skysight-inc/HackerNews huggingface dataset:
Wow sorry I can't laugh at something jeez. So, you have never in your life just felt like re-posting a quote off something and just added a little something to it to show the spirit in which it was meant to be. Now you are just being nitpicky and to be honest rude in a sense. I have just joined this community I am trying to fit in and you just come along and see the comment and you "don't like it" because it's short, sweet and too the point. I am laughing at the comment of the programmer of rust for the quote he put on his site and now you have just totally bashed me because you felt it necessary to not like my simplistic comment. Wow.
NB removed. I suspect I was being down-voted because of the industry.

Outbound recovery attempts refers to calling people up and asking them to pay their bills in the collections industry.

The first attempt will be a Dunning letter asking you to pay your bill. When you call in this is an inbound recovery.
If they have to call out to you, it's outbound.

outbound recovery costs serious money. You need to pay for office space, equipment and an hourly wage to an employee. At the end of that you often see 8-40% recovery rates.
My work pushes that number up significantly.

FWIW: There's a huge opportunity for people to bring A/B testing of dunning letters to the industry. It'll be a huge slog though.
The point wasn't about whether it's advisory or an order, the point was that the actual price was not part of the message. Given that market principles are supposedly about using price signals, this is rather at odds with market principles, don't you think? ;-)
Yeah. Whether that happened here or not, I have no idea, but it makes perfect sense if you want to create plausible deniability about what you have the means to accomplish.
It would require the assumption that, for example, the NSA knew about it but other foreign authorities - who no doubt attempt to spy on various Americans and US corporations - did not know about it. I don't like those odds.
You are very wrong.
This is a really frustrating habit. It's basically demanding that you skip any support queues and get helped before everyone else, because you're airing your discontent publicly.
At the same time, we need to move fast with development and deliver updates as soon as possible. We want to be able to easily deploy several times per day.

Genuine question, not intended as any sort of troll: what benefits would people with this philosophy say their organisation gains from routinely deploying multiple times per day?

I have nothing against better testing tools or more efficient development processes, of course, and if you have a serious bug then being able to fix it as quickly as possible is obviously beneficial. I just don't understand where this recent emphasis on always trying to move fast has come from, or what kind of management strategy someone might use to take advantage of such agility.
v8 does not optimize blocks inside try catch (not too fresh http://www.html5rocks.com/en/tutorials/speed/v8/) and about generators and optimizations (http://wingolog.org/archives/2013/06/11/ecmascript-generator...)
They don't until either they lose all of their email, or they lose their email account.
I have a family already. I am married with an 8 month old daughter and plan on having one more child. Thats what is really making me consider going with the more established company.

With that said though, I did somewhat fall into this startup, they offered my a job, it seemed promising, I do see a bright future for it and I do see it succeeding. But I'm not sure I want to wait it out and take the risk just yet.

I have lots of experience building something myself, and I do enjoy that. But thinking back to my college days I also really really enjoyed working on another team with other developers, which is something I have not done since college. Thats what was appealing to me about startups, was the environment and being surrounded by other developers. I now realize thats not the case until a startup becomes somewhat successful and has funding to make something like that happen.
The questions were pretty good, because they were close to the real world and you couldn't google them so easily.
The programming tasks were rather unbalanced. The first two were super easy, while you can easily get stuck on the last one, even as a good programmer. I knew that I wouldn't be able to answer it today, so I skipped it after a short while.
If I'd plan such a test, I'd try to get an example of the structure and comprehensibility of my future employees work.
Isn't the crazy thing that it can go on? There's enough money at the top of the economy that the rich can keep investing in startups as an asset class and not really feel the losses even though they seem huge to those of us who get by on a salary from a job. The real question is: will the investments keep coming?

