skysight-inc/HackerNews huggingface dataset:
Mobile has shown the need for new systems of dealing with identity, application management and sync. Essentially, you need 'cloud services' to get the most out of mobile but anything you buy into is typically hampered in some way (iCloud, Google etc). What would be great is if everyone had their own place in the cloud which could run basic infrastructure (e.g mail, contacts, calendar) and then new applications could be installed there to provide additional services (an analogy might be that you MITM yourself). To do this well involves reassessing how we build software for distributed systems. I'm working on the underlying tools to make this possible - http://nymote.org
Matz's prefecture business folks are awesome and supportive. I think I still have a pile of their postcards somewhere.
> Sure, but how much slower is Haskell than an equivalent implementation in C?

Writing Haskell to generate proven-correct C is an approach that is known to work.
Sure, the board shouldn't have made him CEO in the first place, but Eich could have just admitted that what he did was wrong and fixed the whole disaster with just a single statement. The fact that he couldn't caused many progressive people to distance themselves from the organization. Since Mozilla draws most of its contributors from that population, that would cause more damage to Mozilla than anything Eich could overcome with his leadership.
> You like to think that everyone is on the same page as you, but many people holding back expressing their opinion on this matter simply don't want to be accused by people like you of gay-hatred, bigotry and all the other pathetic labels you have for those who don't agree with you about what "marriage" is, its limits and scope, and how much of it is inherently about male + female union.

Maybe because there's no real rational reason for them to hold onto the term for themselves, and they'd probably not be able to cogently explain why they're against sharing it, so they do what you just did and get all hypothetical and defensive about it instead.
Oops, it should work now.
It looks like they are actually fixed, as of 1 hour ago:

https://twitter.com/lox/status/453443517017100288
http://filippo.io/Heartbleed/#99designs.com
There is a fundamental difference between being unable to tell the difference between two things, and having a difference of opinion on which is better; the article titles seem to claim the former, while the paper's abstract only states the latter.
Most if, not all, competitors have already pushed their fix (eg http://blog.cloud66.com/security-vulnerability-cve-2014-0160...). Ouch, 3 hours to go for the next update, ie not a fix.
Heroku is also still vulnerable, which makes me slightly uncomfortable.
Linux is so ubiquitous that I'm not sure that it can be effectively boycotted.
This is the reason the grandparent post was downvoted. Assumption that cause something seems unlikely is usually a bad idea in security.

Thanks for confirming my suspicions about this bug, seems anyone with decent effort can break keys.
I think that would be probably better put as "Not raising venture capital doesn't make you a bad person", but that doesn't sound quite as good.
Title should be: Heroku still hasn't pushed a fix for HeartBleed
That is not at all the same. Saying that Yagan supports oppressing gays because he donated to Cannon is like saying most of us support the PATRIOT Act because we voted for Obama. Eich donated to a campaign whose sole purpose was to take existing rights away from gays in California.
Google Glass in Warehouse Automation
Bellewaerde kreeg nieuwe look voor zestigste verjaardag | PretparkenKorting.be
Seems like CloudFront is still vulnerable: http://filippo.io/Heartbleed/#d8u1nmttd4enu.cloudfront.net:4...
That's the price to pay for having an open platform indeed. Several players, and none of them control the platform.

But that's the whole point of the web. If it was broken into 2 platforms, each fully controlled by a company, we would see quicker innovation. But then we'd have all the drawbacks of apps, so what's the point?
Once there is a post-scarcity society then jobs will not be required.

If you can throw in some trash into a "replicator" and have it 3D print anything you want, then what more do you need other than some raw material, shelter, and utilities?

Jobs of the future will be because people want to work for more things, fun, or to help humanity.

The loss of jobs due to automation will hopefully be countered by post-scarcity, we need to invest more into developing the technology to make this happen so that the gap between loss of employment and the lack of needing employment is minimized. Otherwise, things could go downhill very fast and many people will suffer.

http://www.basicincome.org/bien/papers.html
How would a TLS webserver read the memory of sshd? Processes shouldn't generally have everything mapped in.
It would be really nice if you could make Discourse more nice and usable without Javascript: http://i.imgur.com/Jml22Hg.png

I see no reason to use JS for a simple forum like webpage just like I would see no reason to use HTML in mail.
Cute but I thought we collectively outgrew animated hover effects in 2007.

