skysight-inc/HackerNews huggingface dataset:
My issue is not with the matrix-multiplication operator—I'm a mathematician before I'm a programmer, and so am all for it—but with the vector-to-matrix promotions: why not just consistently promote vectors to columns (or rows, if BDFL swings that way)? This would achieve almost the same effect as promoting to rows or columns as needed, and would avoid the non-associativity problem that the PEP mentions.

This PEP seems to imply that the cost would be a profusion of superfluous `newaxis`s, but I can't see that: it seems to me that you would need only to remember which kind of promotion works by default, and sprinkle in a `.T` whenever you need the other kind. (Anyone who's uncomfortable with lots of `.T`s in matrix-crunching code is not, I submit, someone who writes or reads lots of matrix-crunching code.)
Then C is much more important.. it gave birth to Unix(another big contender on the list), Linux, and pretty much every piece of infrastructure in the world.. javascript will be pretty small compared to those giants..

Other trends are big data, deep learning.. i bet deep learning will me much more revolutionary.. But you know SV have a love affair with hypes
What is it?

http://socalpls.org/slides/zippy.pdf

It is a performant implementation of Python3 on the JVM.
What's your C migration plan? (2011)
Github is useless. The vast majority of companies that ask for source code samples don't even take the time to review them. Heck, these days you're lucky if your cover letter and resume are read in their entirety by a human being.

The sad truth is that most companies are lazy and/or inept at hiring. Once you recognize that, you can either accept that you're playing a numbers game, or you can decide to evolve beyond playing the role of employee.
This looks pretty nice, but do people actually use these for production apps? I'm not criticising, I'm legitimately curious .
«A new open-hardware computing platform, flexible and powerful, designed for use as a desktop, laptop, or standalone board.
Novena is a 1.2GHz, Freescale quad-core ARM architecture computer closely coupled with a Xilinx FPGA. It's designed for users who care about open source, and/or want to modify and extend their hardware: all the documentation for the PCBs is open and free to download, the entire OS is buildable from source, and it comes with a variety of features that facilitate rapid prototyping. »
ReactiveCocoa design patterns: blog
We had this exact issue too. The answer was to modify the workflow. Select the transition that currently isnt resolving (in our case it was transitioning from "In Review" to "Done") and adding a new "Post Function" which updates the issue field "Resolution" to "Resolved". After that all the little graphs etc were correct.

You can also bulk modify issues that are unresolved by transitioning them to "In Review" and bulk updating them again back to "Done" which then correctly set the resolution field. Unfortunately this technique means that all your issues are now resolved on the same day so your graphs etc show a big spike on one day.

For some reason this bug occurs after a few days with any of the default workflows in Jira, but it's not too big a deal if you spot it early and fix the workflow to resolve issues correctly.

As for the Jira/Godzilla thing, I always thought it was a reference to Mozillas Bugzilla, which I thought was kinda cool :)

Hope that helps!
Heartbleed Vulnerability Explained Khan Academy Style
Yeah, I wrote a little http endpoint that I access with curl in a cron job. The server updates my master DNS git repo and which then updates the data in Route 53.

The DNS stuff is based on a Perl module I wrote called Net::DNS::Create [1]. It allows you to use a little DSL-ish language to create your DNS entries, then compile them into whatever DNS backend you want (Bind, TinyDNS, and Route53 are supported out of the box, and all have been used in production at some point). A quick example of what this might look like is here: https://github.com/caldwell/net-dns-create/blob/master/creat...

[1] http://search.cpan.org/~david/Net-DNS-Create-v0.10.0/lib/Net...
Really? I'd have thought that most of the things that would benefit from SIMD would be down in engine code, which is still mostly C/C++. Are many people writing numerically-intensive full-stack games in managed languages?
lighten up Francis
Sometimes you have to hustle to make it. If you just sit back and other guy is hustling I know who I would bet on.

To quote Tinie Tempah:

I used to be the kid that no one cared about
Thats why you have to keep screaming til they hear you out
Tangential to this is that because time is limited your choices will decrease as you approach the end.

