physical whiteboards is terrible, but they still work.

It would be interesting to try on an MS Surface. To literally answer your question, (1) there are a lot more iPads out there than Surfaces, (2) I worked at Apple for 7.5 years, on the Cocoa Frameworks for most of it, and I'm very productive in this environment.
There's more discussion on the Mozilla bugzilla, linked from this report:

https://bugzilla.mozilla.org/show_bug.cgi?id=994033
I wonder how the collaboration inside of applications works. Is there going to be a new API for integration?