Oh well I guess we'll never really grow up.
When people fall in blind, biblical love with a particular technology, rational perspective goes out the window. Further, groupthink is something to be feared for it's failure of a subtle kind.

And, the vast majority of interview processes are rarely measurably accurate at preventing false positives AND false negatives, most tend to sacrifice the later for preventing the former.

I'd be more impressed if someone ran PC-BSD zfs on a homemade laptop.

(Disclaimer: written on a hackable non-Retina MBP, not that it matters. 2 SSDs + 16 GiB in 13")
Show HN: Swarmcombat – Swarm AI game
I agree with what you said, but I actually quit watching TV (I got rid of cable like 3+ years ago, Netflix only nowadays) because its just talking heads on the news and no actual news.

I'm 30. What happened 50 years ago I wasn't here for. What happened 20 years ago I didn't really understand. All I know is what has happened over the past 10-15 years.

What I see is a worldwide communication network (the Internet) slowly being criminalized because of the actions of a few people: the big bad pedo/piracy/terrorist boogie man that some elected officials keep dragging out to shove anti-free speech and anti-small business legislation through the system.

Those who give up liberty for safety deserve neither.
Founders Talk: Integrate London
Sure: http://forum.dlang.org/help#about
I'd say matrix multiplication is far more common than complex numbers, and Python natively supports those.
EU court rejects requirement to keep data of telecom users
Nethack 4
decentralization is hard.

To put in different terms its like trying to control a plate of marbles with a single pencil.

you can only manipulate a small portion of of the marbles, and you hope that the commands you give them will propagate and not run out of control.

Nowadays its perfectly feasible to control 10,000 servers through one system running on two or three servers. with some work that could reasonably be pushed to half a million.

That'll basically take of 99.99% of all companies needs.
No, what Brendan helped pass was worse than anti-miscegenation laws. With the latter, you might not be able to marry your first preference, but there are plenty of fish in the sea. If you're gay, in post-Proposition 8 California, you could not marry anybody you were attracted to.
No offense intended. I just have a slightly different understanding of a "scripting language": a — often domain-specific — language that is merely used to write small scripts/macros. But anyway, I did not want to start a discussion about that. Sorry for that.
I would say the perception for me is just that mobile browsing just sucks overall. Most of these apps are also slow as hell for me.
Me too. And I feel they won't be the fastest here ... Certainly a downside of Heroku, where you cannot just re-compile and fix things yourself.
If your process space is public, you don't.

There's probably the potential for segfaults, though, since the code might read past all allocations.
This new CEO search will be very difficult as all candidates will have to go through a very detailed screening processing (well a good search should require that anyway). In particular, anyone who lives in CA and has voted someone who is not in favor of gay will be tossed out right away.

Any company that jumps into a heated controversy like this is not acting heroic. Their actions are merely to strengthen the heat. It may appear that OkCupid is really just after that PR stun given how the CEO may have been against LGBT community by voting someone who is against LGBT. One might defend OkCupid's CEO by saying "well maybe he was voting him for some of the candidate's agenda, not the entire agenda. After all, no congressman has perfect agenda that everyone likes. You either choose someone you totally disagree with or someone you partially disagree with, or someone you think is actually helping and caring about people."

When we reflect, doesn't that make this whole crisis really stupid and ugly given how we elect people into office based on partial agreement? How Eich is helpful, friendly to his colleagues at Mozilla and outside of Mozilla and yet he is still not the right choice to lead Mozilla.

After all, Mozilla's mission IS ABOUT allowing every community to be able to express itself to the whole Internet. How do we do that? By building a browser which people can trust by verifying the source code. By building websites and tools which allow people to share opinions freely. By teaching people how to make use of technology to share opinions.