While your options are wide open at 20 they are far more limited at 40 or 50 simply because you don't have time to start anew.

And, similar to software, your life requires far more maintenance time as it goes on :)
Everyone should at least consider donating to the OpenSSL foundation: https://www.openssl.org/support/donations.html
Of course truth is more important than civility. But the two are compatible—there's no tradeoff.

It would be great if we had a way to correct all false statements on Hacker News, but we don't. That shouldn't prevent us from addressing the corrosion of the discourse by garden-variety incivility. Pulling out those weeds is one of the big things we all can do to make HN more conducive to truth-seeking discussion in the first place.
In light of the heartbleed bug, it's time for us to minimize our use of non-memory-safe languages, efficiency be damned. For crypto in particular, there are well-tested implementations in pure Java and Go, and probably other safe languages as well; we should use them.
You have set up a straw man by omitting the "almost". You're right, though; if I had said they always led to violence, everything you said would be true, but I didn't. So it isn't.

You seem to have set up a straw man for each paragraph. And they're all unique.

Nice to see you again, BTW.
Yeah, I thought about switching to a different provider for a few minutes but the time it would take is worth more than $20 to me. Plus, their free service has been working perfectly for years, so why switch now?
Meh. I'm not sure. I am on mobile constantly. I don't particularly enjoy the experience. Instagram/ Snapchat/ Twitter/ Spotify are all nice - but doing real world work, heavy email, hipchat discussions, really anything with significant amount of info going back and forth is inconvenient (for me) on mobile.

Yes, most of the world is starting with mobile and that is all they know, but my feeling is with low cost pc's/ chromebooks/ surface-type tablets - we'll see those as places where "work" happens
And semicolon insertion.
I believe that everyone should at least consider donating to the openssl software foundation: https://www.openssl.org/support/donations.html
I was thinking Andrei Alexandrescu did invent the D language.
I see you're conflating my arguments. Anyway, I'll upvote you and step aside.

Edit: On second thought. Go ahead and conflate them. As I said, don't risk the reputations of your users. That goes for everyone.
Thanks for you feedback and catching that! We fixed it. We will continue to work to make Poachbox awesome for our users. Thanks again!
Personally, I'd really like to see an equivalent in Python to Haskell's `binop` , to turn an arbitrary two-argument function into a binary operator.
We filed a ticket through support and also contacted our rep, referencing the ticket.
IMO they could have handled the transition to non-free better. But every time they took away some of the free stuff, you have seen popular outrage. They pissed off lots of people that could have been potential customers and I was one of them.

Their lowest price plan is 25$ per year. If I only would want the most basic feature, that is having 1 or 2 dynamic ip addresses bound to a specific DNS entry (not even wildcard or email redirection), that is too much. I would have gladly paid 5$ for that even if only to get rid of the 30 day renewal routine.

But when the time came for me to register my own domain, I didn't want DynDNS to do it. I've seen how they treated me when I was a non-paying customer.
Deciding to allocate the resources to IE support happens by accident, you're saying?
Yeah, the game is dominated by the nullsec alliances, but I mostly don't notice the mocking. If you want to be active in the forums yeah it can get annoying, but if you just want to relax and do some PVE you'll never notice it.

P.S. I've done just about everything you can do in Eve, and low sec pirating has been my favorite, with high sec PVE and industry probably being second. I didn't really enjoy much about nullsec blob warfare.
Now #11 on www.thestartup100.com

> 1/3 of the top 100 are SaaS, but not all are purely enterprise.
Thank you, I will adjust myself accordingly.

On another topic, this might be the best moderation I've ever received on any forum ever. So thanks for that. This restored a little faith I had lost when I was convinced HN had eternal-septembered.
Note that this is on the Chinese server - so I don't know if the USD translation is the same.

Most of the time it's (USD per 'plex' divided by ISK to sell a plex on the market) to get the price in USD per ISK. a 'plex' is a 30 day pass to play the game, and is also an in-game item suitable for sale.

