skysight-inc/HackerNews huggingface dataset:
The first (and stated) effect of this policy is to weed out the unmotivated employees.

However, Dan Ariely has explained that the secondary effect is potentially more powerful. For those that choose to stay, they will forever live with their past action of having turned down lots of money to work there. So, when they're having a crappy day and hating their job, they're probably thinking "why didn't I take the money and quit?!". The only way to reconcile their thoughts and actions is to explain that, in fact, they must really love this job and therefore should work hard at it. This effect is known as ‘Cognitive Dissonance’[1] and is fascinating.

Here's a link to a video of Dan explaining this[2] and a really excellent Coursera course he does on Irrational behaviour[3].

[1] http://en.wikipedia.org/wiki/Cognitive_dissonance

[2] http://bigthink.com/videos/dan-ariely-zappos-and-the-offer

[3] https://www.coursera.org/course/behavioralecon
Actually, your reimplementation can be identical to the original, in a language like ATS, as demonstrated by the article in question. This is one of the things I find very compelling about ATS.
Is this running on an off-the-shelf nginx or your custom version ?
I very much agree with this. A great way to weed out employees who aren't happy there, and as such, will be unmotivated, unproductive, and bring down overall morale.
Zappos pays you $2,000 to quit... during the recruiting process

http://www.businessweek.com/stories/2008-09-16/why-zappos-of...
I never understood why internal or external entities were included in XML. Can anyone explain what useful purpose they serve?
Check this answer:
http://security.stackexchange.com/a/55539/15901
nice write up. we saw similar results in that the keying material never made it into the memory leaked.

i've never felt so thankful for a memory allocation pattern.
I love you Express, but my next project is going to be based on TJ's own Express successor: http://koajs.com/
I would be amazed if anyone accepted this offer, it's not enough money to justify making every other job interview afterwards harder. I bet it's just a PR trick to make them look like better employers after the warehouse conditions were exposed.
How Often Should You Blog | JaysonFeltner.com
Navy researchers demonstrate flight powered by fuel created from seawater
Be a beginner at something, everyday
Why your next RFP won't work
Because TDD is the "new" magic bullet, replacing all the magic bullets before it. Also, TDD works great retroactively on large open source projects with vast histories.
(Not the creator) Show HN: Fuzzy-seach autocomplete (+more) for Xcode
As the title says, I'm not the creator of this. But it has made Xcode a billion times more nice to use for me so I thought I'd show it to anyone who may see this post.

This is the official repo: https://github.com/chendo/FuzzyAutocompletePlugin

I installed it via an xcode package manager http://alcatraz.io/

And while I'm at it. You can check out OMColorSense which improves using UIColors. And also Xcode_copy_line which will copy/cut the entire current line if nothing is marked.

The last one + the fuzzy search have made Xcode more like sublime for me which is a huge plus.

Anyway, hopefully someone will read this and like it!

EDIT: Another thing I use is "wakatime" which automatically tracks usages. It even groups the data based on project via git! For data-privacy-whatever, see the website. Might not be for everyone. This plugin also exists in the package manager I linked above.
I wonder what would have happened had you reserved your comments for a private conversation with someone in upper management. That is how things are done professionally.

I agree with everything you said to them, but had I been in their position, I might not have fired you, but I would have given you a serious sit-down.

Management may be clueless, but when, from their perspective, they are trying to incentivize their employees, you don't publicly humiliate them in a manner that is sure to cause friction with the very employees they are trying to incentivize.
Quick tip: code in, binary out via STDIN / STDOUT

Check how flynn's slugrunner / builder does it
https://github.com/flynn/slugrunner/blob/master/runner/init