Choosing Eich might have been a really bad choice now that we reflect on history. CEO search will continue and will require triple efforts. Great lesson for all future CEO search. Yet, Mozilla has to take a lot of losses which is unfortunate.

I don't like OkCupid. What they did was truly amazingly reckless to me. You can disagree with me all you want. But it is. If you are going to boycott Mozilla over this LGBT issue, where was your boycott when we found out about NSA? Where were you OkCupid when we heard about Russian's ban on gay when the Winter Olympics was happening? There is so many worth causes for a service owner to display a boycott message to its users. Dying children and poor labor in the world. But most don't do that. Why? Neutrality for a neutral service is the right thing to do. Now all the sudden ganging up on Mozilla is fishy to me, OkCupid.
Just wait for High-end device like Samsung Galaxy S5, HTC One M8 and Sony Xperia Z2. Apple forces iOS user to upgrade to latest OS because most of the apps in the Apple store will not work if your iPhone or iPad is not updated with the latest version of Android.
http://uncrunched.com/2014/04/06/the-hypocrisy-of-sam-yagan-...
I nearly lost my job at one point in my career because I played so much Nethack at work.
With @ as a grammatical infix matrix mult operator, there doesn't seem to be any real need beyond exclusivity to redefine the decorator grammar. By the same argument, we shouldn't use * for unpacking.
New Performance Standard for Mobile Native Ads
> but Eich could have just admitted that what he did was wrong

While that may have "fixed" the issue, you have to admire him for not taking the easy route and telling this lie.
There's no "just use X" type of answer in security.

Sep 2013

"All versions of the open source Ruby on Rails Web application framework released in the past six years have a critical vulnerability that an attacker could exploit to execute arbitrary code, steal information from databases and crash servers."

https://groups.google.com/forum/#!topic/rubyonrails-security...

Nov 2013

"A lingering security issue in Ruby on Rails..."

http://threatpost.com/ruby-on-rails-cookiestore-vulnerabilit...

Dec 2013

"Ruby on Rails security updates patch XSS, DoS vulnerabilities"

http://www.infoworld.com/d/security/ruby-rails-security-upda...
Heroku Product manager here, we're working as quickly as possible to assess and address all details around the issue. Three hours is our worst case to provide details as unfortunately is has been a slow evolving incident, though all hands are on deck and we're working to update status.heroku.com as broadly as possible as well as more direct channels.
Tony Hoare (Mr. Quicksort, CSP, etc...) has softened his stance since "The Emperor's Old Clothes", but his concern was that ADA is too complicated to be understandable and safe. I hated Pascal because the array length was part of its type... but maybe that kind of thinking is apparently what it takes to avoid bugs like Heartbleed.
How to root Samsung Galaxy S5
The real world is too complex to analyse. Theory works by analysing a simplified model of the world, with the hope that essential characteristics are maintained and only irrelevant details are ignored.

Take the analysis of algorithms. I expect most of the analysis you've seen assumes memory access takes constant time. This hasn't been the case for a long time, due to caching. Now most people don't really care about performance so it's a reasonable simplification. However some people really care about performance and thus need a more complex model. See cache-oblivious algorithms for some work that addresses this. When you get to the level of assembly language optimisations no model is going to help you. You just need to benchmark the code on a real system.

Similarly in distributed systems we work from simplified models. This is fine for most of us, but Google has one of the most complex systems in the world. Naturally their requirements are a bit off the beaten track, and perhaps not adequately addressed by theory.
I don't know, if you live in mountains or an archipelago maybe it makes sense.
Our servers in us-west-1 are still showing as vulnerable sometimes. Even with that 99 designs link, if I refresh sometimes if passes and sometimes it fails. Possibly the patch is still being rolled out?
better just to have and __in__ no?
Malloy Hoverbikes – Development Version
GDC 14: Women Don't Want to Work in Games (And Other Myths)
65505 tests as I work it out as it's unlikely to be non-byte aligned:-

256 bits is 32 bytes

If you get 64kB of payload data back each time then it can only contain 65536-31=65505 different consecutive strings of 32 bytes.
What would you advocate as memory safe programming styles? Strong guarantee? RAII?
Another (late) voice that prefers forums over mailing lists.