The Chinese server is totally distinct from the RestOfWorld server - no shared space / market / anything. So I have no idea what the price of ISK is on the Chinese market, or if they even support that kind of trade.
+1 for freedns.afraid.org ... you can use one of the existing/open entries, you can put up your own domain for yours and others' use (did this for bbs.io, though I nuke entries that aren't bbs related), or you can pay for private use of your own domain. Works great overall.
The Precise Location Of The Downturn In Mobile
Ubuntu absolutely can be MITM'ed. So can you when downloading the source code. Moreover, you don't have to MITM attack Ubuntu (or rather Debian) into downloading a compromised version of the KeePass source. You could MITM attack anything the Ubuntu/Debian developers download, whether it be the source code to stuff that's going into Debian/Ubuntu as a package or something they are installing on their machines. I repeat, at some point you have to trust someone, otherwise all software and hardware is suspect.

Now, the really big question to ask here is what processes do we have in place for this not to happen. Downloading stuff over HTTPS is clearly not good enough: there are many ways someone willing to compromise a distro can circumvent it (including forcing a CA to give out a rouge certificate, or simply threatening the individual software developer into accepting a malicious patch). The best I can think of is using the PGP/GPG web of trust. When Debian Maintainer Dave gets an updated version of the source for package foo from Programmer Pete, Dave can verify that Pete actually authored the code by making sure the source is properly signed with Pete's GPG key. Dave knows Pete's public key having properly exchanged keys with him in person. I think that's the best we can do.

Mind you in the above we cannot guarantee that Pete does not turn to the dark side, either willingly or forced into it by a powerful adversary (NSA, drug cartels, etc.) The best we can do is that Dave is not also turned to the dark side and that Dave carefully reads and catches any security issues with the code Pete delivers to him. This is what keeps your distro safe, nothing else, so buy a maintainer a beer next time you meet one.
Airbnb.com apache.org dreamhost.com ifttt.com wer ones I noticed.

There are a couple of big european retailers in the list (darty, castorama).
I love the idea of this. I'm trying to find a new job right now and it's a pain trying to stay somewhat anonymous while searching.

What I don't like about your approach is the fact that the entire experience of applying/signing up to be poached feels half-assed.

You guys didn't make your own form and the embedded version doesn't really match the rest of the site and looks just thrown together.

There's horrible design inconsistencies (serif fonts mixed in with sans-serif fonts on the same line, and no.. it's not design).

This feels like a badly done DeveloperAuction/Hired clone with an anonymous aspect.

Why make prospective employers apply? It feels like a better experience for both parties would just be a listing of candidates, their skills, their location, etc with the ability to start up a conversation (via email or private message or something). If the guy gets hired, he can remove his posting.
We've also built and upgraded a few projects on Rails 4.1 recently and it has been very smooth.

On a side note: we avoid ActiveAdmin like the plague for the very reason that you specify here; our experience upgrading it between Rails versions has been terrible. We use our own simpler admin 'scaffolding' instead - https://github.com/SquareMill/generic_admin_controller/tree/...
The PEP claims that:

> Matrix multiplication is more of a special case. It's only defined on 2d arrays (also known as "matrices")

but this is not true. Matrix multiplication is just a special case of contraction of indices in a tensor (https://en.wikipedia.org/wiki/Tensor_contraction)—probably the most frequently used case, but not the only one. I'm certainly not arguing for the inclusion of general tensor-manipulating operators in Python, but it does seem to suggest a sensible alternative to:

> For inputs with more than 2 dimensions, we treat the last two dimensions as being the dimensions of the matrices to multiply, and 'broadcast' across the other dimensions.

namely, just contract on the inner indices. That is, arr(n1, ..., nk, m) @ arr(m, p1, ... pl) = arr(n1, ..., nk, p1, ..., pl).