This way you don't need to generate an actual dockerimage for every single build
I hope it doesn't get unnoticed that the guys who discovered this vulnerability created a really great product, Detectify :

https://detectify.com/

They also discovered vulnerabilities in many big websites (dropbox, facebook, mega, ...). Their blog also has many great write-ups : http://blog.detectify.com/
The article claims that CloudFlare had their systems updated 12 days ago. I thought the bug was only found 7 days ago.
http://www.vocativ.com/tech/hacking/behind-scenes-crazy-72-h...
Honestly, I just want to be rid of all these accounts. Either use an oAuth provider or give me some kind of fast e-mail based auth (like a "reset my password" thing without actually going through the process of resetting the password - just log me in when I click the link in my e-mail).
New ruby on rails 4.1 feature: ActiveRecord enums
The Most Expensive One-byte Mistake (2011)
Can Mobile Apps Heal American Healthcare?
Don't remember the link but yeah that was pretty good :)
Emigrate. We appreciate the intelligence and skill of our Russian hacker friends. Let's not lose a generation of highly-skilled talent due to psycho-nostalgic policies. You guys have come too far for all this.
There is a chart (unfortunately without source) going around comparing different SSL implementations. In this chart there are situations in which PolarSSL accepts a certificate when it should not.

http://pbs.twimg.com/media/Bk0DY8XCEAAPpS7.png:large
Sounds like a good use for Namecoin and .bit domains.
1. Because you'll be dealing with organized criminals, which is dangerous and brings problems beyond the mere possibility of getting caught.

2. I'm assuming your basis for "no moral questions" is because you'd be hurting Google, which is a corporation, not a human, and can therefore be treated with a different set of moral values. (If this assumption is incorrect you need to clarify.) However, selling this exploit on the black market may very well be leveraged to affect a lot more people than just Google. People that will be phished, scammed and extorted. That (I hope) does pose moral questions, doesn't it?

The problem is, you can't sell an exploit on the black market on the condition that it may only be used to (say) "steal from the rich and incorporated".

3. Finally, $100k earned on the black market is not worth the same as if it was legitimate, because it is very hard to spend. I can imagine that a process of white-washing could easily knock 50% off the value, as well as taking a lot of time and effort. Then you got $50k, which is already a lot closer to $10k.
Sure, De Raadt/OpenBSD are bitter about the lack of funding but that does not explain anything about this mysterious hole.
This email can mean anything. Does Kirk McKusick know about this hole and has he pressured De Raadt not to disclose it (for what reason could that even be?), or is it a vague reference to a fallout he had with him earlier(making this an absurdly petty reason not to disclose it)?

Just dropping that hint is ambiguous drama baiting.
A HN user's idea of "user friendly" likely varies from the average.
No worries. My reply turned out ot be not entirely correct either so :D
Dell Latitude D630 Battery
Dell Latitude D630 Battery
I think its key to keep in mind a couple view points here, that all try to minimize going to black and white.

a) Consider that in general, treating the cause is more effective than treating the symptom, even if you find that kind of unsavoury. No doubt the pirates have done some bad things that are (and should be!) crimes. But just piling on the warships and spec-ops to interdict/kill all of them isn't exactly the best way to solve it, as it appears to leave one of the root causes of the phenomenon untouched anyways. We can draw parallels to American street gangs. Yes, they do totally crappy stuff. But now that we bothered studying them, we can see part of the reason of their existence is that they fill a hole in the lives of many young people in certain situations. This by no ways truly justifies theirs actions, but helps explains them, and ultimately if we want to resolve the problem in a real way (beyond just killing them all), we need to listen.