One argument about what that I haven't seen so far in this discussion is that I can go to check the forum whenever I want (and not go for a couple of days if I decide to) whereas a mailing list is more like a push model where you receive the emails no matter what, even if you can't take care of them for a couple of days.

I have to say that I have very little experience with newsgroup though, so it might be a best of both world, but let's face it, it has becomming almost inexistant.
> a mobile browser with super-aggressive caching

ServiceWorker (WIP) will do this. Its a WebWorker proxy in the browser's request/response pipeline for a particular origin, with a new cache API built on local storage.

It can process page requests and responses with similar semantics to what a WSGI/Rack/MVC controller normally does on the server. It does away with bullshit 'offline mode' divining and encourages apps to work 'offline first'. https://github.com/slightlyoff/ServiceWorker/blob/master/exp...

The polyfill is actually a node.js headless implementation, which makes this look more and more like an isomorphic controller API. https://github.com/phuu/ServiceWorker-Polyfill

Jake Archibald's talk at Chrome Dev Summit, December. https://www.youtube.com/watch?v=Z7sRMg0f5Hk

Chromium bug. https://code.google.com/p/chromium/issues/detail?id=285976
perhaps it's on the "cures" side...
How about D?
Google I/O registration delayed to 4/15-4/18
Why was the reaction obvious? Didn't everyone already know about his donation from a couple years ago?
Hacking Hack with Docker
Don't optimize your software prematurely
Is it really a tiny load? Have you ever looked at the throughput values quoted for VPN routers that do their encryption in software (not hardware like the expensive Cisco ASAs)? If you compare the non-VPN throughput with the VPN-throughput, the software encryption is massively massively slower, so I would argue that software encryption is not a tiny load on a normal webserver, unless the webserver was not getting any hits...?
European court declares data retention directive invalid
Great news, though I guess politicians will find loop holes in this decision that will let them do it anways, albeit slightly differently.

I also wonder if this could have implications on drag net data collections by intelligence agencies.
How CloudFlare got patched last week and AWS not?
Your HTTPS certificate throws up errors in Firefox.
> Are you seriously suggesting that there might be a better way for us to communicate and express ourselves concisely?

I've never suggested any such thing. In fact, I hinted at just the opposite when I wrote

"The flaw is to assume there is only one mental model that Visual Programming Languages should operate under: say only workflows for example (a mistake all VPLs I've seen have done)."

I wrote a blog post on VPL - Snapshots (https://news.ycombinator.com/item?id=7274674). The pattern I noticed on these VPLs (of which there are close to a hundred in that list now) is that they all attempted to use a single mental model (some are flow, some are spatial, some mathematical, etc.). None of them support different mental models (say flow based when defining business process and mathematical when defining equations).

The flaw is assuming a single mental model can be used to most efficiently describe all real world systems. Given a real world system, there may be one or more approaches used to efficiently describe that real world system in a computing device. That mental model could be textual, it could be visual or it could be both.

Taking the position that no VPL(s) exist that could better describe a particular real world system better than a textual language is standing on loose ground. Perhaps a general purpose domain agnostic VPL doesn't exist (yet), but VPLs shine for some domain specific solutions (gaming engines for example).

> Are you seriously suggesting that there might be a better way for us to communicate and express ourselves concisely?