EDIT: scythe (https://news.ycombinator.com/item?id=7554013) already pointed this out in passing.
Wordpress 3.8.2 Security Release
popsugar.com phpnuke.org toshiba.com torcache.net ucla.edu uiuc.edu utorrent.com ifttt.com
What’s new in Windows 8.1 Update and Windows RT 8.1 Update?
OK. I guess for me it sounded like you were saying the big problem is with the actual download of the software, not with the software itself. That's two different beasts that need to be attacked very differently.
I'd argue that at this point one has to be aware of latency and concurrency on the local system also, and any programming model ignores this at their peril.

It's the greatness of the potential of failure/hang on all actions that separates local RAM access from distributed computing. You don't generally need to worry about your app hanging indefinitely because of a memory read.
He didn't say anything about the suitability of .NET for game programming. His post was entirely about enterprise programming.
I'm using OpenWRT on my routerstation pro for my business connection, and an asus router with a TomatoUSB variant at home. Lots of options.
There's a reason why every other payment processor I can name and probably hundreds I can't name charge a percentage - it strikes a balance between fairness for large and small payments. Almost no company I can think of would blink at a 0.25% fee - a sign your fees are too low. Meanwhile, nobody would want to pay 80% of a $1 purchase in fees. I really encourage you to rethink your fee model. Visa, Stripe, Mastercard, etc. all use a percentage. There's a reason why almost every payment fee in the last 50 years has used a percentage - because it works.

Personally, I just discovered Gumroad and I'll probably be using that instead. With them I pay 10% of a $5 transaction in fees. With Snappy I pay 20%. It's a no-brainer.

Finally, I don't think a flat fee plus a percent is too hard to understand. Stripe and Gumroad use it, and probably many more but I can't think of them.

[edit] I just found out I can't use recurring subscriptions with PayPal. I'm going with Gumroad. That said, you have a really nice looking product and I'd love to use it, but 20% in fees is ridiculous.
I think there's some pretty substantial ActiveRecord changes under the hood in Rails 4.1, so likely one of your gems are fighting with it and borking your test suite.
Agreed. I guess they were trying to boot people out gradually, without causing a fuss. But that means many of their free customers lost their domains as a surprise, instead of moving to another service intentionally.
is there a way to use this without putting my designs on your servers?
I imagine the Rails team wants to make this more robust but I think there's some bad design decisions in Rack that are preventing ActionController::Live from being as robust as it could.
I've just checked a bunch of sites on this list and it seems a lot have been patched, only in the last hour since your comment.
Show HN: The Programmer's Survival Guide
If what's needed is speed, neither Java nor C# are optimal choices. As for SSE/AVX from Java, http://stackoverflow.com/a/10809123/158026 shows a nice example of how it can be done.

OTOH, I find this specific C# implementation neat and portable. I like it a lot.
My memory may be deceiving me but I recall the founder of DynDNS posted in the HN comments on his reasoning of taking outside money and shifting the biz model after initial growth via bootstrapping.
Hopefully someone else recalls and links the HN page.
I'm hoping to find a list of largish sites that were vulnerable to this bug just prior to the recent disclosure, so that I can know how to prioritize my password changing. (These forced password rotations are happening quite a lot these days.)
They also removed a bunch of domains from their free tier a few years ago. This may help them drive some revenue in the short term, but long term I it is going to make customer acquisition a lot harder. I just switched over to no-ip.com...
Those are indeed in-game graphics, but they don't animate well during large battles, and controls become unresponsive. It's a bit better since they added time dilation, but it's still frustrating to be in a huge fight. Usually the beautiful graphics come from one guy set up at the edge just to film; people trying to actually fight turn off the eye candy.
OK I misunderstood.
Well I suppose you're right, if you're using your bastion host as the TOTP operation service provider, but I wouldn't recommend that for a whole host of reasons - the main one being that the bastion host is always the first host exploited, so you shouldn't be running anything from there but a proxy.