My guess is it continues. Hedge funds as a whole also perform below market but see continued investment because of the promise that they will have tremendous returns when a firm succeeds. Startups get money from the same sort of investors. People who are only investing a portion of their portfolio, chasing big returns and mostly unconcerned about losing some money along the way.
fully agree on market size and that the target customer would prefer GUI over CLI
Lol, exactly. If this was on The Intercept [0] I'd feel differently but "two people familiar with the matter" doesn't inspire much confidence.

[0] https://firstlook.org/theintercept/
This would be nifty schwag for tech talks and other events at co-working spaces and the like. I didn't know it existed.
http://schizoduckie.github.io/DuckieTV/

My user's Databases regularly exceed 3 MB.

It's relational data : Serie -> Seasons -> Episodes (sometimes hundreds, sometimes thousands)

Here's a 5MB example: https://dl.dropboxusercontent.com/u/44645464/DuckieTV.sqlite

The project is still in beta, so the database will most likely grow with more tables, easily linking into the existing episodes table with an actors table, for instance.
I used mine once to enter into to some contest. It's useful for doing that.
Desks for Rent – Come Hack with Us in SoMA
I've been using Ansible for a few production-related tasks lately, and think it's great. It provides the right level of abstraction, IMHO: you can crack open a playbook, read through it, and know exactly what it is doing. There's also a growing number of playbooks if you google around.

That said, the biggest downside I've seen with Ansible is reusable components. They have something called Galaxy in beta [1], which should help, although it feels a bit rough yet...

[1] https://galaxy.ansible.com/
Even n00bs understand that if their email gets jacked, that can be used to reset all their other passwords and jack those accounts.
I sympathize. That's how I feel about our recent wars, among other things. But I'm paying for them anyway, and will be for the foreseeable future. Sucks.
This is OK advice except for the bit about don't use detectors. Quality detectors like the Valentine 1 will save you from tickets.

Yes, burst radars are very common these days and won't show up unless someone ahead of you gets lit up, but guess what? Unless you're alone on the freeway, there's a pretty solid chance someone ahead of you is gonna get lit up before you do and it will give you a warning to slow down.

I drove with a V1 for years and it saved me from many, many tickets. (I didn't get a single one the entire time I owned one.)

My point being; radar detectors are useful tools. It can be a worthwhile investment if you buy a good one and know how to make use of it.

(For anyone wondering, I sold my V1 to a friend when I decided the german sports car phase of my life was over.)
HN, I'm sorry to have deleted my comment before noticing this reply. For the record it said something about 1) being put at ease by the Cloudflare challenge, suggesting to me no MITM attack was possible, 2) and then bemoaning the fact that the NSA "is the man in the middle"
The most likely explanation is that the memory corruption flaw was found in a different PolarSSL version than the one the verification kit applies to. The PolarSSL verification kit is a recent development. The available verification kit applies to version 1.1.8 with patches that have not been released yet. Another verification kit is being finalized for the 1.3.x branch.

Another possibility is that the person who found the memory corruption was not using PolarSSL in the same configuration as the one described in the verification kit. PolarSSL allows to select sub-components at compile-time, and to select between implementation options within these components. Finally, there is always the possibility that a bug remains for compilation parameters other than the ones the verification was configured for. If I did not do too bad a job, this comment should make it clear what kind of differences could explain a bug remaining: https://news.ycombinator.com/item?id=7573483

There is always the possibility of a bug in Frama-C having for consequence a bug in PolarSSL not being found. This is far less likely than the previous commenter referring to a version that was not verified.
You are wrong.

The reason why Steve didn't want doughnuts wasn't because they were unhealthy. It was because Steve didn't like doughnuts as a food, and he understood it was actually not food. Because it isn't doughnuts are food for fat dumb fucking slack off losers.