I'm suggesting that to assume otherwise is limiting our chances of growing Information Technology as a community. I'm suggesting that if we "get it right" then our programming abstractions would be equally useful and descriptive in both a textual and visual language formats.
human behaviour and the environment can't be modelled. Real traffic is bursty. Analytical tools have to parametrize noise into unrealistic distributions like Gaussian, Poisson in order to get an answer. Real data has lots of hidden dependencies which is hard to model. An earthquake might make everybody in a geographic area use the internet at the same time. That kind of cross correlation is hard to model correctly. The only sure way of knowing a system behaves well in a realistic situation, is to run it. Real data can answer questions like how big the caches need to be etc.
DynDNS quits free accounts
(translated from German) It seems they are sending emails to their customers that they are quitting their free accounts within 30 days.
That's brilliant! Thanks :-)
After a few years in Scala, where all operators are methods and vice versa (2 + 3 is just sugar for 2.+(3)), the method-operator distinction just seems weird.
"To make a system sufficiently configurable, you end up having to re-invent a turing complete language inside it's configuration files"

This sums it up perfectly, I've had clients say 'oh and it has to be 100% customisable' and I've been like 'it is, it's called HTML, CSS and js'
Thanks - the goal is to have no authentication whatsoever. I can't guarantee that all the kids are allowed on Facebook - and I want to minimise the amount of "magic numbers" they're exposed to.
I played with DMARC about a year ago. I put it in monitoring mode so that I'd get email reports from systems to tell me when they received emails from my domain which failed DMARC. I started getting them from all over the place. Pretty much all related to mailing lists breaking the DKIM signature by rewriting headers or the body. My conclusion was: If any email address on your domain subscribes to one or more mailing lists, DMARC will break your email. I disabled it. I don't see myself enabling it again any time soon.
Which is fine, but that nobody admits to that. How many vinyl enthusiasts would be just as ok consciously listening to a digital creation of the pop and scratch filter they enjoy? PVC is as awful, environmentally bad material and heavy to lug around. Why wouldn't DJs rip their vinyl to digital or just apply a filter to digital sources?

Most enthusiasts believe vinyl is actually better (quite adamantly) and that's what this experiment would test.
They should call their team AnttiMattR

:"(Riku, Antti and Matti)
Why you should stop communicating ETAs?
>I guarantee that you will miss many subtleties if you don't connect with folks in the field. Enough that you are face a lot of hurdles trying to pass your work through peer review.

This translates to, "you need to learn to speak the correct dialect of bullshit to get into the club."
It's interesting that you use the euphemism "political opinion" for oppression. The reason this was an issue for Mozilla was not because people have strongly held views on carbon permits vs. carbon taxes but because Eich went out of his way to help take rights away from an already oppressed group. This is truly disgusting behavior that many people (not just gays) rightfully wanted to distance themselves from. The fact that Mozilla draws most of its contributors from progressive engineers put the organization on the brink of an existential crisis, which is more than Eich could overcome with any of his technical plans as CEO, no matter how well thought out those technical plans might be. He had to fix that situation by admitting he was wrong. He didn't, making him an unsuitable CEO.
Hi All, I have benefited from zidisha loans. Currently am on my third loan >>https://www.zidisha.org/microfinance/loan/Shehi/4590.html . The interest rate is in two parts: one part 5% fixed (transaction cost) and the second is flexible ( set by borrower when applying for a loan. For example my loans average at 13-15% annual interest. Zidisha loans help and are affordable compared to kiva intermediadies like Milango microfinance ( about 29% plus mandatory monthly savings) & SMEP microfinance. Thank you
Makerbot does have a patent on Automated Print Beds [1], which is probably going to be an issue for companies attempting to 'replicate' it ;). There's some discussion about the patent here [2].

How's the site going Wil?

[1]: http://www.google.com/patents/US8226395
[2]: https://groups.google.com/forum/#!topic/makerbot/ikS4bfQy7KM
Started coding at the age of 10 with ZX Spectrum BASIC, followed by a little of Z80 then again GW-Basic, Turbo Basic, and then lost count how many programming languages I have learned and used ever since.
If you assume opportunity cost is nothing, then that's great.
Facebook Collapse Will Continue
Safe air corridors is an innovation that should predate flying cars. Safe for occupants & safe for surroundings. Fender bender in air can cause a lot more damage with gravitational force.
Roundcube Webmail 1.0.0 released
Great idea, I just setup an RSS-to-slack trigger for future notifications: http://zpr.io/HSkn
I'm so tired of reading "I didn't want him to resign; just to lie and say he thinks he was wrong."