b) Worthy causes can be linked to unworthy actions. People struggle with this all the time. Some people have trouble allowing any blemishes on the characters that lead their cause. Other people relish in the blemishes, and use them to discredit the entire movement. Typical examples are the slave owning Founding Fathers, and the plagiarizing Dr Martin Luthur King.
Did you see this? http://www.mondaq.com/unitedstates/x/305590/general+immigrat...
Q&A: Dr John Hunter – The man who wants to shoot the Moon
Big defense contractors have a yearly VRIF (Voluntary Reduction In Force), which is when they offer slightly better than average retirement packages to expendable older employees. Young people would never get the offer (because they couldn't retire) and important older engineers would also never get the offer, even though many of them wanted it. This is a big improvement over that since it can be used by younger employees and the employee decides unilaterally if they want the package.
Why We Made a European Alternative to Hacker School
HN, funny button?
Yes and there is a slight formatting bug where it appears "What a douche you are" is in reply to "Would Neel Mehta be ineligible collecting via his employment at Google?"
Ask HN: monoglot vs polyglot culture
I'm really frustrated right now with how Python-centric my company has become. Don't get me wrong-- I love Python, but the number of times we re-code other projects into Python makes me think it would be smarter to have polyglot programmers who can contribute to multiple projects in multiple languages.

We do a lot of open-source work but are very limited to what we can use since it has to be in Python.

I think it would be hard to get actual numbers to support either side so I figured I'd ask the community for feelings.

Data welcome too!
I have used something like that before too, but it worries me.
If I found that password here I would immediately notice that the last two characters stand out, and see the pattern.
How does it make other interviews harder? Saying you left because you felt the company wasn't a good fit for you and they offered you a sum of money that gave you a little leeway to plan your next move sounds perfectly reasonable to me.
[Weekend project] XHR.io – serverless web takes a leap forward
Out of curiosity, what happens if you send a DMCA to the actual company who's responsible for the content and they don't respond?
What makes you say they didn't? They probably just don't care.
The usual idea is that while tests demonstrate the existence (and subsequent removal) of particular bugs only types (or proofs) show the non-existence of whole classes of bugs.

Such integer checks as you suggest are nothing more than a number paired with a proof that the number is less-than some bound. The properties of those proofs cannot be faked and their proper management and construction is all handled at compile time... Then erased.

I challenge you to write a red-black tree with the RB invariants exposed in the types and then continue to say languages do not exist to protect you from yourself. The moment these things end up in types the language starts to pull back on you.
For the command to match the description, shouldn't that be "echo -n"? Otherwise the signed string would include a trailing newline.

I do not expect this will make a material difference to the challenge - presumably you used the quoted commands to generate the answer.
Does speed really matter?

Yes. C++ is chosen by developers who tend to choose performance over elegance.

When I was doing a lot more C++, I was intimately aware of the deep performance implications of choosing one data type and implementation technique over another.
ssl_certificate /home/nick/ssl-bundle.crt

ssl_certificate_key /home/nick/server.key
It's marked as static and isn't used anywhere there, so it's not an issue: they have an up-to-date version of upstream OpenSSL.
> during the 2004 Indian Ocean tsunami when broken hazardous waste containers eventually found their way onto Somali shores leaving a large majority of the population suffering from various illnesses, such as radiation sickness

This sounds extremely doubtful. Tsunami-borne hazardous waste containers breaking up in Somalia en masse? Radioactive waste!? And a "large majority" of Somalians were poisoned by this?

I don't usually like to play the wiki-pedant but a very big [citation needed] on that.
VLC was pulled from the AppStore due to incompatibilities between GPL and the AppStore distribution method (DRM).
CVE-2013-1493 is more an argument for java - the vulnerability exists because that part of the standard library is implemented as native code rather than in java itself.
There is a famous example of a technique that takes only the first letter from each word of the phrase.

That is the problem - people trying to break passwords use the exact same techniques. Compiling a list of ten million famous phrases is not hard. Generating a hundred commonly used variants of them is also easy. And checking one billion hashed passwords - MD5, SHA1 or SHA256 for example - takes less than one second on a current GPU.
> I have no idea why the payload is variable-sized

For DTLS path MTU discovery (according to the heartbeat extension RFC).
But you can’t just name one bad thing a person did and say they are a bad person, no more discussion about it. That just makes no sense at all. It’s such a minor thing, too. His wage fixing together with Google and other companies is much more recent, relevant and much worse.