Steve understood this, and he wanted ALL doughnuts to be eradicated off the planet. Because, fuck, you are doing it wrong. Steve was not a sociopath. He was righteous, and he stuck up for what he believed in. Even if you do like doughnuts, Steve was right by banning you from eating them.
Also really great feedback. I have been programming for only three years so I am still learning much of what you describe. I will be cleaning out the unused template files very soon. Good point on jQuery firing on each page, although I am not really sure why it matters if it has no effect. Processing time? There are no tests but I hope to add some soon. (I have never written any, so I will have to learn)
Can you imagine that, though?

"The first stage of grief is learning to pronounce the disease #joke #black humour #funny #comedy"

You'd look like a colossal ass if you did that.
People who are wrongfully charged have no recourse, except in the most egregious or best publicized cases. It's even a police tactic to charge someone as a punishment in itself. His best option now is to move on with his life, success will bring him closure.
s/Flawed Protocol/Flawed Implementation/
Wow. Thank you for this. This is insight that I never ever would have thought of because of my lack of dealing with this sort of situation. Obviously profit sharing and equity make a huge difference. If I stay with this startup I will absolutely make sure I get equity and rather than profit sharing.
Buy this Heartbleed T-Shirt, and support OpenSSL Foundataion
> And its discovery and resolution highlights one of the advantages of open-source software development.

I wouldn't say that its discovery (two years later) says anything good about open source development.
Probability that story is true | Bloomberg reporting it == Probability that the sources are right * Probability that Bloomberg isn't lying about having sources ~= 80%.

The sources could be lying for many reasons. As a prank, to discredit Bloomberg when they report on other NSA stories, because they're embarrassed the NSA didn't know earlier, etc. But Bloomberg knows this and presumably required some evidence to satisfy themselves before reporting. So the deciding factor is really Bloomberg's reliability.
The states can presumably go to court to keep from being compelled to comply with an unconstitutional law. They cannot sue the state for damages.
The citizenship vs. birth country thing bums me. I have two nationalities and with the one that's not from my birth country I would be eligible to the diversity visa lottery :/
I've always wondered if it would be worth the government actually creating a "license to speed". The same as you can get a license to drive a lorry or a motorcycle, why isnt there a license with a proper test that trains you specifically on driving fast. Then when you're on the motorway only you can go up to 100mph instead of 70mph (UK), if the camera's get you, it first does a check on your plate to see if you have a proper license and then decides on that if you get a ticket.

Cars are the safest they've ever been and are only going to get safer, unfortunately i think that driving ability is getting worse because of technology that keeps us safe in cars but i think an actual test to demonstrate you are a good driver would help. Hell, even make it only valid for 1 year and you have to sit the test again, and the test costs £5,000. You'll STILL get plenty takers and hopefully make the road safer for the people that are going to speed regardless anyway.
Their job is not to spy on behalf of the country.

Their job is to keep us safe.

Letting us all run around with humungous holes in our security for years was a risk to our national security. How do you think the Chinese were able to clone our weapons systems so well? Shit like this.
"The NSA's job is to spy on behalf of the country."

Spying on the country and spying on behalf of the country are not really the same thing.
I'm working on codeschool.org.uk - currently a coding summer school for 16-19 year olds. We'd love to pivot into something more like flatironschool.com or makersacademy.com - longer courses for adults, getting them to junior dev level - but don't know how to start recruiting candidates. Anyone have experience in this area? rob at codeschool.org.uk

Thanks!
Cloudflare's challenge is specific to nginx's implementation of OpenSSL. They hypothesize that stealing keys from Apache is unlikely, but possible.

http://blog.cloudflare.com/answering-the-critical-question-c...
One could make the argument that given the depth of the NSA's capabilities they were in an unique position to know who, if anyone, also knew of the bug.
Well that's a discovery. I'm in Ledbury and had no idea that little oasis existed. I'll drop you an email, and hopefully we can meetup in the next week for a chat over a coffee/beer.
Good context here: http://www.theatlantic.com/technology/archive/2014/04/hackin...