You should be able to simply move the TOTP operation to an authentication server on a more secure network and have your web-application server query it with the user's token. The web app will get back the result of the operation and never expose the secret key to the bastion host.
Wait, Eve has a separate Chinese server? I thought the whole point of Eve was that everyone participated in the same game world on the same server?
People are just people. Everyone is an amalgamation of insecurities, fears, joys, talents, failures, desires, etc. This has helped me communicate and associate with people at all levels. I don’t care if it is the bum down by the river or the CEO of a company with 500+ employees, I get along with them… and have learned from them. Because we all have value and are just trying to make it through our brief term here on earth. Or, as Orson Scott Card put it, we’re muddling through.

But most of all, remembering I am just a person as well. No better or worse than anyone else.

Maybe it sounds obvious, but it truly helped me in life.
I think this question would be better phrased as, "How much of a pay or benefits cut would you be willing to take in order to work for a socially conscious employer?"

Studies have been done along these lines measuring consumer willingness to pay for eco-conscious products. Not surprisingly, it's a question of how much the premium is. See http://www.mckinsey.com/insights/manufacturing/how_much_will...

I imagine similar studies have been done on organic food.

Of course many of these studies go off what people say, and really we need to measure in all of these cases what people actually do when confronted with the actual choice.
LAPD officers monkey-wrenched cop-monitoring gear in patrol cars
shit works, yo, and python can only blame itself for so many people (myself included) remaining with 2.7.
JIRA has got an extremely "nervous" interface where clicking around in innocuous places (like blocks of text) causes strange things to happen, editing modes to be entered, and things to move around unexpectedly. So in this sense it "gets out of the way" nicely.
> 3) Secrets.yml is great, no more worrying about adding your config.secret_token to the .env file when generating every single project.

How is adding config.secret_token to secrets.yml, which you're going to keep out of version control, so much better than adding config.secret_token to .env, which you're also going to keep out of version control? Both files need to be lugged around.

Secrets.yml is a one-toe-in-the-water solution. I hope next minor release we will just have dotenv in Rails for real.
While these technologies can run on this power, they simply aren't consumerised, or even in the rear view mirror of non-HN types right now. You also have to consider the use-cases: a smartphone or tablet can be used to author documents, browse the web etc (even if the experience isn't perfect), whereas a desktop computer cannot practically be carried in the pocket and used as a vital in-the-field communications device.

As far as connectivity goes: again, you're talking about a hypothetical. While there's no reason you can't create a low-bandwidth experience on desktop, the fact remains that simply opening my email transfers over .5MB. Opening my Facebook account transfers more than 1MB. Doing this on my phone uses a fraction of this data.
As shown in the article the system i from IBM (aka AS/400) is an example of this architecture. Originally 48bit it moved to 64bit when the RISC (power) processors came to the forefront. Yet that memory model is only element to the longevity and flexibility of the platform.

However their best trick was keeping the machine code and OS so separate than when migrating to RISC from CISC you didn't even need the source code for the majority of code running on the system to migrate.
Anyone check banks and financial institutions yet?
'Heartbleed' bug undoes Web encryption, reveals Yahoo passwords
If $700/year is insane pricing for your needs, you're definitely not in their target market...

$700/year for enterprise-level solutions is generally regarded as suspiciously inexpensive.
I think that you're not alone, but this is specifically considered and rejected (in the section on "Rejected alternatives …"):

> Add lots of new operators, or add a new generic syntax for defining infix operators: In addition to being generally un-Pythonic and repeatedly rejected by BDFL fiat, this would be using a sledgehammer to smash a fly.
Game of Thrones: two more seasons expected
This exploit as posted is suboptimal. If I understood the format of a heartbeat message correctly, its one byte type followed by two bytes unchecked length.

So if you want to maximize the data extracted with each connection, you should send FF FF for length, instead of 0x0302 bytes as its requesting now (if n2s is for network byte order to short).
These multi-billion dollar valuations are uncomfortably close to the 3b needed by VCs to get the carried interest commission, mentioned here [0].

[0] http://modelviewculture.com/pieces/five-reasons-not-to-raise...
Thanks for the invitation, but the problem is 6 years old (https://jira.atlassian.com/browse/JRA-15964) and I don't know that there's a resolution in sight (https://jira.atlassian.com/browse/JRA-19091)