At the very least Steve Jobs was an intensely interesting person. I don’t think characterising him as a bad person makes much sense. This is such a simple-minded worldview.
Its dual-licensed, you can use their non-GPL licensed code
Or SQL:

SELECT x*x FROM vector;

There's just so many things that SQL got right:

- Non-programmers actually read and modify SQL code. I swear, it happens. It doesn't happen very much even with Python, and it will never happen with C++.

- It can join multiple data structures in a single query, on arbitrary criteria.

- A query can be optimized as a whole. Optimizers freely reorder the parts and actually come up with good plans.

- The presence or absence of indexes (data structures used for acceleration) is transparent to the query. Can any other language do that?

A lot of the code I've seen would be 10x to 100x smaller if expressed in SQL, or an SQL-like language that can handle nested data structures (which is something that I really want).
I think the important difference here is that with browsers, the behavior is well-known and well-understood, there are a very small number of them, and you're unlikely to run one in a production environment -- barring, say, something like PhantomJS, which still has all the foregoing in its favor.

This compared to XML parsers, for which there are often multiple per language, each of which may be implemented to wildly different levels of sophistication re: security.
It may not be okay, but Simon may have no choice but to steal.

Some of the things we do (in the US and other developed nations) have far-reaching global consequences, in certain cases destroying lives and livelihoods. But we're always outraged when these affected people react in ways we find uncomfortable.
Matt Cutts Gets New ‘Melody’ Treatment it all good fun
You all are involved in so many great open source projects -- just wanted to give a shout-out to Conformal. People do notice and appreciate your contributions.

How many full-time people are working there?
Earlier, projects like BusyBox[1] and FFmpeg[2] used to have a "hall of shame" where they listed products (mostly DVD players, set-top boxes and routers) and companies that used the GPL'd source without attributing and publishing back their source code. Nowadays, both projects point to Software Freedom Conservancy in questions of license enforcement.

1: https://web.archive.org/web/20130116093247/http://busybox.ne...

2: https://web.archive.org/web/20101214233906/http://ffmpeg.org...
Your point is valid and correct. However, if your comment was meant for me(submitter), I only submitted something I found interesting. I don't endorse such claims.
Part of the problem is that everything wants a strong password, but probably doesn't need it. Your bank, paypal, amazon... passwords should be strong ones, and probably unique. The passwords for random message boards you don't have a stake in might as well be password123 unless the account somehow links to something sensitive.
For me, part of securing important logins was sorting out the useless ones. That means your HN password probably shouldn't be N0_one_knocks_of_old_TonyHN either. Its just not worth it.
This? https://xkcd.com/932/
The other side of the license is commercial.
I love the new Router design, but I mainly use Restify[1] to build REST APIs for SPAs. How easy would it be to use port Express's new Router to Restify?

[1] https://github.com/mcavage/node-restify
Android fragmentation turning devices into a toxic hellstew of vulnerabilities
While convenient to paint a picture of everything being messed up and different than previous generations, none of this is at all accurate. The difference is that we lived through the Bush administration, remember it vividly, and many of us disagreed with nearly everything that happened during those 8 years. And it just happened, so it's still fresh(ish). As the saying goes, "everything's different, everything's the same." I agree those years were really bad; whether they were the worst or whatever is relevant only to someone trying to make a broader point (which I'm not).

Personally, in most cases, I don't have a problem with hiring someone based on their merits, despite what their past job was, or even what their political beliefs are (see: Brendan Eich). Apparently Condoleeza Rice is extremely smart, capable, and, as the former Secretary of State, obviously well-connected in the international community.

And while you made a pretty good attempt at equating her to Dick Cheney, she's just not Dick Cheney.

At the end of the day, this is about Dropbox, not the Bush administration, and if Drew Houston has a spine, nothing will change about this situation.
It's the word for leaving one country for another. Their reasons for leaving may vary, but its the best word to describe it.

http://en.wikipedia.org/wiki/Defection
I've been learning game dev recently, i'm a web dev by professions so it's acting as a nice refreshing change to code at night. It's been difficult to find quality resources for someone who is an experienced programmer but unfamiliar with the principles of game development. I had stumbled across your site numerous times, noted the quality of the work and finally bookmarked it few weeks back.