IMHO: this is worthy of our attention.
Speeding in a residential area is a lot worse, for the reason you described. New York City's speed limit of 30 is way too high (should be 20, without the 10mph tolerance). Most highways are underposted and should be 70-90.

Bizarrely, 40mph in a residential zone is a minor offense while 100mph on the freeway (which isn't exactly good, but not as dangerous as it sounds with a good car) with zero traffic can cost you your license in almost any state, and put you in jail in some.
I doubt such subtlety entered into the decision. The NSA plays offense, and this was a win from that point of view.

The only way to get a different result is to re-allocate resources away from NSA and build an agency from the ground up that is geared toward securing systems.
That wasn't a complaint. It was a request for clarification. I don't know what I did wrong in the eyes of the downvoter so I can't do anything to correct my behavior in the future.

95% of the time, it's obvious to the person being downvoted, why they were downvoted. However when it is nebulous, then there is no lesson that the downvotee can learn from the situation.

If it makes for boring reading, there should be a feature that allows you to make a comment that is only visible to the downvoter or make it possible to ask the downvoter why they downvoted you in a way that allows them to respond anonymously.
You are right, I could have been more specific, they do often care about maintaining control of their account. I don't think they care very much about their message history though, and there is at least some segment of the population that considers email accounts entirely disposable.
I'm making a low-configuration webserver for Erlang. You can one-liner a server from the REPL.

I would love it if someone pitched in some help getting HTTPS working, or any other stuff they felt like.

https://github.com/StoneCypher/htstub/
It should be pretty easy to verify which case it is: acquire the verified version of PolarSSL and check to see if the memory corruption bug, found 2 days ago and reported publicly, is in that codebase.
You totally missed the point of the article.

The lunch that guy described is impossible to deliver for $8 in the US, and especially in SF. That business makes no sense, ever. Losing money while making a unit profit on that lunch, ok, let's see where that goes. Getting my business by selling to me below cost? I'll do business with you all day but as soon as you raise the price, I'll switch to the next startup offering me a subsidized lunch. There's nothing 'long view' about that. No vision there.

This trend, if it's as big as the article makes it seem, is way more worrying to me in a 'bubble' sense than the color.com thing.
This is flamebait. Sad it's getting so many upvotes.
Inventory features are almost non-existent so far. That's going to be addressed very soon. Thanks for the feedback.
that is debatable .Yep , I did go to most of their events . You have a lot of cool people come in and talk , recruit , mentor. Are you going for undergrad?
The same amount of time: it was apparently found with a fuzzer.
We're looking for a senior developer 3-5 Years (Python-Django focused)
We're looking for a senior developer 3-5 Years (Python-Django focused) for developing back-end only and then integrating that with the front end design. this is a remote position. Please email me at johan149@hotmail.com
you pay $150/month if you DON'T use it.
If you need more than just a doctor's visit, you have minimums to meet even before the insurance starts paying a part of it
Even then, it's pretty much the only place in the stdlib that extensively uses virtual calls, via std::locale. It's very complicated implementation-wise (I was actually working on an implementation of it once and it's not fun at all) and hard to find places to optimize it.

It's not that it's too heavy for a console app's output, really, but for things like converting numbers to strings and vice-versa (a-la boost::format) it is definitely a lot slower than atoi/sprintf.
I've heard of the NSA, and I've read that xkcd comic on how Heartbleed works. Can I be quoted as a person "familiar with the matter"?
Thanks for the extra info. While I don't find it encouraging, I appreciate having a better understanding of the issue at hand.
If you are rich enough to drive a 9-11 around you are probably less price sensitive than the people buying the counterfit ones. For these people, the points on their license and the hassle caused by the ticket would probably be the main concern. Under those assumptions, the risk of being caught using a counterfit one would be hard to justify.
I found this project really interesting. Forked it. It might be interesting to create platforms like this for the very commmon uses-cases: ecommecrce, blogging, CMS. Currently there are solutions for all this use cases in the rails community but imo they are pretty directed. I mean, they are "difficult" to modify. I would like something like rails composer where you can configure the basic elements of the platform without custom generators.
Best interview question for EEs, IMHO: hand him/her an ordinary through-hole resistor, and say, "Tell me everything you possibly can about this component."
Have a wallet where there is a permanent window for your license opposite to a permanent window for your member card.
Gasoline Taxes and Tolls Pay for Only a Third of State & Local Road Spending

http://taxfoundation.org/article/gasoline-taxes-and-tolls-pa...
Check how developer friendly is your machine
I'm dead interested in this (just applied) and I'm definitely not financially settled - actually the opposite, finished a postdoc and am currently bootstrapping a startup. But the value of this looks amazing, so if I can put the funds together, I'm sure it'll be well worth it.
It helps to understand the role a virtual memory system has in an operating system kernel.
The other 56% are spammers.
Responsive Type: Typography that changes based on distance from screen
Interesting argument, but I sort of doubt that local small businesses and bootstrapped startups really need to worry too much about VC-backed startups that truly lose money on the the margin.

In general startups that lose money on the margin do not last very long.

Anyway, if the theory is that this food delivery service is selling under cost in order to get rid of the competition, well, then they are going to be displeased to discover that the barriers to entry for a food-delivery service are not particularly high.
Productivity is not the only argument. What happened to performance and correctness for example?
Again: they can challenge compulsion to adhere to unconstitutional laws. Note that MA didn't sue the USG for damages.
We're not talking about a malicious XML library here, though. We're talking about a misunderstanding regarding what happens during legitimate parsing of XML.
Beats me. I didn't post it. It's a pretty old essay by now.

Thanks for the reading list.
I signed up! Looking forward to trying it out.
The NSA protected us by not disclosing to us a serious security vulnerability in our software. It is hard for me to wrap my brain around reasoning of the intelligence agencies.
If you prefer not to pay the gouging rates, nothing stops you from using the normal cabs at the expected rates, so long as you're willing to wait in times of high demand.

I don't see how Uber has made things any worse for you; if anything, they've made it better in terms of your options.
No, Tinder Is Not Worth $5 Billion
For commodity resistors, sure. There are high-performance resistors though, and they are usually packaged with a manufacturers mark (e.g. some of Vishay's line).

Also, the resistance of the resistor is only part of what I care about when I specify the part. Temperature co-efficient and the technology behind the manufacture can matter quite a bit -- and those are harder to test.
And I also wouldn't say that the existence of a bug was caused by the license that was used. It's not like me keeping all the code to myself would make me a better programmer.
Actually, Tinder Is Not Worth $5 Billion
Introduction to D – Online Training Course for Developers on Pluralsight
C++ has just as much capacity to be unsafe as C, precisely because it accepts nearly all C code, not to mention that it has bare pointers, null references, and any number of other unsafe objects as first-class citizens. Of course, you're unlikely to use most of those if you're following best practices, but the same can be said of C. You might argue that C++ makes it easier to be safe because of its plethora of features and classes, but the massive size of C++ makes it a very hard language to master, and nearly impossible to guarantee that everyone will be conforming to best practices. C++ is quite possibly the largest language out there in terms of features, and with about the most gotchas (things that don't work the way you'd intuitively expect them to) that it's possible to put in a language. It's a step above C in terms of safety, but it is hardly a safe language, and it's only slightly more productive, because the benefits of its class system and standard library are so much at odds with it's huge mental overhead.
Here we observe a side affect of the NSA/GHCQ operating in a manner which always gives offensive capability precedence over the defense of civilian systems.

In case you haven't made the time yet -- ACLU's interview of Snowden at SXSW was excellent and dives into the implications of this: https://www.youtube.com/watch?v=UIhS9aB-qgU

On another (ironic) note this PSA from the US government is about 2 years late:
http://www.bbc.com/news/technology-26985818