In case you're ever lacking motivation, just think that the work has been invaluable to someone like me coming to game dev for the first time. It's a truly excellent resource and i will surely buy the book when it's released. I'm signing up for the mailing list now.

Thanks again for your hard work

EDIT: I even just noticed that I even had the site open already, right at the back of my massive stack of open tabs :)
Where would you look?
Drama baiting is something Theo de Raadt is good at. :)

I have a feeling it has less to do with something sinister, and more to do with Theo's very vocal stance on the security situation in FreeBSD.

http://www.itwire.com/business-it-news/open-source/62641-cry...

Most likely the FreeBSD kernel or libraries are doing something in a certain way that Theo finds insecure/insufficient. (Justified or not)
I would be shocked if Neel was wrong about private key exposure AND it is a nation state that highlights his misunderstanding.
Good thought, though I would think that the reason behind a ton of government offices suddenly dropping SSL would've been leaked by one of the many hands involved.
GoDaddy Supports Women in Technology: Sexist Image Changing?
I didn't view it through a partisan lens. I don't give a damn what party Bush or Obama belong to -- they've both been horrible presidents from an international relations and domestic privacy/constitutional rights perspective, regardless of what letter comes after their name.
The challenge web site is running stock NGINX.
It's cool seeing other people's attempts to extract the key in my return buffer.

It's like multiplayer microcorruption.com
Why would he say that and not reveal the vulnerability ?
http://faculty.cs.wwu.edu/reedyc/AdaResources/bookhtml/ch05....

Ada, and probably other languages, allows subtypes that restrict usage to a range of some other type. 2 sections below that is modular types, so you don't have to put in the `mod 500` or whatever your code needs every time, the compiler will fill that in for you as long as you are using that type.
Yes, many fail to understand that most C++ warts are caused by its C compatibility and are actually C issues.

Which incidentally also affect Objective-C for the same reasons.
Client Porn: Recovering from the Destructive Power of "Ideal" Clients
The mechanism at work might be https://en.wikipedia.org/wiki/Sunk_costs
Slow down. Breathe. It's over. You no longer work there. You are safe now.
PolarSSL forked from BSD-licensed XySSL (no longer maintained) in 2008.

It would make some sense to backtrack to the last BSD-licensed PolarSSL release and work from there.

There are some projects attempting to do so: https://gitorious.org/tropicssl
I recall hearing about that for Zappos, but here the offer is repeated every year. Doesn't that ruin the effect - you know you can get (potentially even more) by quitting in a few months? And if it's only offered at certain times of the year, then there'll be a bunch of people hanging on until the offer comes around again.
9 lessons learned building SaaS
It's a good idea but even if nobody successfully exploits this particular website with the heartbleed bug doesn't mean much for the rest of the vulnerable sites.

Since the bug exposes a few kilobytes of uninitialized malloc() memory the kind of data the attacker will retrieve is heavily dependent on the software the server is running.
Heartsuck?
Satellites Show Russian Forces Poised Near Ukraine
Could sympathy not have played a part? Given his position, Jobs could conceptually have held himself responsible for enabling poor nutrition.

Indeed, most organizations that offer on-site catering have such paternalistic concerns. Google historically (I don't know if it still does) limits and effectively taxes unhealthy food, while providing healthy food for free. Does that make Sergey and Page sociopaths?

I will add the disclaimer that what is healthy or not is a passing fancy, enduring unending change. But people act on the best knowledge they have, and often the best intentions.
Is anyone in their programming job given several distinct questions and only 3 hours to solve all of them?

A more realistic programming test would be a single, complicated problem with an "end of day" time restraint.
This is a plan only that probably will not be accepted